Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144220.roa
File: AS144220.roa (raw, json)
Hash identifier: JGxGKsAO/rPLqI9TQZP4HTNRgZFvIydJQAETUCNEzNQ=
Subject key identifier: C9:BD:69:04:F2:F8:62:5D:51:13:FC:09:0D:97:36:85:56:12:D0:87
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0A0DE8848A283AEE48546D7CA62C2273182A1C67
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144220.roa
Signing time: Fri 22 May 2026 06:46:25 +0000
ROA not before: Fri 22 May 2026 06:41:25 +0000
ROA not after: Fri 21 May 2027 06:46:25 +0000
asID: 144220
IP address blocks: 240a:a622::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:0d:e8:84:8a:28:3a:ee:48:54:6d:7c:a6:2c:22:73:18:2a:1c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:25 2026 GMT
Not After : May 21 06:46:25 2027 GMT
Subject: CN=C9BD6904F2F8625D5113FC090D9736855612D087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:06:de:1f:aa:fa:30:08:f5:df:0d:50:32:77:
a0:8d:f8:fd:10:36:d1:f6:b5:47:e4:9a:cf:31:da:
41:44:60:d4:4b:d8:b4:6f:97:bb:f4:7e:48:56:7e:
41:dc:4c:01:4b:99:0f:bd:c4:1b:6b:e8:fc:5b:86:
a2:3f:0e:1f:00:d3:2e:7c:be:52:27:0c:ee:49:93:
cf:fb:64:f6:6e:fc:77:a6:a1:47:df:77:63:22:0f:
ec:76:ab:bf:5d:2e:da:4a:5a:dc:1b:d7:35:77:37:
11:63:2e:78:6b:fd:ff:2d:8e:2e:4a:7a:f2:d6:31:
c9:99:65:f0:27:6e:1a:1f:ef:35:06:81:b4:e7:12:
8f:b3:b2:5e:5e:a2:97:2b:9d:02:b4:2b:77:bf:a7:
a6:7a:e9:62:ca:32:0f:5f:0e:06:20:08:4e:f7:cd:
40:3c:08:01:ed:aa:68:f9:1a:fc:ac:b7:c1:99:93:
e4:a5:c4:4e:73:e2:03:d6:fa:3e:0d:9e:21:f4:0f:
c7:cf:b5:2d:73:31:dd:9f:f9:5c:ad:ff:ac:28:17:
9c:50:3c:10:eb:d5:66:0d:e7:dd:e8:ea:b7:76:09:
fb:dd:5b:99:9a:b6:54:89:e4:19:65:75:49:25:01:
fc:d1:2b:48:05:83:de:2a:50:3c:ed:06:51:b2:8f:
e7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BD:69:04:F2:F8:62:5D:51:13:FC:09:0D:97:36:85:56:12:D0:87
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144220.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a622::/32
Signature Algorithm: sha256WithRSAEncryption
9f:04:03:40:90:09:16:a8:95:a5:49:0b:34:f8:8a:21:26:fa:
54:7d:e9:90:2c:38:6a:42:bc:d0:9e:b6:44:54:1a:48:17:ac:
a2:0b:af:3a:94:04:4e:62:5d:76:2e:84:fb:1d:cc:f6:c8:b6:
84:9b:f8:0b:66:de:85:24:f1:d7:00:90:b3:d2:8b:91:c5:c5:
4e:dd:96:cb:bc:43:0c:6b:68:35:db:ff:9a:f8:62:86:a7:e6:
d2:ae:e6:47:bd:77:72:9b:d8:db:76:ae:09:ce:ab:63:3b:04:
e2:18:e0:35:46:0a:67:f7:24:20:28:03:e1:80:3f:5f:9b:f4:
e4:46:34:b7:64:92:62:aa:3d:10:ed:37:67:e7:d0:a3:fc:47:
45:86:60:11:62:74:fa:e6:e4:18:5e:e4:d8:e7:f7:ea:d0:e9:
9e:8b:cd:37:b8:39:4c:f4:52:5b:25:81:d6:a8:63:e4:a4:62:
29:7f:7e:62:4b:48:8d:e1:b8:32:3d:9a:a8:04:8f:d7:84:d5:
90:64:cd:b7:02:83:36:18:14:76:c2:ff:8d:9d:e8:c9:d3:c6:
70:0f:dd:87:11:38:c4:d9:0e:63:4b:e7:4e:8e:b0:50:9c:c8:
6d:4b:15:c3:23:3b:d7:49:c1:50:6e:1b:e8:a3:de:89:2a:0d:
5b:f5:ab:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:48:58 2026 by rpki-client