Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144180.roa
File: AS144180.roa (raw, json)
Hash identifier: D97bVdf3C9abGr/dTzJxe8nkIvO4tEOz8clHhI2p7P0=
Subject key identifier: 88:CC:8D:A7:07:9F:D1:37:2B:23:D2:4E:C8:87:92:6A:39:77:E6:EE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 282A6A99F475BFBDFCE51A9078BB86D9E1715477
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144180.roa
Signing time: Fri 22 May 2026 07:32:32 +0000
ROA not before: Fri 22 May 2026 07:27:32 +0000
ROA not after: Fri 21 May 2027 07:32:32 +0000
asID: 144180
IP address blocks: 240a:a5fa::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:2a:6a:99:f4:75:bf:bd:fc:e5:1a:90:78:bb:86:d9:e1:71:54:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:32 2026 GMT
Not After : May 21 07:32:32 2027 GMT
Subject: CN=88CC8DA7079FD1372B23D24EC887926A3977E6EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1e:d0:ac:cf:66:31:0e:51:dc:9f:3a:9a:74:
00:19:41:51:72:aa:67:12:bc:da:03:62:6d:62:d2:
fb:50:69:b9:32:7d:37:30:75:18:71:ec:56:63:ac:
12:8d:6b:c7:75:f4:5f:95:a6:be:9f:80:4f:78:6b:
34:99:cf:94:7e:df:86:72:b4:16:56:c0:08:df:59:
a6:81:d4:b8:89:9c:5b:0e:fb:1c:f3:0e:b0:b6:69:
ff:cb:8a:09:e2:fa:2d:d3:86:bf:04:44:e3:83:d8:
58:67:38:00:69:43:78:ba:76:84:0e:e4:f8:eb:2f:
ff:4d:76:34:f7:3b:b1:6f:46:98:c9:d6:0d:9a:dc:
97:77:8d:49:c4:43:0e:74:ef:54:94:a7:00:19:fd:
2a:2f:0c:a2:3c:e1:d0:cc:15:f3:97:b3:97:a2:bb:
23:c5:74:be:ed:37:d9:62:3b:e8:7b:ae:83:8d:c7:
e3:b9:9d:fc:d5:40:6c:e7:67:aa:d6:2a:ef:08:61:
56:5c:d7:5a:84:a3:04:15:2e:ef:55:37:06:0e:81:
ff:5d:9b:a6:95:89:e9:6c:1c:2b:49:7c:b6:15:4f:
58:a8:37:f4:7a:77:7b:ff:cc:46:d1:d5:f8:b8:98:
6c:ac:77:df:4a:72:93:92:4c:2a:1d:e5:30:a5:2f:
7e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CC:8D:A7:07:9F:D1:37:2B:23:D2:4E:C8:87:92:6A:39:77:E6:EE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144180.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5fa::/32
Signature Algorithm: sha256WithRSAEncryption
9d:05:c0:eb:de:0f:30:a0:b8:de:e5:35:79:7b:46:7a:69:c2:
8a:4f:93:33:73:18:f3:e5:02:0c:bb:cb:4e:49:ff:c6:d4:8b:
bb:22:b0:f1:2f:3e:e1:75:35:6b:b6:2e:d6:81:71:59:b4:da:
9d:a3:59:13:3d:09:6a:63:43:c1:88:e6:d2:41:63:b9:5d:e4:
07:d9:14:2c:5f:b8:6f:da:94:a3:17:d0:d3:8f:98:c5:a5:47:
9f:b8:a1:e8:a2:86:bc:05:ca:a7:88:33:45:8a:a2:45:16:98:
4b:bb:2c:2f:79:d6:99:3a:d6:93:2f:02:14:da:00:66:ba:7a:
3f:11:32:81:93:f3:9a:08:47:69:34:fa:f4:72:f0:b3:6a:9f:
8c:36:25:3f:04:b5:90:d6:d2:58:7f:d8:2f:87:55:8b:6c:e5:
c7:94:83:f3:da:4e:31:b7:cc:3a:e2:1f:39:4b:bf:d8:ad:46:
74:49:16:70:4a:2e:9a:91:91:6d:c2:3a:f1:c2:27:53:57:95:
5a:02:40:b1:b5:16:8d:4e:52:13:f7:9f:a9:5e:34:d7:08:d0:
41:f2:9a:c9:50:c8:99:c1:43:a8:ec:cd:6f:df:2c:80:62:eb:
f4:60:7d:07:84:ac:cb:86:5b:8b:e3:1c:e3:9f:96:f9:65:4b:
a5:90:c8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:02 2026 by rpki-client