Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144216.roa
File: AS144216.roa (raw, json)
Hash identifier: QAXxLHcpM26lTljd2th3CLKXXNKs5rlDkowSQmxVT/0=
Subject key identifier: F4:31:F1:63:16:70:CB:D9:CE:91:A5:79:49:73:0F:CC:DE:8A:06:80
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2B3D86E1621E9E9A66664F7116FF6BFAA9C8A25F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144216.roa
Signing time: Mon 25 May 2026 06:28:50 +0000
ROA not before: Mon 25 May 2026 06:23:50 +0000
ROA not after: Mon 24 May 2027 06:28:50 +0000
asID: 144216
IP address blocks: 240a:a61e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:3d:86:e1:62:1e:9e:9a:66:66:4f:71:16:ff:6b:fa:a9:c8:a2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:50 2026 GMT
Not After : May 24 06:28:50 2027 GMT
Subject: CN=F431F1631670CBD9CE91A57949730FCCDE8A0680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4c:2e:8a:23:6a:6d:4f:2f:63:25:51:72:bb:
ad:76:30:21:ab:2e:b9:02:e5:a1:68:c6:23:58:a6:
57:d0:31:4b:0a:f4:80:eb:42:c4:99:5d:c1:32:a3:
85:31:4c:8d:41:07:2c:0f:ff:d2:c7:98:14:76:dc:
9c:24:41:aa:77:85:cc:78:0f:45:42:ee:e6:e6:ae:
ca:b5:e8:69:74:bf:d5:37:25:c2:b3:e9:bf:bf:57:
02:27:d7:4e:17:1d:8c:48:07:3b:8b:db:95:b7:be:
37:27:34:63:91:56:d9:56:98:b7:c4:38:7e:c8:2e:
90:62:0b:0c:c2:35:cb:5e:c2:88:3a:c6:b0:eb:20:
92:83:37:09:40:70:83:f8:58:06:5d:08:9f:55:86:
10:87:a4:f0:14:24:09:ef:6c:72:31:a5:ef:c7:fa:
3e:00:f2:5a:62:ef:d0:a8:80:ac:68:ca:b4:58:ed:
46:db:d5:a4:c2:5e:b1:b2:9e:2e:b6:cc:4b:10:c4:
8c:01:62:62:ad:78:62:48:c2:27:81:be:8b:78:a5:
ba:9c:b8:9d:e2:e9:cd:c1:8b:17:06:ad:2d:69:85:
66:31:d5:97:ef:f2:11:e3:bd:7d:06:59:98:e8:da:
49:c2:e1:68:d1:39:21:b9:6b:cd:af:79:83:21:08:
1a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:31:F1:63:16:70:CB:D9:CE:91:A5:79:49:73:0F:CC:DE:8A:06:80
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144216.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a61e::/32
Signature Algorithm: sha256WithRSAEncryption
06:4f:3e:07:e2:9f:45:14:a0:78:fe:0d:79:7e:b3:98:58:a4:
42:64:9c:32:3e:d2:dc:7e:fb:a7:14:05:d8:69:61:a2:ed:80:
6a:27:25:6f:9c:08:88:88:ec:e2:6a:46:ab:03:d5:28:09:f4:
c4:b9:b2:f4:7e:d3:03:12:68:fc:36:65:f7:e0:04:46:17:4f:
ea:ad:b4:71:95:f4:c0:e5:6b:34:61:66:67:20:2c:b6:86:a6:
28:39:89:ac:f9:bc:9a:56:39:d4:67:8f:3f:3b:04:ba:b6:c8:
04:eb:0c:89:a3:10:a8:3e:53:b4:d0:ed:43:d6:8b:b1:4e:bb:
c0:55:d6:2d:79:d2:c1:54:82:71:27:e4:c8:64:48:d0:15:e9:
78:d8:40:b1:58:f4:b3:ea:e3:f7:31:a2:a6:81:de:f6:89:48:
9d:03:90:0d:08:b1:29:0c:66:fa:78:99:b8:cb:4a:c3:2d:40:
95:25:7b:83:a8:83:58:e6:2f:7e:eb:8c:7e:02:ea:c1:95:d9:
81:bb:19:a8:91:ae:df:46:bf:83:54:8b:8d:79:c7:30:65:61:
87:c2:38:4a:64:a8:bf:30:4f:7b:bd:cd:94:be:80:de:f0:62:
4c:3e:1e:a2:58:27:91:53:3a:4e:fc:92:ae:9f:4a:34:21:89:
cd:78:3c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:01 2026 by rpki-client