Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144141.roa
File: AS144141.roa (raw, json)
Hash identifier: kvk9C02UXxxoTY3OupVK8YGIWZbbNx/TDzSS0LTGLq4=
Subject key identifier: 46:88:35:7C:73:BE:B7:45:AC:48:3C:AC:01:AF:23:6B:C8:8A:80:8D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4AAC24A03B2AA196A3782D228F406EDB303D8D22
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144141.roa
Signing time: Mon 25 May 2026 01:51:32 +0000
ROA not before: Mon 25 May 2026 01:46:32 +0000
ROA not after: Mon 24 May 2027 01:51:32 +0000
asID: 144141
IP address blocks: 240a:a5d3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ac:24:a0:3b:2a:a1:96:a3:78:2d:22:8f:40:6e:db:30:3d:8d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:32 2026 GMT
Not After : May 24 01:51:32 2027 GMT
Subject: CN=4688357C73BEB745AC483CAC01AF236BC88A808D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:69:c8:1e:5d:b4:7e:14:ff:dc:87:47:fe:9a:
07:c4:5f:33:e4:ca:54:30:aa:f9:0c:61:dc:84:ff:
5a:10:d5:06:e7:25:cc:bb:1f:3c:e9:27:f7:8b:61:
e5:ee:9e:c9:64:a1:7b:77:10:70:1b:77:a1:ee:f0:
22:60:0f:b7:6a:d2:f1:b3:59:8e:c7:1d:a2:cc:d3:
e7:00:a4:d6:b9:be:ed:04:26:eb:c8:f2:da:8a:4d:
94:5a:d8:c4:a9:12:48:7a:46:84:fe:fd:9d:2c:a2:
79:fe:cf:a7:12:b8:cc:a8:f9:65:b7:f3:a0:73:fe:
6a:72:d7:b1:62:54:5d:f7:da:73:12:fe:c4:79:a1:
b0:57:7f:50:2a:92:69:7e:10:e5:ed:f2:b5:5f:d3:
f2:c7:73:30:8f:68:7c:a0:e0:91:03:d2:b5:4e:0c:
de:a5:b8:90:8c:13:0b:b6:a1:88:bc:e8:01:2e:1e:
58:ff:a1:d1:69:53:a2:ba:04:ca:02:2c:a2:c6:5c:
73:2b:32:22:61:7c:cf:a0:0c:f6:6c:c6:d3:a1:2c:
fd:06:24:4a:05:12:4b:7a:f6:fd:65:71:cd:82:8f:
7a:4a:85:2e:9e:ec:77:b9:15:39:35:cf:cc:f8:8c:
6c:98:3b:75:7a:28:21:27:fd:12:13:9f:66:85:a1:
8f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:88:35:7C:73:BE:B7:45:AC:48:3C:AC:01:AF:23:6B:C8:8A:80:8D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144141.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5d3::/32
Signature Algorithm: sha256WithRSAEncryption
a7:3c:83:f2:93:b9:f3:01:33:d8:cd:36:86:15:9a:6e:39:4a:
6b:ed:4b:16:39:51:d4:63:7b:85:96:dc:5a:79:3f:e8:43:9d:
99:8b:d7:5c:bb:1a:09:72:9c:98:cf:71:23:37:97:ef:be:bd:
24:9a:ae:07:29:8e:18:0a:bf:fb:77:fa:dc:24:ab:f1:87:3b:
a8:a0:91:d4:ca:ed:db:20:96:86:24:e8:72:fa:b2:50:c4:79:
2d:ec:79:c3:4d:66:48:dd:d7:b7:46:d2:8e:22:10:2c:63:7f:
d0:40:f0:bd:42:2d:eb:7f:33:e5:5d:b3:45:b4:77:73:3c:bf:
52:7c:12:0f:48:85:46:4d:26:fa:22:ae:ec:1f:99:ac:73:1c:
b9:35:08:28:31:e0:43:a2:41:57:ed:5e:fa:d0:fc:03:8f:d4:
78:62:00:f7:6d:3c:7d:a3:4b:bb:25:d1:7f:e0:6e:8a:76:7f:
c1:47:d8:27:8b:1a:3f:b5:7c:35:a8:3c:03:d7:ce:b1:3e:63:
e8:05:e9:6d:d4:6a:f9:cb:47:f9:7e:a2:9f:98:a3:98:a1:a8:
84:c1:58:8f:f5:63:3d:15:5d:d7:38:f5:f8:84:10:2a:21:3b:
cc:42:2f:fb:8a:ab:b4:f8:4d:0e:3c:52:91:f2:c5:3a:d4:8e:
f8:ef:41:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:59 2026 by rpki-client