Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144205.roa
File: AS144205.roa (raw, json)
Hash identifier: GNJBas9OSGgcAhv+2KnOVA2ZvvUBFdtth45Ghq88gvU=
Subject key identifier: A5:9D:E3:7A:97:1A:F4:78:BC:DA:7B:46:85:3A:7A:8E:F7:A8:82:2D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 196E7110C9D24183F1CE1DF9932B79C5F7412598
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144205.roa
Signing time: Fri 22 May 2026 07:24:58 +0000
ROA not before: Fri 22 May 2026 07:19:58 +0000
ROA not after: Fri 21 May 2027 07:24:58 +0000
asID: 144205
IP address blocks: 240a:a613::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:6e:71:10:c9:d2:41:83:f1:ce:1d:f9:93:2b:79:c5:f7:41:25:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:58 2026 GMT
Not After : May 21 07:24:58 2027 GMT
Subject: CN=A59DE37A971AF478BCDA7B46853A7A8EF7A8822D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5e:6d:e0:10:cc:04:a2:ec:e9:9c:92:f7:04:
0f:2a:fe:e8:8a:b4:fc:55:98:da:0c:c8:ed:cc:78:
7d:a8:e5:62:61:c8:b1:88:96:28:91:fd:cd:ec:45:
12:16:f9:f1:6b:91:b9:9e:44:7a:dd:e4:7c:88:1e:
36:51:be:2f:17:74:76:a5:ef:e1:e7:b6:19:91:8d:
15:a7:9a:5f:0f:f5:7f:de:3f:e8:4a:3a:93:97:0a:
9d:c2:8e:29:f4:6e:12:02:25:27:1f:1b:a2:e6:f2:
11:d9:7b:9b:cd:cc:ba:2a:a5:f4:c2:64:a8:d2:6c:
9d:92:81:33:a5:8f:9f:b7:95:90:8a:66:8e:07:73:
91:d2:f7:60:21:ba:10:32:e3:3e:4d:28:c0:df:ab:
68:60:12:93:be:40:94:0e:e5:1b:1e:40:8b:a0:a2:
8a:b1:92:32:07:da:5c:b1:53:fd:86:19:8c:5c:2f:
ad:f8:fb:fc:dd:88:62:6c:f4:1b:26:0f:c8:75:d5:
de:76:bb:be:52:51:9d:c4:35:e3:1a:42:e4:f2:8a:
cc:75:cf:90:e8:07:ed:5e:4c:48:94:3e:81:86:15:
63:d5:b5:98:de:2a:19:7f:27:c1:8f:68:90:be:e7:
82:95:3e:ff:d5:1a:01:d2:dc:56:82:98:3b:bf:6d:
02:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9D:E3:7A:97:1A:F4:78:BC:DA:7B:46:85:3A:7A:8E:F7:A8:82:2D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144205.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a613::/32
Signature Algorithm: sha256WithRSAEncryption
18:66:51:bb:47:04:93:7b:b8:33:0e:b0:f3:14:7d:9b:42:a8:
69:d0:6c:1c:b3:34:54:05:b2:b8:8b:b5:4b:76:64:f8:bc:60:
38:3b:18:a4:79:92:f5:f0:b4:a6:a9:57:72:c8:6b:8f:8e:3d:
9f:56:e3:41:89:4e:ff:54:1a:44:1f:c5:6c:df:17:74:7a:11:
ad:60:8e:4c:45:34:80:92:e7:27:27:af:c7:7f:52:0a:aa:16:
e5:16:6b:93:73:db:8d:41:6c:cc:2d:6f:67:ad:72:ef:ea:2e:
85:3f:6b:36:a9:3a:0b:08:56:d1:62:0f:d2:a7:ff:ee:f3:c8:
8c:32:f7:39:66:e4:67:f9:cd:d0:4b:ff:53:98:c7:01:f5:80:
b9:31:4d:e8:b9:5f:1c:91:05:b3:1b:80:c9:de:9a:4b:c5:7b:
d4:ea:e3:19:fb:0d:99:66:ef:40:db:fb:8e:ab:99:8a:ab:64:
8f:25:32:1a:fb:b5:19:81:a1:16:8a:74:f6:7a:7b:06:ad:dc:
d1:f6:0d:d4:b7:7a:4e:b7:14:c7:ec:39:96:6a:76:6b:97:3e:
b1:5e:de:04:2b:26:c8:b8:f7:84:42:9a:d5:c1:06:53:e5:51:
70:ea:d0:1b:af:90:83:5d:15:7a:f2:c6:ec:b3:2c:35:73:72:
fc:96:75:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:39 2026 by rpki-client