Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144147.roa
File: AS144147.roa (raw, json)
Hash identifier: tHiey7q1mNDBGCcjdn6q6HEntmflyjjx/ioUh9+an3A=
Subject key identifier: DC:83:42:CC:E4:45:CC:96:54:AF:94:A5:4D:EA:0D:40:A4:1B:E0:AA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 06480E4A6D038E369F58B79A85C4BF6C2ED21D84
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144147.roa
Signing time: Mon 25 May 2026 01:38:15 +0000
ROA not before: Mon 25 May 2026 01:33:15 +0000
ROA not after: Mon 24 May 2027 01:38:15 +0000
asID: 144147
IP address blocks: 240a:a5d9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:48:0e:4a:6d:03:8e:36:9f:58:b7:9a:85:c4:bf:6c:2e:d2:1d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:15 2026 GMT
Not After : May 24 01:38:15 2027 GMT
Subject: CN=DC8342CCE445CC9654AF94A54DEA0D40A41BE0AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cf:85:e3:24:15:41:e7:a1:ce:95:8a:26:f5:
a7:fc:64:52:10:15:28:db:ea:b3:43:8d:77:c3:ef:
0a:b7:c2:77:8d:2c:fd:00:c1:b9:a1:d8:16:80:19:
72:fe:2d:d8:c0:0e:dc:e9:fe:c6:67:c3:a9:98:e6:
d1:d1:1b:fa:c5:7e:ec:85:f8:02:95:90:78:db:6c:
89:96:9e:4f:ea:0c:1f:21:6d:87:fc:29:80:92:2d:
ab:62:4c:48:d2:96:b0:2c:17:d7:04:25:80:07:28:
8a:57:9e:4e:ac:e5:f0:08:d6:dd:b9:f9:90:88:50:
d6:6a:f7:58:66:c8:5e:26:30:7b:4b:2a:96:70:18:
0a:ea:24:d9:7a:cd:9c:78:f3:73:45:e6:7e:a1:3a:
44:c0:e8:f8:2f:a0:6a:e8:e0:fd:d5:67:a8:f3:e4:
d1:ed:31:dd:74:b9:89:92:d8:9d:61:f1:d0:99:ca:
0c:9a:ba:8c:f0:7d:f5:96:9d:26:c9:01:e1:1a:72:
0a:2e:88:67:ff:75:aa:5f:75:f9:df:84:dc:dc:0a:
5c:a6:54:1a:ff:be:ee:50:40:6b:c7:3d:90:05:d1:
d5:54:43:79:2f:bc:fc:69:df:2e:25:7a:78:b3:96:
6e:b6:92:d6:f5:b2:50:17:c0:5c:ed:75:dd:78:df:
64:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:83:42:CC:E4:45:CC:96:54:AF:94:A5:4D:EA:0D:40:A4:1B:E0:AA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144147.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5d9::/32
Signature Algorithm: sha256WithRSAEncryption
60:88:ba:ac:35:a7:4c:f7:f0:2f:c2:13:d1:42:ba:42:f2:8f:
b3:f4:68:f3:6c:79:d5:45:76:9e:12:08:1e:26:61:66:5b:d3:
8e:01:83:49:51:d5:41:26:16:ce:8c:ce:9d:48:d5:f1:1c:c0:
86:f0:60:60:1f:c5:1b:2e:a4:f9:9b:ed:c8:6d:72:6b:ef:2a:
86:36:02:10:7a:c7:3b:dd:4c:5e:cc:89:da:5b:60:af:50:c7:
e9:e5:73:2a:1e:e5:9f:c0:1c:e4:61:77:d3:ff:48:10:50:39:
d5:44:ec:99:d7:9f:86:bf:21:4a:1d:74:d1:31:68:b2:95:8c:
28:75:f4:5c:2d:00:3c:01:7e:30:a6:15:83:2d:93:3a:16:72:
0d:96:13:a4:46:c7:15:42:03:25:ea:cf:11:b2:b2:2a:1a:f3:
41:01:07:42:0b:22:fe:1a:b8:4b:ef:d7:b9:ba:3c:f0:6e:f5:
d9:7f:da:9d:b8:06:7e:1b:47:46:bd:1c:5c:af:0a:54:98:bb:
ed:4f:6d:32:b4:99:58:9f:d2:95:4c:fe:6d:9b:74:61:2a:36:
6c:dd:f4:e2:02:4d:a0:d3:e0:64:de:17:c4:61:d3:66:19:d0:
49:eb:ef:da:1b:98:87:67:6d:80:b0:64:ee:5c:31:55:09:55:
71:4b:33:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:57 2026 by rpki-client