Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144200.roa
File: AS144200.roa (raw, json)
Hash identifier: HL4rts6jPfGlbAeBfZ06ZZBQ1odi5O4OG5+fupwgVL8=
Subject key identifier: 36:BB:71:39:2B:5F:FC:CB:14:04:8E:0F:27:EA:53:6E:34:F9:9D:5A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 38CC57486606734AF4AC277D3BF747A7175598C8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144200.roa
Signing time: Tue 26 May 2026 06:30:23 +0000
ROA not before: Tue 26 May 2026 06:25:23 +0000
ROA not after: Tue 25 May 2027 06:30:23 +0000
asID: 144200
IP address blocks: 240a:a60e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:cc:57:48:66:06:73:4a:f4:ac:27:7d:3b:f7:47:a7:17:55:98:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:23 2026 GMT
Not After : May 25 06:30:23 2027 GMT
Subject: CN=36BB71392B5FFCCB14048E0F27EA536E34F99D5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:84:af:b1:6f:af:9d:17:9b:c7:01:47:0f:
04:29:93:6a:21:c5:b2:72:41:f2:fa:02:73:34:70:
2a:2c:5e:c6:1c:5b:42:ce:74:7f:a1:3d:61:db:5e:
ea:c9:bb:00:00:31:3d:4a:5f:ad:a9:f4:35:08:77:
9f:b4:ee:84:e9:27:b0:23:c6:75:0e:4f:57:e2:aa:
12:7c:23:9c:e8:9c:23:ab:43:26:ec:55:af:e7:98:
dc:b6:63:b7:04:23:78:f3:2c:cb:ac:04:1d:be:bc:
bf:a8:4c:09:13:17:d5:b3:23:6e:a0:04:b7:f8:f0:
64:c8:be:2c:cd:33:b6:31:8d:35:11:9e:b5:a9:f5:
6f:5b:73:63:b1:15:84:7e:f3:56:f6:44:87:8a:c6:
ce:af:3a:b0:d3:c5:3f:4e:3d:31:b0:08:62:bd:7e:
f4:ff:45:70:15:4c:fb:cb:53:81:64:11:da:b1:6e:
f8:07:9b:70:74:83:ce:f2:ed:f2:32:6e:b7:92:13:
9b:01:68:9e:a9:9a:b6:4d:58:93:16:56:f2:cd:81:
1f:1d:72:85:2b:99:01:34:4d:c4:82:d5:91:b1:45:
d8:dd:3b:20:cb:e4:32:d4:f4:3e:ce:dc:9b:80:f9:
df:5c:a1:d5:61:7d:9b:a8:a1:5f:35:fb:bd:ef:99:
36:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BB:71:39:2B:5F:FC:CB:14:04:8E:0F:27:EA:53:6E:34:F9:9D:5A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144200.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a60e::/32
Signature Algorithm: sha256WithRSAEncryption
55:cc:fa:0e:90:6b:0d:22:2d:b3:aa:b7:43:26:45:30:c9:26:
7b:ce:ae:fc:16:7f:5a:c7:95:8f:ac:7b:a5:1d:18:ef:a8:1e:
d3:40:fd:0c:d6:cb:f7:ac:1d:72:ca:ac:83:ea:c4:50:69:f5:
8f:75:b2:7c:85:c6:d3:a0:28:41:15:34:b9:05:0c:d1:15:92:
62:b3:08:48:e6:18:b8:b1:28:63:be:b4:3b:ec:2f:0f:5c:00:
1e:ac:f2:d9:59:ce:20:d8:ec:b9:6e:91:5f:d9:a0:c8:bf:3e:
2e:33:a2:5f:3a:6f:dc:57:93:07:5b:10:3a:d3:e2:d9:6f:e3:
91:c4:bd:99:06:b1:5f:77:0e:1b:ee:13:37:6e:7f:c7:be:78:
f6:72:04:30:9e:0b:29:30:81:29:91:37:98:c4:a9:1b:b5:d8:
41:6a:56:72:4e:cd:a1:27:76:ac:2c:32:24:18:4e:b6:5e:b2:
a5:89:b1:b4:d8:64:95:0e:00:44:d7:50:70:1c:9f:91:64:64:
07:26:46:51:0a:ad:0f:36:b6:22:9b:d2:7f:ad:08:dd:99:bf:
ec:ce:ea:f4:6c:a7:7d:fc:c2:35:ce:69:aa:aa:b9:75:e1:36:
9a:69:af:da:1a:87:2e:2a:bc:67:ae:ef:bc:68:29:38:82:8d:
d5:15:57:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:46 2026 by rpki-client