Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144119.roa
File: AS144119.roa (raw, json)
Hash identifier: Qd2zgk6EDABO9zWxhJgCjLJnFE/KYXOBBnJH1Z6PnHs=
Subject key identifier: 8C:79:50:B1:02:D2:CB:EA:D4:33:17:8C:03:71:FD:27:65:E7:A2:05
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 52504B4B6D35A1B8CEEB868C3DF4FEF9F10F5244
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144119.roa
Signing time: Tue 26 May 2026 03:16:45 +0000
ROA not before: Tue 26 May 2026 03:11:45 +0000
ROA not after: Tue 25 May 2027 03:16:45 +0000
asID: 144119
IP address blocks: 240a:a5bd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:50:4b:4b:6d:35:a1:b8:ce:eb:86:8c:3d:f4:fe:f9:f1:0f:52:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:45 2026 GMT
Not After : May 25 03:16:45 2027 GMT
Subject: CN=8C7950B102D2CBEAD433178C0371FD2765E7A205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:f9:c1:c2:f2:92:44:17:9f:bc:b6:ea:c2:
ad:34:45:21:5a:89:8e:11:61:32:48:d8:e7:ee:58:
67:80:a0:b2:ab:cc:7c:77:c5:1d:00:a2:53:93:3f:
92:c4:66:23:93:c2:01:8c:c4:a3:8c:a6:50:58:76:
df:84:5c:61:57:e0:0d:70:7d:7d:e5:fb:52:83:c3:
ff:72:b6:b8:f6:fd:af:91:4f:45:38:c4:d8:62:4d:
75:6f:74:b4:a4:35:bb:19:2f:64:11:e3:a4:98:92:
a8:63:d3:bd:bf:1d:06:62:b9:51:ff:5a:91:f2:57:
04:11:c2:13:4a:63:45:a5:7d:68:a2:e2:e7:73:f9:
2f:35:4e:0b:ef:18:2d:69:aa:75:46:89:db:10:2b:
a5:40:5b:d1:df:fb:12:fe:6a:07:b3:fe:fc:bb:68:
a1:51:77:20:43:91:c8:a3:f9:5a:1b:c8:fd:0c:f8:
9c:51:aa:53:61:0a:8c:d7:a3:bb:6d:f6:66:25:8d:
b5:e1:47:dd:51:63:6f:b3:13:0c:01:69:83:80:26:
2e:7f:64:35:eb:3a:11:62:fd:0b:8c:15:7d:cc:69:
69:47:a9:55:61:a2:3e:e6:1c:b4:bf:28:3e:b9:61:
7e:7d:a0:f2:43:88:70:1d:40:5c:4c:20:89:c8:73:
c7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:79:50:B1:02:D2:CB:EA:D4:33:17:8C:03:71:FD:27:65:E7:A2:05
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144119.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5bd::/32
Signature Algorithm: sha256WithRSAEncryption
af:02:ce:ef:3d:c4:37:31:8c:fc:fe:17:7b:e3:aa:dc:59:d0:
7e:4a:86:23:40:b5:a8:eb:68:8e:fc:8e:b0:c5:2f:ee:98:90:
84:79:20:29:e7:a5:6d:61:7a:79:f7:98:f3:1c:20:4a:5f:5c:
35:3b:10:1a:77:a2:35:09:e0:97:a4:99:af:16:f5:68:46:79:
c0:b5:fc:b4:08:be:39:7d:7c:1c:0c:65:af:b4:1d:b1:85:c5:
1f:3c:2d:9e:7b:dc:7c:43:fc:6e:07:0c:cb:33:68:be:9d:93:
6f:40:94:74:96:ec:84:8f:e8:98:bf:65:41:38:0c:9a:cc:4d:
ce:66:f1:ea:37:22:14:cd:1a:9e:57:92:4a:4a:c2:b5:ae:09:
92:cd:d5:2e:76:70:45:e4:b0:44:c8:10:a5:cd:75:bd:12:49:
47:ef:b1:d2:ed:7d:85:b7:e2:a3:85:28:e2:1f:15:85:a0:c4:
71:45:1a:6f:03:96:5f:b2:96:02:ab:e5:c5:80:18:87:4c:66:
a6:74:51:44:36:80:ae:42:c1:b7:f6:8d:a9:bd:2d:fc:82:6c:
e3:8d:0f:1d:49:8b:a7:3c:b9:c6:ec:21:d1:e4:54:e7:6b:99:
6a:85:66:5f:c1:6b:f3:78:af:96:76:0e:4a:a0:fe:6d:1f:20:
b0:af:0c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:02 2026 by rpki-client