Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144199.roa
File: AS144199.roa (raw, json)
Hash identifier: FXa/2F6zGJyw7H8lhgfu5/2CjX7UnB2Ysv6+EeUZK4Y=
Subject key identifier: 48:8F:9C:1E:76:C6:D1:0D:25:54:13:40:25:21:9B:5F:EA:7C:6A:C5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4F8A04E6E49CE19D9361F7597D0C2BDEB5A58266
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144199.roa
Signing time: Tue 26 May 2026 03:16:38 +0000
ROA not before: Tue 26 May 2026 03:11:38 +0000
ROA not after: Tue 25 May 2027 03:16:38 +0000
asID: 144199
IP address blocks: 240a:a60d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:8a:04:e6:e4:9c:e1:9d:93:61:f7:59:7d:0c:2b:de:b5:a5:82:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:38 2026 GMT
Not After : May 25 03:16:38 2027 GMT
Subject: CN=488F9C1E76C6D10D2554134025219B5FEA7C6AC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cb:5d:1c:6f:0e:70:96:25:ce:b7:2d:88:f9:
43:e5:bf:50:95:a7:01:7f:4a:53:8f:9c:c5:b7:a9:
64:9d:10:69:07:07:2e:ae:94:fc:c8:45:fa:61:c1:
be:7f:ea:2c:47:86:71:f0:82:b2:72:ae:ed:ff:2f:
82:51:be:eb:fd:a2:ec:8a:1b:c0:80:ea:78:a0:a0:
b0:76:b4:74:94:91:cc:a1:79:f9:6c:a1:47:59:2e:
a2:30:e3:14:1d:ba:df:b7:fc:ce:4c:97:c5:97:fe:
26:42:82:ef:88:41:2b:34:a8:7b:34:5d:62:a4:2c:
9e:46:aa:40:5f:ed:08:31:d5:cb:ea:cd:8b:f1:e4:
e6:33:24:a1:0c:bc:98:2e:64:90:de:dd:4f:b7:e4:
d1:bf:2b:8e:ef:a9:ec:a0:6f:85:4c:12:cd:c1:e0:
f7:79:7d:c6:06:bd:39:9b:58:1f:f9:2f:0e:23:9a:
1e:cc:a9:dd:be:b8:30:52:3c:fd:07:43:a9:65:29:
bb:fe:85:77:f4:a7:6b:72:2f:11:b5:a8:95:a1:b2:
59:d9:7c:be:e8:6b:2e:7b:17:8e:13:0c:22:e9:5d:
ba:8b:2d:41:ff:f9:8b:f6:bd:01:9e:a9:bb:52:2a:
eb:b0:00:9d:47:8a:79:d9:f3:96:41:10:7b:cd:a6:
cc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8F:9C:1E:76:C6:D1:0D:25:54:13:40:25:21:9B:5F:EA:7C:6A:C5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a60d::/32
Signature Algorithm: sha256WithRSAEncryption
03:50:d9:8f:ee:fa:4e:0a:e5:2a:d1:98:76:41:8e:40:67:58:
d5:b4:5b:f1:04:16:75:17:1e:89:9d:e9:99:eb:b7:c8:30:bf:
03:e6:e5:fa:2c:bb:0b:97:49:80:0b:01:56:7a:59:19:9b:b8:
4c:01:41:72:56:32:b6:93:80:b4:e2:0b:c0:d5:74:c1:a6:bf:
0a:f5:99:54:98:d2:92:7a:54:09:92:ad:92:ae:01:94:a2:f3:
78:64:53:08:7d:f0:59:44:c4:0c:41:07:14:fe:4c:f4:d1:df:
ae:25:56:53:1f:a4:14:25:05:62:be:f7:97:24:13:44:64:42:
d6:61:7e:4f:18:e1:47:ca:68:72:38:d3:e0:ef:4e:b1:78:12:
69:7f:38:2a:0e:a1:08:54:df:a1:20:41:43:a8:7e:cf:c4:8a:
41:25:10:a5:ed:d0:a8:08:fb:3e:fc:9d:f7:7a:93:4f:28:14:
44:59:1b:b4:73:c3:81:72:c6:11:22:19:b2:8c:6a:cb:a5:79:
bc:c5:1e:6a:d4:f9:dd:e9:86:ad:23:58:05:56:36:91:3d:32:
76:f8:8a:ca:93:48:e0:a1:78:9b:94:1a:6e:a8:af:17:56:12:
1c:79:c6:fb:c0:bf:ac:c1:50:b4:61:07:fe:94:ed:9f:ab:b3:
09:88:9e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:50 2026 by rpki-client