Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144109.roa
File: AS144109.roa (raw, json)
Hash identifier: V2Lojn3OaXaqg/dr9w1Crvp6tKH9PuB2ijB7qWCshQ8=
Subject key identifier: 81:05:09:E9:82:A4:02:55:B2:0F:CA:3E:2A:20:66:7D:0C:9F:5A:60
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 02A7F797CD504AC695F8110BBECA7E0C71124F8A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144109.roa
Signing time: Mon 25 May 2026 06:28:36 +0000
ROA not before: Mon 25 May 2026 06:23:36 +0000
ROA not after: Mon 24 May 2027 06:28:36 +0000
asID: 144109
IP address blocks: 240a:a5b3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:a7:f7:97:cd:50:4a:c6:95:f8:11:0b:be:ca:7e:0c:71:12:4f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:36 2026 GMT
Not After : May 24 06:28:36 2027 GMT
Subject: CN=810509E982A40255B20FCA3E2A20667D0C9F5A60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:a2:2c:6e:35:e3:11:f1:0f:d1:87:7d:00:
b0:e6:a2:4d:96:51:89:cc:aa:bd:77:cc:ee:ab:a9:
bb:84:ac:6d:eb:a2:fb:2d:65:bc:ea:3e:9d:20:92:
99:b8:52:9a:b6:68:01:fd:7b:5c:81:cf:cd:d2:d5:
a2:01:1a:b4:2b:23:8a:a1:16:87:44:85:d2:98:76:
8c:5a:2e:37:7a:86:9e:7d:67:ca:84:98:07:9a:24:
7a:de:42:b1:f3:3e:46:6f:50:6b:1f:b5:2b:62:1f:
14:62:1d:ac:0d:c5:db:ce:90:48:0f:f5:c3:12:70:
9d:66:e9:cb:20:99:be:a2:53:cb:d0:f3:1e:f7:c0:
cf:32:fd:5e:b4:02:b1:ac:28:88:44:c0:b5:d9:d2:
1d:11:01:94:ea:94:66:f6:24:89:f8:f8:35:75:fa:
6b:07:b9:c0:ef:59:14:b8:83:7a:80:a7:2f:f5:0c:
bb:26:7f:01:af:67:fb:af:6d:46:f1:ea:c5:fd:d2:
63:77:fc:bd:45:cc:e7:b9:fb:08:bb:f9:66:33:e9:
3a:20:7b:40:6c:b0:13:12:1a:e8:e5:dd:67:3e:68:
8f:2a:bd:64:27:a7:dd:8a:14:5c:a0:9d:91:43:be:
2e:98:3a:b8:aa:b3:fc:bf:82:a7:90:f7:f3:5c:b6:
83:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:05:09:E9:82:A4:02:55:B2:0F:CA:3E:2A:20:66:7D:0C:9F:5A:60
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144109.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5b3::/32
Signature Algorithm: sha256WithRSAEncryption
03:a9:2d:08:f4:fa:45:33:62:06:37:66:e4:0d:13:c1:d1:7d:
2e:c0:b1:d6:27:03:3a:56:fa:00:37:3e:c2:a2:3e:90:6e:3e:
a0:8c:80:91:12:5c:b9:79:79:9b:d9:ff:97:84:de:03:1f:96:
2e:70:63:70:3b:4a:74:07:6d:0c:6c:f6:bc:54:cb:80:4a:92:
00:c2:6a:26:7b:33:48:e1:98:10:f7:54:5f:ce:27:2b:77:47:
11:22:18:94:4a:f3:03:85:30:40:0f:7f:8e:bc:61:47:c7:e9:
28:66:b6:7e:4a:2c:86:e4:40:8f:05:98:06:4b:b4:07:f6:aa:
d1:5c:2d:56:5c:d0:16:8c:1a:78:d1:0d:8a:e9:db:61:9e:3a:
53:1b:10:c6:70:1e:4c:cd:c9:12:a9:d5:25:78:fc:25:b9:fc:
21:f2:df:0d:76:58:5c:f9:21:3a:f7:3c:17:da:01:ae:e2:b8:
b3:e7:c9:d3:25:76:8e:8f:3d:16:aa:3b:60:e2:8f:1c:53:f0:
85:7a:36:c5:14:62:6a:24:53:4e:78:c8:63:cd:f7:9f:9d:35:
a7:50:25:be:1b:76:7d:de:e5:79:3d:be:b0:27:c7:8e:c2:8d:
87:65:11:ec:53:5c:75:8d:e8:b4:94:40:53:a6:e8:4d:8d:8f:
12:cd:2c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:16 2026 by rpki-client