Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144249.roa
File: AS144249.roa (raw, json)
Hash identifier: uW3ubKLmRcG2QJip8k36JOHBC5b6HNNstH9hhVbDGVM=
Subject key identifier: 02:55:9D:A2:08:A2:2C:3F:68:2B:3A:E2:A2:C7:AF:F8:52:72:75:67
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 072CD7F4E8DF0E8170C73712FBE0CDC78CC39468
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144249.roa
Signing time: Mon 25 May 2026 03:19:20 +0000
ROA not before: Mon 25 May 2026 03:14:20 +0000
ROA not after: Mon 24 May 2027 03:19:20 +0000
asID: 144249
IP address blocks: 240a:a63f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:2c:d7:f4:e8:df:0e:81:70:c7:37:12:fb:e0:cd:c7:8c:c3:94:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:20 2026 GMT
Not After : May 24 03:19:20 2027 GMT
Subject: CN=02559DA208A22C3F682B3AE2A2C7AFF852727567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:13:b9:ac:e4:0a:ac:56:48:9e:4a:9c:dc:bd:
1a:d4:8b:52:2f:f7:0c:cc:2e:a1:d1:f6:da:83:06:
73:80:c7:20:33:c2:08:97:0b:ca:58:dd:ab:5c:f1:
55:75:48:c5:62:91:d8:d9:1a:e6:af:68:5d:98:f0:
9e:91:05:3e:14:ac:3e:f4:36:e2:19:66:7d:f7:56:
44:9a:59:03:0c:4d:12:7a:1a:a6:d4:68:58:9c:92:
b9:9e:20:9d:8c:74:92:99:87:de:08:b0:00:7e:3f:
e7:21:c3:5c:07:d8:c4:da:7f:8e:51:7e:00:4c:de:
ab:07:e5:26:a6:5a:74:fd:28:7b:77:81:3b:d9:2c:
50:7c:b4:6c:ba:48:57:a3:13:50:45:76:c6:0f:ea:
3c:0c:64:6c:95:d6:53:60:cc:5e:5a:c2:56:43:33:
47:cc:fa:ce:a9:47:8b:11:01:16:11:cc:56:53:c6:
93:f7:63:e1:67:1f:49:70:d1:d8:9f:b1:79:e8:2a:
03:2e:9e:88:96:8b:c2:19:f4:18:e2:02:ae:f6:81:
ba:94:fe:14:e8:c8:a4:f9:41:87:f4:cb:1a:83:df:
61:a4:58:5a:ae:e8:49:7c:c6:9b:e1:23:3f:59:ff:
b8:d5:49:bb:2c:50:17:00:37:4d:4f:4f:f2:67:fc:
76:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:55:9D:A2:08:A2:2C:3F:68:2B:3A:E2:A2:C7:AF:F8:52:72:75:67
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144249.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a63f::/32
Signature Algorithm: sha256WithRSAEncryption
89:d9:31:a0:87:8c:df:1c:cf:bc:67:a4:92:f2:aa:1d:fd:b2:
16:8d:c8:8b:d6:bb:07:0f:cb:4b:41:ab:6d:8c:d6:ab:b4:d7:
6e:c6:be:11:05:c6:e7:99:d6:f8:8a:e8:6e:a4:10:e9:28:d4:
f8:41:7f:56:e2:61:ee:52:f5:28:03:e3:4c:5a:10:ee:d9:7a:
85:1c:ee:65:a6:cb:36:1a:26:69:4b:b3:97:57:ef:75:73:a7:
92:f9:87:1c:4b:02:ea:20:a5:3a:0d:d3:2c:a3:dc:22:93:d4:
39:5f:01:2d:e7:d0:da:85:62:fc:c6:f9:3c:93:08:29:da:6f:
dc:9a:be:19:7e:20:ab:e5:b9:c9:13:be:35:23:8e:08:15:e9:
58:2c:aa:03:9b:ab:f4:7f:5e:be:c9:91:95:cd:e1:ff:30:ab:
b0:8b:14:89:e7:7a:90:2b:76:16:26:07:0d:24:8d:99:d0:f1:
c6:59:f8:e6:24:6a:a8:17:57:ab:cb:e9:85:97:14:2a:99:a3:
23:2f:a5:b3:c5:a9:5d:57:01:f2:a3:22:25:85:e3:0c:94:74:
f8:cb:3b:34:49:d2:75:74:5e:c1:63:07:18:ac:ac:07:e1:c7:
de:43:1f:25:13:77:4a:3c:e6:62:0d:f5:d7:e8:47:c3:60:6c:
20:6b:ac:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:02 2026 by rpki-client