Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144194.roa
File: AS144194.roa (raw, json)
Hash identifier: J/LdLYPEU/M40/QgEex8ruOE22JZMpALfRLBwjQVIo8=
Subject key identifier: A1:F9:F3:81:A6:78:99:FF:90:1E:A9:3B:44:AC:6A:2C:C4:FD:A1:60
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0608BC9DB6BD80458916F37EF7C300A785C8871B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144194.roa
Signing time: Mon 25 May 2026 01:20:25 +0000
ROA not before: Mon 25 May 2026 01:15:25 +0000
ROA not after: Mon 24 May 2027 01:20:25 +0000
asID: 144194
IP address blocks: 240a:a608::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:08:bc:9d:b6:bd:80:45:89:16:f3:7e:f7:c3:00:a7:85:c8:87:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:25 2026 GMT
Not After : May 24 01:20:25 2027 GMT
Subject: CN=A1F9F381A67899FF901EA93B44AC6A2CC4FDA160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9d:cb:08:39:52:91:68:11:96:64:f3:f3:90:
06:0f:33:19:78:00:76:62:bd:01:fc:cc:03:3f:7c:
8b:65:22:d5:1b:fd:b2:a4:b3:e4:f1:5d:6f:16:c6:
80:20:c5:da:e0:11:b9:d0:c0:0f:bf:20:f3:dd:8f:
d1:29:bc:31:93:51:21:0d:55:7e:59:24:8a:b6:c8:
43:a1:9f:51:60:b8:e3:2d:86:91:e1:e7:ab:3b:31:
55:aa:24:bb:a5:7f:44:70:b0:18:2f:eb:b7:ec:b7:
12:f8:ed:51:92:b9:c0:f5:dc:70:5a:b9:ee:4e:c7:
fa:ed:60:e3:d9:64:4f:fe:94:db:53:05:ae:f3:0f:
4a:5d:b8:ba:6c:8f:fe:0a:dc:6a:a2:b9:84:99:28:
4b:03:4b:40:3d:9a:6f:03:64:70:ac:c4:41:0f:5a:
fb:9f:03:40:5a:d5:ac:63:4e:ec:e6:f2:70:46:75:
73:a4:ea:7a:e5:37:ec:9d:65:ba:6e:d3:21:1d:f2:
2b:d9:60:4d:eb:8b:64:c3:21:11:62:ae:26:3f:c4:
86:09:d8:43:21:5d:d6:ff:f3:e3:8a:36:33:97:57:
31:fe:95:06:1f:81:64:66:2c:4a:fe:b7:c2:49:a4:
a8:0d:1e:7f:de:22:28:d0:cb:1e:3d:b8:4b:b2:89:
e7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F9:F3:81:A6:78:99:FF:90:1E:A9:3B:44:AC:6A:2C:C4:FD:A1:60
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144194.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a608::/32
Signature Algorithm: sha256WithRSAEncryption
23:37:17:cd:1d:df:98:3b:12:ad:91:c6:20:e8:65:96:37:ea:
62:45:43:4b:a0:29:54:f1:97:66:c7:1f:b4:87:72:ba:ad:f6:
c9:b3:fd:ba:66:e7:f4:f3:d7:4a:e5:db:df:72:46:41:fa:1f:
4a:1b:84:53:4f:9c:ed:55:21:72:99:5f:01:50:d8:78:0a:9b:
20:ff:d1:48:43:1a:87:87:a8:d9:6c:e2:94:ab:a8:a6:a4:e8:
8a:bf:3a:44:fd:e5:1e:9f:7d:be:8b:63:8d:3f:e7:56:d4:c8:
ff:2b:73:8f:a0:5a:57:e5:2d:a5:6a:ff:5a:4d:91:ee:47:ca:
e2:76:b1:d8:14:9b:b5:c0:a2:cf:e4:1c:b9:d0:aa:9b:92:98:
f4:89:ce:83:3f:31:39:fe:63:cd:7c:28:84:dc:8b:96:dd:76:
de:c6:6a:1a:20:47:d6:9c:66:89:b9:ed:35:f8:33:69:b5:ad:
ae:69:4e:fb:05:ff:88:55:b3:06:b1:61:b6:d9:95:99:76:13:
65:69:dc:41:11:51:a2:0c:e1:99:92:27:3b:e5:6b:6f:a1:15:
8e:e3:e6:7f:73:39:cc:3a:ed:db:d3:cd:45:dd:c2:7d:00:3f:
d4:bf:1a:28:2a:59:f4:5d:f4:51:bd:f6:e2:7e:1e:2f:72:e3:
f8:f9:ee:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:48:57 2026 by rpki-client