Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144121.roa
File: AS144121.roa (raw, json)
Hash identifier: 18ZHep3TcaxkBM+7minBPBBjAQpZK174Yexqi7F5V5U=
Subject key identifier: 4C:8F:3F:25:E2:88:48:D3:CE:8A:D6:5E:7F:F3:36:CE:07:39:EE:85
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2E5186C469BA030543DCEF5460AE5D7F6413A456
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144121.roa
Signing time: Mon 25 May 2026 06:28:14 +0000
ROA not before: Mon 25 May 2026 06:23:14 +0000
ROA not after: Mon 24 May 2027 06:28:14 +0000
asID: 144121
IP address blocks: 240a:a5bf::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:51:86:c4:69:ba:03:05:43:dc:ef:54:60:ae:5d:7f:64:13:a4:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:14 2026 GMT
Not After : May 24 06:28:14 2027 GMT
Subject: CN=4C8F3F25E28848D3CE8AD65E7FF336CE0739EE85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:6b:f4:60:16:34:38:f9:17:18:29:46:ca:
0f:6d:af:b5:47:8e:0f:cf:d7:2a:58:51:58:2e:30:
9a:ae:36:5e:a4:38:8f:3f:d9:6b:39:d2:68:a3:9e:
87:af:9e:4a:ec:f8:d6:af:47:c0:ed:be:fd:d4:f4:
ee:00:5d:35:e6:58:be:21:45:87:c9:6a:b7:69:a5:
dd:da:71:ff:31:3e:23:b3:c0:b4:c0:d6:9d:96:6f:
a6:f6:fd:83:63:bd:5e:b2:40:4c:12:73:76:38:4c:
a9:f7:9a:3d:30:a8:83:b7:bb:ad:a6:72:dd:3b:29:
63:b8:ae:07:93:26:1b:09:fc:5f:61:37:bc:b3:70:
61:88:8c:fb:65:1d:61:96:57:29:32:4b:0a:4d:f4:
20:3f:82:8f:6e:30:c3:8a:ab:0d:dd:22:35:59:ef:
d3:42:37:e5:3f:4d:76:34:e3:70:0d:0f:ab:b7:6d:
ae:c3:9f:e3:cc:43:d5:14:19:d4:f9:cb:ac:1f:e2:
43:08:4d:64:df:da:79:ae:4b:af:38:5b:5a:48:21:
7e:eb:01:bd:a4:f8:94:6e:cf:c7:8d:73:52:02:48:
1d:3e:4c:ec:8d:be:38:b8:8f:a4:a7:2e:f9:08:c4:
b9:40:12:9b:6d:70:5c:42:f6:02:74:e9:b2:06:0d:
99:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8F:3F:25:E2:88:48:D3:CE:8A:D6:5E:7F:F3:36:CE:07:39:EE:85
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144121.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5bf::/32
Signature Algorithm: sha256WithRSAEncryption
73:60:75:6c:d1:55:8d:78:85:b6:12:28:a5:74:3f:82:37:41:
cd:7a:27:0a:fb:79:22:80:7e:40:65:3f:50:1b:22:72:09:0b:
4a:60:ae:15:17:c6:ba:f1:1b:c3:0f:4d:13:1c:a3:c5:fc:1f:
b8:7c:e5:18:3c:57:6a:fd:a0:52:a4:26:40:77:76:5f:28:96:
fe:f6:c2:06:af:bd:a1:d5:de:6c:a4:fd:db:f7:03:15:d7:fa:
30:2b:d3:46:83:51:a0:43:b4:0a:6c:d9:cd:6d:c7:49:32:ab:
a6:4a:d0:6f:87:f8:6e:92:2d:f5:db:07:0f:80:59:c9:08:b7:
0c:ba:56:c7:13:e3:f1:99:f4:88:50:aa:61:fe:e2:d3:92:fc:
56:ba:51:6b:37:19:4e:4b:87:54:d6:52:ce:da:56:13:7a:35:
d1:cb:db:4e:f9:f1:ea:89:7f:66:a6:ab:8b:76:80:c6:fe:2c:
80:a8:bc:d1:c3:a7:14:91:d4:73:2a:0c:d7:2b:7c:c8:d1:e4:
9f:62:16:26:3c:6f:62:40:13:7e:92:75:bc:4e:6c:d6:0a:87:
0d:38:a1:7e:d1:1d:02:fd:fe:0e:ad:a1:80:86:67:24:9f:81:
d9:92:19:2d:a5:9a:25:9a:73:85:df:3f:e8:8a:61:10:73:36:
a4:9f:a7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:12 2026 by rpki-client