Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144161.roa
File: AS144161.roa (raw, json)
Hash identifier: ZNfeMFaT08UtpnWqfQ+t5UsU5CPgEYRoAQiWZoH4qcs=
Subject key identifier: 87:BD:3D:3E:33:66:9F:34:19:D9:DB:E8:FE:FB:E8:95:4A:27:59:16
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 79C99B7C1F7B3B71FB227C1899935FFA0CD4BCB4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144161.roa
Signing time: Fri 22 May 2026 01:50:44 +0000
ROA not before: Fri 22 May 2026 01:45:44 +0000
ROA not after: Fri 21 May 2027 01:50:44 +0000
asID: 144161
IP address blocks: 240a:a5e7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:c9:9b:7c:1f:7b:3b:71:fb:22:7c:18:99:93:5f:fa:0c:d4:bc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:44 2026 GMT
Not After : May 21 01:50:44 2027 GMT
Subject: CN=87BD3D3E33669F3419D9DBE8FEFBE8954A275916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:35:94:23:23:d9:75:c6:88:6c:3c:9a:59:b3:
9d:c8:9a:ca:39:37:88:53:f8:20:83:c8:be:a7:f7:
c1:0e:59:41:64:2c:0e:3f:23:02:3f:c2:92:ae:a0:
f1:38:46:04:a8:69:b6:75:cc:2a:af:b3:78:3b:a5:
4e:7c:38:7c:82:97:56:73:37:f8:7d:96:13:cd:5d:
c5:2e:59:b3:91:1d:a6:28:4d:ea:54:5f:0f:95:77:
e0:3c:16:11:e0:af:ae:39:47:55:80:b5:b0:83:9c:
2a:77:d0:21:b5:b9:1c:8e:8f:b4:a9:d4:00:fd:c1:
7b:3e:f5:2d:64:f3:8d:78:09:9a:09:b9:a4:d0:f0:
02:37:5e:1d:9d:43:dd:0d:3e:df:90:af:39:4e:81:
dd:a0:ac:62:25:99:e7:1b:52:7d:52:0e:80:2c:d6:
31:3d:73:75:a5:f8:b5:c9:ec:f8:d6:01:b1:a0:4a:
25:dc:12:f4:13:59:b8:79:c2:24:93:60:42:b8:71:
28:3c:a6:c5:61:f0:dd:56:dc:72:9c:a6:7e:1d:e0:
71:75:df:5f:b9:3b:ea:58:d5:c1:41:8c:74:81:d0:
5d:52:3a:86:6d:39:83:3a:d9:f0:6a:98:cc:29:3a:
49:36:28:31:03:4d:ce:b4:9c:49:0a:6f:78:40:5b:
58:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BD:3D:3E:33:66:9F:34:19:D9:DB:E8:FE:FB:E8:95:4A:27:59:16
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144161.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5e7::/32
Signature Algorithm: sha256WithRSAEncryption
9b:73:1a:53:90:d6:21:aa:26:94:76:b0:93:93:7f:82:56:85:
7a:1a:85:90:cf:c3:a0:96:c7:3c:a6:c3:75:9a:96:80:eb:fa:
87:1a:8a:0b:61:1d:c9:6d:32:47:f3:b2:09:3c:f6:38:55:05:
7d:e2:98:63:68:81:38:c0:48:12:53:35:94:77:1c:4d:e5:72:
30:e3:7d:1b:37:3e:83:be:73:b5:a4:0c:66:ac:60:67:91:fb:
ba:69:1b:8f:4f:8f:c8:ad:ce:cd:ce:26:af:e4:9c:11:af:f7:
9e:4e:e0:d7:99:3e:08:c8:be:21:be:d8:0f:5d:49:ac:39:62:
5d:82:81:39:e1:55:5c:66:37:66:87:61:84:2b:2a:f5:b6:ea:
cb:32:f1:69:a1:b3:66:7b:d3:b7:65:53:7d:cb:e8:b3:8b:b4:
49:13:df:06:d6:86:eb:72:84:97:05:38:16:07:27:9c:a9:f8:
42:43:d6:25:f8:2f:6a:35:10:4c:b5:f3:d4:ff:be:5b:14:ea:
88:80:4f:a7:d4:32:75:a8:74:28:a0:c0:17:d7:cc:34:aa:a7:
a5:c1:46:ab:7d:c7:46:49:e9:30:1a:4f:c7:d7:36:ff:e9:7e:
b0:98:49:fb:59:3d:20:14:74:54:dd:c6:e2:d1:85:06:6d:b9:
d3:d1:99:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:28 2026 by rpki-client