Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144151.roa
File: AS144151.roa (raw, json)
Hash identifier: 0+XbC3NvoklKkvkBxtI6cDEWWGj2SnEalE9a1lBFVBg=
Subject key identifier: D0:2D:9B:BE:11:77:80:F1:FA:F1:70:AE:95:25:34:AB:7C:A8:7A:D9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7C46530365B24BDD760F554787888C56F3B5A254
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144151.roa
Signing time: Mon 25 May 2026 02:22:20 +0000
ROA not before: Mon 25 May 2026 02:17:20 +0000
ROA not after: Mon 24 May 2027 02:22:20 +0000
asID: 144151
IP address blocks: 240a:a5dd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:46:53:03:65:b2:4b:dd:76:0f:55:47:87:88:8c:56:f3:b5:a2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:20 2026 GMT
Not After : May 24 02:22:20 2027 GMT
Subject: CN=D02D9BBE117780F1FAF170AE952534AB7CA87AD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:70:ac:65:6d:cc:0f:3c:d1:bb:83:25:90:3b:
e7:9b:2e:49:2b:98:ba:8a:13:64:bb:28:b5:74:e8:
7c:6c:6b:cb:b3:d2:1f:81:03:6b:9a:e6:ad:9d:e5:
e8:6e:de:8b:dd:9e:f8:d5:0c:cf:7b:f8:a2:4e:b2:
54:56:d7:57:15:65:eb:86:0d:f8:2d:1d:9f:f0:dd:
08:fb:46:8e:b0:4b:ba:3a:6f:fd:38:1b:99:8f:12:
d2:e1:42:7c:36:4e:c7:ac:c9:87:f3:a6:d0:a7:7d:
79:79:14:0d:b2:d0:47:e6:37:f4:c7:e4:de:7e:05:
ab:9d:ee:bc:31:b7:86:45:a5:f5:de:db:d4:d0:bc:
8f:46:a0:1c:ad:e7:fa:97:5a:f0:a4:a7:43:dd:a8:
18:fb:ab:4f:7c:0d:22:00:a1:e8:ad:39:73:3d:69:
e6:9a:29:8c:1c:40:ab:98:12:0f:09:84:8d:d0:99:
53:97:f0:4d:90:03:41:9f:ec:3d:f7:6f:a7:c4:bf:
44:82:23:f8:c9:c0:9b:fa:9d:08:85:32:0a:4f:b1:
38:e4:94:36:fa:0c:01:1d:79:97:98:a6:76:21:43:
37:99:2f:2b:92:ca:99:63:4d:d5:7a:01:79:d0:ef:
6f:cf:37:a9:10:98:d9:47:25:71:ff:92:67:60:ad:
b9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2D:9B:BE:11:77:80:F1:FA:F1:70:AE:95:25:34:AB:7C:A8:7A:D9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144151.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5dd::/32
Signature Algorithm: sha256WithRSAEncryption
b2:9c:45:5a:36:5f:b7:ea:5b:9f:c0:df:d1:93:0d:4b:78:a1:
56:f3:0e:07:04:a0:64:ba:8f:7c:48:21:5e:95:bd:99:a5:ed:
c5:ff:e8:cd:ef:4e:a8:e5:83:13:74:7c:33:e4:80:35:d3:d9:
54:c4:29:37:4e:78:a9:3d:f1:07:95:91:94:33:83:65:5c:3f:
58:95:29:97:40:f2:05:1c:c0:86:5f:50:11:ef:58:ea:69:cb:
07:59:2b:87:ef:7b:e6:44:a0:77:d2:d2:3d:98:1c:53:5f:1c:
cf:d8:ff:12:26:8f:9f:17:c0:87:a4:ce:88:98:c4:bd:2c:ac:
d2:a5:0a:b3:7d:2a:c4:81:1d:9b:93:a7:27:48:77:6e:f6:39:
eb:f1:99:68:dd:f0:0d:2b:e2:5a:a5:5f:ef:29:99:bd:cc:fc:
dd:e0:3b:dd:2b:4b:a6:00:51:9b:8b:74:7a:00:53:0e:5f:a8:
36:a7:7f:89:5d:d1:6a:17:6c:86:20:9a:18:51:3a:d5:30:f8:
8f:e4:d6:96:4c:74:82:b0:8b:2b:df:5a:8d:fd:f2:9a:75:c1:
f5:54:f0:c2:7c:64:37:f4:89:37:9a:87:92:08:cc:7c:d9:3d:
76:01:2a:17:1f:31:ff:e3:7b:60:0c:56:de:38:d3:86:0a:9d:
53:fe:26:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:38 2026 by rpki-client