Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144201.roa
File: AS144201.roa (raw, json)
Hash identifier: g83SL1jZDJzwhZ3MxIf/SKhfgzeESWl0vhZqSLIsvFQ=
Subject key identifier: 91:E9:B8:2E:06:EF:0B:DF:75:98:7B:ED:57:AD:54:D9:52:D9:B4:CA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 07DA93D735BDBADF3F4A8279C3DAEE874F5FAB3E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144201.roa
Signing time: Tue 26 May 2026 06:12:45 +0000
ROA not before: Tue 26 May 2026 06:07:45 +0000
ROA not after: Tue 25 May 2027 06:12:45 +0000
asID: 144201
IP address blocks: 240a:a60f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:da:93:d7:35:bd:ba:df:3f:4a:82:79:c3:da:ee:87:4f:5f:ab:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:45 2026 GMT
Not After : May 25 06:12:45 2027 GMT
Subject: CN=91E9B82E06EF0BDF75987BED57AD54D952D9B4CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5c:4a:08:2a:76:5c:7e:1a:44:e6:06:46:1d:
b3:91:cf:35:ff:d4:60:25:b2:da:95:86:b7:1a:fe:
cb:69:46:de:1a:f9:eb:13:bc:cf:a9:03:5c:96:d9:
0f:5f:e8:92:75:10:58:32:27:55:9b:35:3d:5c:33:
aa:ae:04:ea:90:42:7d:b4:99:45:c0:a3:f0:2b:aa:
37:12:ce:f3:0f:f8:07:16:a7:c3:83:b0:b5:8d:6a:
79:dd:b3:96:8f:86:9f:b5:8f:d6:86:b9:fc:48:5c:
97:cc:50:e5:46:f9:cd:b0:4b:12:e4:ea:bf:bf:9d:
7c:c2:df:3f:4a:48:28:5d:95:2d:ba:0f:0e:37:4c:
14:58:cb:07:2b:e8:16:7e:58:3e:ff:71:ab:21:c6:
f1:da:f0:83:15:f7:99:86:c6:05:db:4b:1e:d8:83:
3b:a6:f8:cd:b6:79:4b:1b:01:dc:ef:05:22:30:02:
7d:67:77:ef:30:fb:9c:2f:f6:30:41:c6:8c:2e:d2:
96:98:45:cd:b4:db:e1:e5:5b:45:1d:bd:f6:26:30:
dd:ae:83:10:3a:26:90:3a:90:50:76:d6:03:e2:c8:
ed:b2:19:3c:a0:ad:d4:82:29:e4:00:ae:29:3f:9d:
1e:03:6c:d8:71:9d:e2:0f:46:6e:7a:9e:a5:a0:8c:
74:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E9:B8:2E:06:EF:0B:DF:75:98:7B:ED:57:AD:54:D9:52:D9:B4:CA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144201.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a60f::/32
Signature Algorithm: sha256WithRSAEncryption
75:91:c3:62:1e:30:c6:6a:0c:b3:69:82:8c:11:54:f8:dc:35:
36:24:dd:ca:e8:bc:e7:1d:db:83:4c:ee:50:9c:e6:01:e6:01:
d9:5a:32:6f:08:65:65:1c:c9:41:c4:f4:46:43:23:78:10:33:
db:26:05:3a:74:5a:31:24:13:59:6e:d6:36:ca:87:33:ec:c4:
26:78:c9:5d:7a:a1:4a:0a:45:7e:1a:1e:a5:99:82:3a:79:ed:
82:d0:b6:80:8f:d3:91:d9:f8:f9:cb:0b:cd:fb:73:1a:84:a4:
ec:a1:ea:b8:4a:a0:c3:f4:c7:6b:07:cd:ab:6e:8e:bb:43:4c:
ec:af:c1:e5:61:14:3b:f5:13:59:77:b7:00:93:00:97:8a:45:
b5:23:68:07:2b:13:01:83:8c:d7:ea:b1:dd:60:62:c7:ab:f7:
44:91:eb:fd:85:c3:a4:9e:c1:f0:c2:e3:b1:ca:f7:e6:49:f6:
87:bd:cc:3e:f9:7a:3d:5f:87:c7:99:43:d4:21:48:bf:f0:6f:
b9:28:c0:3a:9a:7f:d0:9c:63:fe:28:47:ab:d0:3a:f8:9a:fa:
7a:72:74:53:85:3e:61:4d:7a:39:71:4c:0a:e9:b9:3a:4e:9f:
26:4a:5d:b8:75:4e:a0:e2:a9:97:e7:58:fa:55:1b:91:f6:20:
1b:f7:09:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:43 2026 by rpki-client