Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144131.roa
File: AS144131.roa (raw, json)
Hash identifier: roN49y5fd50I1DZs9cqW9fkUS/aQ1v/fi2aoDhQkzkg=
Subject key identifier: 34:16:4D:2D:46:DB:53:42:C7:07:49:AE:5B:E6:A5:5F:62:2F:D7:4E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7C27F665AFB742500BB0C064C32168668B4A7942
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144131.roa
Signing time: Fri 22 May 2026 06:58:29 +0000
ROA not before: Fri 22 May 2026 06:53:29 +0000
ROA not after: Fri 21 May 2027 06:58:29 +0000
asID: 144131
IP address blocks: 240a:a5c9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:27:f6:65:af:b7:42:50:0b:b0:c0:64:c3:21:68:66:8b:4a:79:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:29 2026 GMT
Not After : May 21 06:58:29 2027 GMT
Subject: CN=34164D2D46DB5342C70749AE5BE6A55F622FD74E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:39:06:59:58:6a:45:10:fa:9f:ae:0e:ca:
fa:ca:6d:63:21:33:f9:77:30:5b:fb:4a:77:4f:0f:
90:af:09:0d:1b:ce:7c:24:16:68:9e:04:d6:db:f9:
7e:b1:00:cf:6e:ae:5f:60:db:ca:c9:06:f4:d6:41:
89:7c:f6:b5:f1:a6:82:9e:d2:f3:0c:06:44:f7:e8:
58:fb:50:13:ec:3f:78:1d:7f:69:92:6b:1f:23:16:
4f:38:f1:b2:3d:ec:fa:53:29:3f:24:aa:00:18:75:
f4:7d:8e:09:fd:03:ef:3c:7a:e4:f0:08:34:60:92:
d1:88:c7:14:f8:8e:b7:aa:c0:cc:6d:04:bd:62:c0:
18:3f:55:66:4d:2b:9e:de:48:c8:6b:09:07:d5:f5:
d4:bf:87:ff:ba:97:4b:c1:fa:1a:c1:17:30:9d:92:
2f:8b:78:30:76:9f:86:49:f5:79:59:8c:55:fe:11:
00:fb:f2:15:cf:52:34:5a:47:17:41:a5:c3:43:3b:
a6:12:86:43:9b:c2:b0:69:be:96:99:0f:dd:7c:aa:
09:4d:13:87:bf:c7:fc:52:2d:fe:f9:4c:f3:05:c1:
4b:17:f2:00:34:7c:63:2d:e9:ba:27:53:71:94:64:
16:55:0a:0d:5a:71:e7:9b:57:63:d0:e6:d0:7b:ad:
c0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:16:4D:2D:46:DB:53:42:C7:07:49:AE:5B:E6:A5:5F:62:2F:D7:4E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5c9::/32
Signature Algorithm: sha256WithRSAEncryption
9c:79:e5:3b:14:b2:48:c7:04:6e:1c:16:67:15:33:71:88:27:
4b:78:ca:9c:a6:09:df:05:92:d0:e4:81:44:94:46:dc:7e:96:
d3:45:ac:d0:4d:7b:fc:09:82:7d:4c:c3:32:d1:28:68:4d:dd:
3a:2d:34:79:3b:dd:4c:87:d4:b8:e6:bd:cb:a8:14:19:bc:1a:
11:6c:0a:96:ab:5a:04:03:f9:37:52:d9:28:e2:fe:94:bc:45:
6b:3f:70:7a:3b:23:b5:66:2d:a3:5a:db:82:84:b6:3d:3c:0b:
40:fe:c2:e1:71:57:4a:d5:d8:81:cb:ce:ed:19:04:43:cf:e9:
ca:5c:9a:05:d7:36:33:63:ee:c4:6d:d4:22:54:3f:97:83:21:
9a:37:cf:e9:19:bf:9e:5a:9c:36:6d:32:11:81:b6:b0:c2:d9:
5a:8b:f4:2c:65:90:19:d2:36:0b:34:a6:52:ee:b4:db:98:26:
30:63:1c:1c:6e:15:11:9f:5f:b7:0f:87:c3:d9:79:25:63:21:
f5:33:2a:55:f2:de:88:5d:c5:d5:33:f3:52:89:08:43:77:d8:
1b:a6:76:a2:7e:41:13:c9:0a:ae:5e:36:16:0a:20:04:ae:da:
3b:a3:3b:04:5a:df:15:a2:8f:88:d8:00:a8:29:54:61:3f:b4:
1c:57:e4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:50 2026 by rpki-client