Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144152.roa
File: AS144152.roa (raw, json)
Hash identifier: mqEo3CIDwYHHDuHwjQGGji55+zKJc2XdOBKYqwF3Lks=
Subject key identifier: 14:08:89:CE:C5:F0:FC:0D:CF:20:04:32:1B:7B:51:9B:9E:16:5F:38
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 38435AED63A72577072EE23637A967F04B6F91A0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144152.roa
Signing time: Fri 22 May 2026 06:46:28 +0000
ROA not before: Fri 22 May 2026 06:41:28 +0000
ROA not after: Fri 21 May 2027 06:46:28 +0000
asID: 144152
IP address blocks: 240a:a5de::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:43:5a:ed:63:a7:25:77:07:2e:e2:36:37:a9:67:f0:4b:6f:91:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:28 2026 GMT
Not After : May 21 06:46:28 2027 GMT
Subject: CN=140889CEC5F0FC0DCF2004321B7B519B9E165F38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bd:80:c9:04:43:f4:53:b8:30:17:c2:20:57:
63:16:9f:fc:0e:c0:14:93:1b:0e:dd:fa:23:1f:44:
e4:2b:13:0d:9d:c8:fa:78:ef:7e:4e:82:87:af:42:
ea:3e:c2:94:7d:0f:23:d0:63:0d:83:c6:05:bd:be:
30:d3:65:a2:44:37:e2:73:d0:af:d9:ea:64:47:ed:
d8:cf:82:6a:8e:31:03:e8:f6:16:b7:9b:03:be:f1:
39:29:30:62:f0:44:b2:1f:53:e9:d1:f6:c9:69:b7:
56:e2:10:b0:ec:86:d6:07:1a:ef:de:f7:c2:65:65:
cb:d4:a5:d2:b1:a1:02:3e:dc:6b:5a:00:8d:cf:c7:
1a:68:fa:9a:53:c2:2c:bc:c4:f7:2b:aa:54:96:9b:
09:1c:90:07:30:36:e6:23:94:bf:29:a3:16:a8:d7:
71:c3:ef:13:4d:5a:8d:5e:3d:8f:6b:08:00:56:0a:
c9:83:87:3c:05:17:18:e8:c6:12:42:94:77:ff:ee:
f1:e4:18:96:2b:db:86:74:dc:09:1e:13:70:46:4a:
60:ab:ea:c8:89:b4:e9:fe:5f:b6:ed:d1:03:8a:67:
10:3e:cf:1b:c9:67:52:ef:a5:b2:00:74:da:93:cf:
79:bb:15:2a:0d:3c:5e:f3:e5:38:c8:6e:48:d0:ae:
23:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:08:89:CE:C5:F0:FC:0D:CF:20:04:32:1B:7B:51:9B:9E:16:5F:38
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144152.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5de::/32
Signature Algorithm: sha256WithRSAEncryption
56:5d:6a:3b:d6:40:9b:f5:95:15:de:f6:be:df:5a:4b:76:3c:
19:d2:83:3b:2d:60:5e:3c:2b:30:1c:94:e0:a4:d6:d4:de:cb:
97:98:a1:91:6b:de:77:a5:5f:93:f5:b2:ca:98:80:dc:9d:ce:
47:85:0f:ed:df:2a:7e:70:39:7b:0b:ea:4c:05:2c:20:db:41:
26:cc:70:01:22:30:d6:eb:9c:13:09:1b:9d:73:30:d1:c6:32:
77:2d:8e:f5:e2:7f:98:91:8f:20:39:37:72:c6:f0:a3:bc:fe:
7b:0b:a0:4a:ec:c7:88:7b:b2:37:29:51:60:36:0a:22:8c:18:
da:86:45:95:7c:7f:34:2c:61:d5:63:60:5c:1b:87:14:2c:b4:
8d:d3:1c:59:7b:69:86:2e:18:d9:be:24:2c:c0:62:46:34:3d:
e1:92:09:43:c0:9e:ef:37:14:c3:0f:e0:19:3b:11:31:3c:a9:
92:d5:2d:d5:f3:61:fb:45:14:9d:e2:e8:19:38:ee:d3:31:4d:
3a:41:b6:9a:37:4e:67:fc:2c:c3:7b:8c:ec:86:f7:b7:aa:09:
8b:c0:87:79:31:6c:38:42:c9:aa:46:e4:1c:48:70:e6:14:9d:
17:ec:54:51:06:64:de:f9:c7:58:13:7d:58:cc:1a:a1:96:fb:
7b:33:4e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:44 2026 by rpki-client