Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144236.roa
File: AS144236.roa (raw, json)
Hash identifier: AMoCeMRWuPud3Uv9RTzgZMSXOMugRF6E8CTtVjwqduM=
Subject key identifier: 1D:12:39:17:15:8C:06:98:4B:44:C2:BA:A0:E0:45:64:04:68:EC:B5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7A9F64EC280EA91890BD1D0F8DDE2CD1B17EDB48
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144236.roa
Signing time: Fri 22 May 2026 06:05:35 +0000
ROA not before: Fri 22 May 2026 06:00:35 +0000
ROA not after: Fri 21 May 2027 06:05:35 +0000
asID: 144236
IP address blocks: 240a:a632::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:9f:64:ec:28:0e:a9:18:90:bd:1d:0f:8d:de:2c:d1:b1:7e:db:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:35 2026 GMT
Not After : May 21 06:05:35 2027 GMT
Subject: CN=1D123917158C06984B44C2BAA0E045640468ECB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1d:a4:66:45:70:fa:9a:59:be:42:e4:a6:52:
f8:51:79:df:b9:9c:c7:d7:fe:1d:41:42:33:d3:af:
ec:22:88:06:4f:c1:ad:9b:c7:8e:a0:54:08:40:aa:
55:96:9c:d0:e8:3a:1e:32:f7:8d:8a:bf:53:2b:b7:
c7:e4:02:6d:62:8e:8e:4c:dc:0f:95:0c:7c:2e:ef:
e1:68:59:97:3c:0f:da:09:16:f0:13:12:47:58:4a:
cd:31:1a:58:98:4b:e9:d0:a9:97:e4:90:ed:09:ab:
e8:d2:6c:ea:55:44:06:69:89:fe:31:b7:09:82:a8:
58:5e:bc:a5:b8:f8:ed:9b:b1:79:ad:98:36:98:29:
6f:05:88:27:f7:9f:3c:e5:40:07:4f:1c:d2:23:e4:
aa:25:c7:f2:3c:5b:a3:fb:2e:65:13:fb:10:a4:16:
ef:1c:26:74:b6:6a:4a:33:06:8e:18:5c:ab:dd:a1:
70:e5:12:04:87:48:af:cd:5e:ab:a7:7b:c5:13:8a:
fe:a0:56:3b:21:fd:32:1e:dc:14:37:08:83:fe:01:
29:af:6f:c9:d8:07:c6:6b:96:31:72:8e:35:1b:bd:
18:4c:86:59:59:bc:f8:b8:b5:19:0e:62:68:fa:fa:
dd:81:1f:6b:58:89:bc:80:2a:73:1b:11:87:aa:b6:
cc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:12:39:17:15:8C:06:98:4B:44:C2:BA:A0:E0:45:64:04:68:EC:B5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a632::/32
Signature Algorithm: sha256WithRSAEncryption
6c:42:0c:02:fb:25:45:03:dc:dd:5b:d8:79:78:10:c0:bf:af:
2b:a7:26:f3:3f:d3:fc:26:47:9f:9d:67:a4:7e:05:f0:95:3f:
b9:04:0c:fa:89:02:0a:fc:78:03:2a:f8:33:13:11:29:d1:eb:
aa:e2:bf:e3:bf:60:28:a4:5a:08:e7:e1:1b:f3:d2:46:49:90:
47:04:cd:f3:59:9e:86:96:3f:6d:1e:ba:90:02:cf:69:81:8f:
73:d5:5d:a6:ab:1c:7c:d2:61:0f:54:d4:0c:5d:c3:ac:ee:64:
3c:29:e8:ad:ee:58:fb:3a:c8:c8:b5:28:34:0d:93:b6:80:d7:
7b:98:48:8d:2b:90:ba:ac:db:8a:88:0a:d0:97:96:35:a1:ac:
f9:8f:90:7c:b3:32:82:37:ba:97:4e:9f:a0:0d:22:7e:53:b8:
bd:6f:76:7f:87:0a:64:73:93:03:cb:23:4a:aa:a1:20:31:7d:
70:31:ab:b1:9d:31:d2:1c:3d:9d:7a:e7:fd:e4:3c:ff:13:93:
90:ef:c0:bf:22:37:f6:86:03:31:21:02:33:d3:0c:a4:07:58:
9b:63:08:2a:22:7d:a5:14:a1:ad:66:5b:e7:84:8a:86:b8:7c:
a9:1d:39:4d:b3:0e:f2:6f:15:d7:83:88:67:98:be:75:d6:57:
c8:68:b5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:54 2026 by rpki-client