Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144107.roa
File: AS144107.roa (raw, json)
Hash identifier: yBeQDDDkfqxs/8TFF7qI68cNswKYxf58R4Z2ZYiFIw0=
Subject key identifier: 13:4C:BC:6E:14:14:F3:A5:9B:EB:14:72:24:66:5B:DC:E1:11:D9:DE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5C98628AD09337EAB6198A5C27C6454988922DFB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144107.roa
Signing time: Tue 26 May 2026 06:30:45 +0000
ROA not before: Tue 26 May 2026 06:25:45 +0000
ROA not after: Tue 25 May 2027 06:30:45 +0000
asID: 144107
IP address blocks: 240a:a5b1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:98:62:8a:d0:93:37:ea:b6:19:8a:5c:27:c6:45:49:88:92:2d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:45 2026 GMT
Not After : May 25 06:30:45 2027 GMT
Subject: CN=134CBC6E1414F3A59BEB147224665BDCE111D9DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c7:d9:e6:d5:27:40:3d:9a:e1:2d:36:9f:8d:
c4:21:e9:9e:71:f6:98:f0:6f:7f:c4:bc:d4:0c:d3:
88:48:60:ce:5f:6e:eb:06:3f:7d:48:d1:d0:69:be:
e6:61:05:cf:87:58:2e:6a:54:d1:b9:1b:72:05:f7:
c3:6b:40:aa:c4:55:8a:23:41:f6:9e:5c:38:dc:fc:
e7:b2:79:73:36:f9:5b:f5:37:f7:76:5c:7a:70:67:
cb:00:23:a0:f7:eb:61:7e:18:b0:8f:b0:d8:71:d4:
ae:b4:07:bb:0a:cb:73:bb:d1:08:a6:e8:8f:07:18:
30:34:ab:98:c3:55:77:9a:91:83:ac:ab:b3:ee:b4:
c0:94:9a:bd:d6:ff:13:23:3c:df:cb:a7:05:32:57:
a0:0b:f5:da:1a:34:d2:64:04:c4:64:49:0e:5b:a8:
ae:29:23:7d:df:b6:31:92:3b:41:b2:c7:cf:67:92:
c5:35:c4:99:a7:4f:fa:55:57:61:c4:a7:8e:2e:4f:
8e:d4:9b:df:bb:b1:58:b2:7c:07:16:22:55:a3:57:
0d:d7:b1:5b:21:47:7f:ad:d8:ec:ef:c6:9e:9d:5f:
8d:25:dc:a2:41:9b:10:8b:40:00:e2:98:0b:4c:f7:
51:6f:ef:a3:17:aa:ae:94:26:6a:b1:b7:70:d9:52:
aa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4C:BC:6E:14:14:F3:A5:9B:EB:14:72:24:66:5B:DC:E1:11:D9:DE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144107.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5b1::/32
Signature Algorithm: sha256WithRSAEncryption
5a:11:95:57:01:5a:e1:c4:ae:06:fa:f3:02:26:f9:ba:d9:f1:
54:8b:8b:07:bc:7e:f4:f9:27:4f:12:c5:0c:e3:6b:61:db:c4:
50:f7:42:ce:a4:36:9d:23:b0:73:4c:6f:3b:ee:6d:97:62:cd:
83:dd:31:ef:0e:51:90:42:6f:27:e3:e9:dd:0f:05:d7:19:90:
97:da:93:c8:82:1f:7d:d0:9a:76:94:f8:52:ff:ad:38:c2:9a:
4f:d2:f8:1f:8c:a4:85:22:e3:e2:d6:8c:bc:eb:36:83:13:86:
1d:11:f6:48:aa:67:bf:70:d1:f9:4b:4a:17:50:46:cf:6a:ef:
eb:30:ba:ea:5a:12:51:a7:37:ae:2c:78:41:c0:67:78:2b:1f:
fd:b9:e1:e1:5c:ec:2c:43:6b:c6:27:f2:fb:bc:92:3e:d5:e7:
08:43:b4:04:04:e0:c8:74:68:70:9c:f6:df:d5:ba:53:5b:00:
5b:d7:43:0b:62:7a:a2:26:97:2f:ad:96:b9:d4:b6:4c:8b:aa:
29:a2:72:14:89:87:0d:20:0c:d5:46:71:c5:d1:33:de:7e:32:
a2:ca:fb:c9:a0:63:e4:56:8b:e1:64:6f:c2:5d:85:95:89:3a:
96:e2:b7:60:e9:64:a5:02:a8:35:c7:e7:a7:0f:6f:89:28:e9:
18:b0:6c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:18 2026 by rpki-client