Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144192.roa
File: AS144192.roa (raw, json)
Hash identifier: LK4WTfKJ0Mu9ION8hEeRl4NQk1NcPLUdGvt3JKVYTuQ=
Subject key identifier: 9F:37:5E:5B:A2:89:4B:BF:A1:A3:AD:60:36:68:D7:78:5D:E6:1E:EB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3738865E03E5D5B587921218C2B1BB3C0A134B59
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144192.roa
Signing time: Mon 25 May 2026 03:19:44 +0000
ROA not before: Mon 25 May 2026 03:14:44 +0000
ROA not after: Mon 24 May 2027 03:19:44 +0000
asID: 144192
IP address blocks: 240a:a606::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:38:86:5e:03:e5:d5:b5:87:92:12:18:c2:b1:bb:3c:0a:13:4b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:44 2026 GMT
Not After : May 24 03:19:44 2027 GMT
Subject: CN=9F375E5BA2894BBFA1A3AD603668D7785DE61EEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:f5:2e:f6:03:e1:f9:eb:5d:5c:ed:d0:22:
72:21:47:c2:44:27:06:d4:95:9e:2e:f5:88:2a:e3:
78:49:22:8d:60:b0:35:af:3c:eb:14:87:57:3c:12:
1c:70:24:73:fc:5d:ca:6c:da:d0:dd:60:a2:98:e4:
3e:17:65:04:98:b2:be:bc:af:4c:ba:b5:58:8c:7c:
24:9f:dd:24:d7:cf:f1:37:96:2b:1b:b6:73:e5:33:
a0:ec:43:a5:1d:81:d7:4a:aa:1f:ab:8d:9f:66:02:
26:5f:40:51:93:92:19:85:86:95:9c:b7:d5:d1:81:
e1:8a:bf:a1:2c:8f:cb:4a:80:3a:4c:61:4b:89:cc:
65:5a:0c:b1:b5:36:31:27:fa:65:42:0a:85:75:4d:
f6:d0:a3:6a:93:40:96:27:ca:88:23:d9:ef:94:c2:
8a:56:f8:4f:22:11:7a:df:5c:f9:4b:27:88:90:b6:
b9:18:43:ae:5b:aa:61:34:25:c6:9a:9f:78:4f:f6:
35:54:ab:73:62:61:b8:7b:d9:01:f1:fd:e9:a4:5e:
da:f3:64:34:c0:06:c2:12:bc:36:93:02:5c:b1:58:
c5:5b:7b:35:e8:f3:da:4a:3d:68:ed:9b:98:d1:cb:
8e:0b:6b:4d:b2:14:1b:53:83:5e:41:2a:23:a0:d2:
93:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:37:5E:5B:A2:89:4B:BF:A1:A3:AD:60:36:68:D7:78:5D:E6:1E:EB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144192.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a606::/32
Signature Algorithm: sha256WithRSAEncryption
5d:6d:5b:c9:d5:61:5f:88:7f:8e:c7:c4:10:79:98:8f:c5:6d:
97:09:1c:0c:f2:2d:02:42:38:3c:63:6a:ad:f5:1e:ac:63:5c:
51:dc:5b:19:5f:50:b3:81:4d:cf:35:9c:b1:70:1d:9b:a3:1f:
cb:ce:69:3d:f3:26:0d:79:4d:79:86:5f:34:f2:09:a5:9e:ee:
32:41:4c:68:eb:fd:34:23:32:1b:65:a3:8f:08:08:60:3e:f0:
f1:b3:32:cb:91:47:33:5f:80:d3:88:36:c6:80:bf:99:c1:b3:
9a:95:16:2e:17:ff:b2:30:20:ed:ef:ad:4a:a0:96:d1:6b:05:
dc:e3:f7:8b:21:e1:ae:ea:de:b6:b0:65:46:58:fb:cd:f1:10:
29:49:6e:b0:97:3a:8e:8f:0d:cd:77:3a:1c:b4:4c:13:c8:a4:
68:9d:48:73:a9:bc:50:b1:14:c2:a6:ef:8d:b1:51:17:6d:10:
46:bb:96:a0:04:18:18:69:f9:c6:4d:e8:89:84:83:fd:d7:ed:
dd:62:ea:bd:6f:69:ad:94:ce:6f:6f:9c:87:dc:bd:31:40:98:
96:d2:51:8d:30:aa:a2:8a:50:0a:a5:35:bc:c8:08:12:c0:72:
9c:82:c8:25:1b:62:45:1f:22:cc:c4:38:3f:78:59:0c:11:ca:
88:55:bc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:02 2026 by rpki-client