Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144230.roa
File: AS144230.roa (raw, json)
Hash identifier: HEaCCv340DATof1kDsEfWkwm8MQjM9GkFQqvCK5hhuw=
Subject key identifier: 61:1A:FF:C7:EA:C7:68:DF:BF:5D:F7:4D:F5:F9:0B:21:85:5A:DF:E5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 08CD5CEC280D106C5535374B1C51606D7875BADE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144230.roa
Signing time: Mon 25 May 2026 01:51:12 +0000
ROA not before: Mon 25 May 2026 01:46:12 +0000
ROA not after: Mon 24 May 2027 01:51:12 +0000
asID: 144230
IP address blocks: 240a:a62c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:cd:5c:ec:28:0d:10:6c:55:35:37:4b:1c:51:60:6d:78:75:ba:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:12 2026 GMT
Not After : May 24 01:51:12 2027 GMT
Subject: CN=611AFFC7EAC768DFBF5DF74DF5F90B21855ADFE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a7:4a:c0:4b:86:f1:bd:4f:bb:1d:e4:fa:8b:
00:5e:8a:e6:88:93:a8:a9:6b:c6:fa:41:ec:c3:87:
3c:76:90:c4:9b:2d:ad:23:96:a0:6f:5c:93:85:7f:
cf:5d:9f:92:93:7b:57:98:3c:b9:07:c7:5c:f3:77:
45:e0:90:ff:f4:15:17:9a:e5:ea:60:bb:89:fa:8d:
bf:7b:a1:b9:56:b1:eb:1c:34:05:a6:2b:4f:45:e0:
c6:38:d1:0c:14:33:bf:5d:b3:1b:81:bd:a9:33:6d:
7d:09:56:30:78:2a:fa:6c:d5:5e:96:7b:87:71:6e:
6a:8e:dc:36:c2:f5:76:22:75:ca:de:8a:f7:28:61:
23:04:68:e4:98:3b:dc:44:9b:db:44:f5:7d:a4:5f:
1a:32:aa:e6:72:6d:65:f1:21:55:28:ba:b7:67:30:
6e:4a:e0:21:c0:91:9d:ff:15:d9:5f:55:12:c5:43:
e6:34:fa:10:7f:5e:a1:bc:5c:a3:27:7a:e7:46:fd:
45:14:6b:91:5f:d0:69:14:55:d2:a9:2a:d2:c9:56:
12:a1:01:0a:49:e4:af:f5:c9:04:77:5c:71:9b:e2:
b4:0f:8f:f0:82:24:ed:e0:b1:74:6e:60:18:6c:a1:
36:87:dc:c3:49:dd:43:93:83:fc:c1:17:75:ad:4c:
87:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1A:FF:C7:EA:C7:68:DF:BF:5D:F7:4D:F5:F9:0B:21:85:5A:DF:E5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a62c::/32
Signature Algorithm: sha256WithRSAEncryption
66:43:1c:c4:58:6b:80:ff:9b:1d:c3:fd:d6:fb:6b:f8:f0:71:
60:dc:1b:c7:4d:61:92:8c:62:94:77:31:43:5b:01:02:6d:a7:
74:f9:ed:12:c3:8f:20:6f:34:fd:b4:89:61:97:2d:0a:d9:55:
ae:fd:6a:58:d1:6c:99:bb:9b:f2:c6:68:78:83:39:45:ad:d3:
f0:e2:e1:81:46:fb:44:5f:73:94:1d:38:c2:49:aa:63:cb:41:
4f:3b:bd:36:d0:a3:5c:5c:9b:b4:e3:5b:5b:8a:09:2d:b6:13:
cf:38:6c:02:59:af:a3:9e:f4:1a:f8:ba:b2:28:9e:95:35:ab:
ef:05:03:c6:8c:7d:54:5b:27:10:48:15:b4:1b:5e:11:bf:1d:
91:e8:a2:57:de:a5:47:3c:5a:fc:98:b5:94:4a:09:42:cd:e9:
a0:53:f8:10:77:f6:9b:ad:25:e1:77:80:f4:02:4c:36:70:d2:
35:af:44:8c:66:79:7a:c6:c9:39:18:a8:5a:73:db:73:c5:59:
25:d6:d7:93:cf:03:52:e8:1d:7d:43:b3:dc:f6:fd:4c:99:2d:
42:d2:c6:22:f7:ae:a9:64:c7:7c:73:89:06:f2:25:4a:2d:8b:
a5:1d:a6:db:11:01:49:66:9c:f8:08:71:3d:a2:9a:87:29:2e:
b8:2d:5e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:00 2026 by rpki-client