Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144247.roa
File: AS144247.roa (raw, json)
Hash identifier: 5HLn0pZk78NxP+DplffGSudCjEJ27aQ07xHqlDxQCGs=
Subject key identifier: 88:1C:27:09:EF:19:48:E4:59:01:24:E4:0C:90:85:30:99:D6:CD:37
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 18D4FE0DD27D4549C45CEE68D25B2A07525C1F00
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144247.roa
Signing time: Mon 25 May 2026 01:38:16 +0000
ROA not before: Mon 25 May 2026 01:33:16 +0000
ROA not after: Mon 24 May 2027 01:38:16 +0000
asID: 144247
IP address blocks: 240a:a63d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:d4:fe:0d:d2:7d:45:49:c4:5c:ee:68:d2:5b:2a:07:52:5c:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:16 2026 GMT
Not After : May 24 01:38:16 2027 GMT
Subject: CN=881C2709EF1948E4590124E40C90853099D6CD37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e2:ac:34:8e:e2:58:da:f1:99:08:e0:ca:d2:
21:65:3e:9d:e5:ca:6d:3f:5d:43:84:55:e3:0f:19:
08:e7:36:ba:68:bc:5d:f8:e1:22:e7:48:99:60:12:
a7:d9:c6:db:45:73:32:e8:64:4a:d1:d9:74:96:57:
e1:f4:c8:3a:42:d7:e8:45:f7:4b:9e:23:ba:af:54:
9f:47:32:3c:94:f0:1c:f3:a0:85:dc:76:0f:04:96:
9e:36:85:4c:74:35:89:cf:e7:4a:a2:72:f5:49:e6:
00:dc:42:ca:7e:33:eb:1c:41:93:3a:e1:56:f9:dd:
3d:7e:62:e9:2d:47:cf:c1:e2:b4:6b:57:bf:de:44:
6d:3a:24:18:7d:11:4c:26:08:71:d2:6a:62:62:29:
97:8b:f1:2a:76:65:c6:1a:7c:af:fb:bf:4c:bf:09:
47:70:19:2e:42:2c:46:73:ef:6c:be:8c:86:26:08:
a5:1d:6c:92:cd:05:33:01:53:29:d1:41:b8:34:19:
06:d7:a7:5a:25:49:1e:da:f5:20:1d:1f:79:9b:b3:
16:fe:f8:14:7a:90:49:87:cf:81:e9:d3:6b:3d:8d:
c8:f8:c1:08:2a:0f:00:79:72:fb:c2:0e:8e:c3:ac:
a0:9a:02:dc:6a:9c:8c:5f:ae:07:3c:6d:2d:42:71:
53:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1C:27:09:EF:19:48:E4:59:01:24:E4:0C:90:85:30:99:D6:CD:37
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144247.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a63d::/32
Signature Algorithm: sha256WithRSAEncryption
88:7a:ae:44:42:e1:12:39:0f:29:f7:ee:31:cb:e8:6b:6a:bc:
43:ab:12:0d:41:2a:2f:cc:9a:c9:ef:f1:ca:28:ad:b9:86:7b:
1b:a8:9a:71:2a:2d:f8:31:ac:20:c7:d3:18:a0:5d:5f:47:18:
67:87:d0:a8:d7:d6:d2:d1:62:c4:d0:e8:b8:73:66:20:af:71:
30:a7:64:dd:58:36:d6:f8:a6:28:98:e0:4e:06:50:a4:9f:f0:
9a:eb:d2:5d:ce:4c:33:d7:99:cb:29:0e:ac:b2:1e:c6:d0:8b:
11:c1:f8:a7:fb:59:63:57:fc:40:76:ec:0e:be:9a:36:8f:28:
5a:2c:18:39:c1:6e:ed:00:3b:aa:7f:ef:96:a7:6f:83:bc:3e:
1f:05:2f:c3:03:e3:ca:17:67:37:20:9a:9e:64:c0:de:dc:34:
a6:ca:b0:4e:0b:e0:d8:f1:e4:bc:de:a8:86:8a:ad:fc:65:75:
fe:9f:af:91:f9:ae:b8:f7:bd:0b:35:87:3f:bb:a9:15:18:f6:
ba:cb:e9:bd:48:76:d5:b9:d6:58:1d:43:c2:ce:30:e3:31:db:
cc:86:3d:e4:95:9b:94:ff:74:aa:e0:18:c2:bd:f3:3f:ae:ac:
87:8d:af:d8:14:11:5a:c8:ef:8f:e9:86:ef:62:98:d3:44:33:
c2:93:15:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:12 2026 by rpki-client