Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144129.roa
File: AS144129.roa (raw, json)
Hash identifier: R8DGSbJ8vgsV+AfWlvsGIJ1v9fmehkhEBCOXJ/2okhg=
Subject key identifier: 97:F6:3E:AD:03:ED:4B:B7:78:8F:DC:3A:6B:06:2D:0F:9D:AD:5C:10
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 22284FDCFA36FE1F69CBC38F318444C6042083D2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144129.roa
Signing time: Tue 26 May 2026 08:52:58 +0000
ROA not before: Tue 26 May 2026 08:47:58 +0000
ROA not after: Tue 25 May 2027 08:52:58 +0000
asID: 144129
IP address blocks: 240a:a5c7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:28:4f:dc:fa:36:fe:1f:69:cb:c3:8f:31:84:44:c6:04:20:83:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:58 2026 GMT
Not After : May 25 08:52:58 2027 GMT
Subject: CN=97F63EAD03ED4BB7788FDC3A6B062D0F9DAD5C10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:95:5e:ed:1e:7a:bc:34:23:25:2f:11:87:2a:
7a:ae:aa:93:59:c4:af:8a:52:50:80:29:2e:ef:7a:
37:73:bf:b7:22:17:ce:fe:f0:40:fc:82:f3:30:41:
92:02:52:de:27:02:d5:78:88:aa:78:6b:f1:58:de:
79:82:36:d5:5b:76:30:3d:72:f8:94:50:05:f2:42:
ec:1e:e4:a0:1e:47:91:85:77:f9:af:e1:c5:26:18:
c5:39:1a:93:5c:f3:cf:c8:f6:a2:d9:59:22:38:03:
af:c3:9a:2c:32:1a:79:9d:64:de:33:6a:de:89:f8:
c2:36:19:1e:2e:30:1e:27:0b:3a:1b:9c:79:01:46:
05:0e:97:c1:30:7f:a2:e6:1a:99:f6:47:f6:b1:c7:
40:af:76:0f:ad:1c:1e:67:d7:40:3b:93:55:e7:36:
77:17:a4:df:be:68:01:1a:69:48:d1:ad:d0:fe:b1:
b8:dc:91:be:6c:8e:89:3c:2a:d3:0d:29:b9:e2:4e:
dc:34:ac:3c:0b:33:5f:b3:d3:92:05:fd:d7:ea:61:
f5:95:12:f4:be:22:bb:dd:99:33:e0:a5:ba:ec:ee:
1a:74:29:50:d5:4a:c3:a9:a2:90:e5:0d:40:2c:d5:
30:d3:ad:bf:8c:9a:02:3f:50:3f:6b:05:cb:7b:ac:
cb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F6:3E:AD:03:ED:4B:B7:78:8F:DC:3A:6B:06:2D:0F:9D:AD:5C:10
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144129.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5c7::/32
Signature Algorithm: sha256WithRSAEncryption
b3:9e:d3:49:1a:c8:65:a9:c1:d1:a1:66:b4:19:b1:d5:4a:3e:
e4:4d:f4:aa:b8:05:81:c8:d3:7e:d3:8b:60:82:e4:e1:8e:ba:
c7:b3:e1:33:df:3f:0d:b1:9b:e3:79:c3:cd:ab:0a:77:f9:c9:
5e:17:d3:a5:46:45:06:e9:87:e2:9b:f5:6b:9d:a8:33:40:e6:
5b:38:ea:d1:7d:cb:82:3b:5e:ec:e5:b9:c5:1a:56:c1:17:53:
41:bd:47:ad:55:ee:3e:43:3a:70:0e:2e:f0:ed:4b:b5:3d:ff:
bf:bf:08:cf:5a:af:93:e4:12:9c:12:e3:ad:6c:0e:34:25:d6:
4a:24:58:23:56:8c:42:1b:07:95:f3:1c:65:14:45:c8:6e:53:
c0:ab:f7:9a:c0:88:54:17:0b:3e:a9:20:f7:e5:6f:9b:f2:bc:
6a:15:59:46:14:ef:17:60:47:64:13:b6:b1:cd:a3:14:0a:15:
46:3b:ac:f6:e4:47:d9:a8:08:98:4e:31:5c:c0:2d:3a:93:1e:
93:9d:a4:0d:6a:01:0a:59:04:fc:0c:06:21:1a:a7:05:f5:47:
f8:eb:bf:cf:83:0f:3b:6b:9d:15:2e:a9:64:e7:cb:5f:34:ff:
2f:53:8a:96:5d:8c:85:b4:87:75:4c:92:99:b8:4c:a5:d9:c2:
34:2d:56:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:13 2026 by rpki-client