Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144250.roa
File: AS144250.roa (raw, json)
Hash identifier: nVMc7z1DljUhSqGPOweQcQcfrKpAdcUfC2/dOADql3s=
Subject key identifier: 9F:A0:B3:B5:73:2B:0A:C4:B1:CB:79:74:08:C9:7D:BC:35:69:18:77
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 48E0551CF70C93B829E6B6443EE0263CA2395F90
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144250.roa
Signing time: Tue 26 May 2026 03:16:34 +0000
ROA not before: Tue 26 May 2026 03:11:34 +0000
ROA not after: Tue 25 May 2027 03:16:34 +0000
asID: 144250
IP address blocks: 240a:a640::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:e0:55:1c:f7:0c:93:b8:29:e6:b6:44:3e:e0:26:3c:a2:39:5f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:34 2026 GMT
Not After : May 25 03:16:34 2027 GMT
Subject: CN=9FA0B3B5732B0AC4B1CB797408C97DBC35691877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:af:f1:88:26:32:cd:19:71:3b:4f:d5:a2:6c:
93:47:af:f4:b2:bf:6e:e7:3d:1b:6e:61:0c:e9:3b:
12:b1:e3:8f:70:48:70:91:d3:da:19:fc:cb:2f:8d:
83:88:1e:36:fc:c6:0c:83:a6:03:ee:4b:cc:06:5b:
fb:ae:b3:33:71:04:77:8e:f1:35:6f:b7:76:0a:db:
9d:c7:2f:4c:dd:cd:b9:ad:1f:30:78:12:7e:6b:78:
5b:c8:1a:17:38:ce:26:dd:eb:0e:15:52:ae:4e:a6:
94:b5:e7:86:09:43:e8:53:3c:15:6f:05:69:fe:b5:
f5:b6:f8:74:e7:79:b9:37:8c:79:30:04:2b:78:6a:
db:7d:a7:a8:35:bc:fe:e5:ad:8d:44:56:68:7a:ce:
88:b5:da:77:8a:96:1a:d1:d0:a5:91:be:27:54:3b:
0e:01:0c:09:99:9c:ba:8e:84:1d:b9:d0:a7:b4:0c:
a4:c2:06:97:e3:97:f7:ad:c8:6f:64:60:50:ee:26:
b0:64:78:23:e5:18:90:ab:f5:22:79:a2:bb:cf:9a:
69:d7:83:9f:10:d8:1a:ec:e8:aa:cd:28:70:e4:d0:
3e:79:93:90:6b:d8:8d:71:d4:b5:13:51:95:f0:bd:
b1:0f:4e:94:f5:c3:18:a9:7b:71:36:2e:83:cf:80:
67:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A0:B3:B5:73:2B:0A:C4:B1:CB:79:74:08:C9:7D:BC:35:69:18:77
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144250.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a640::/32
Signature Algorithm: sha256WithRSAEncryption
41:9d:32:df:4e:3f:27:d9:0f:58:19:80:fe:5e:7c:11:48:e3:
cf:f1:40:4f:84:e2:25:00:5f:89:4d:cb:2b:4a:2e:ef:38:9b:
c9:e2:d3:e7:6f:41:7c:3d:62:dd:62:d9:b0:47:1f:94:d4:76:
0d:67:86:a7:54:ca:bc:9b:77:60:00:17:74:33:dc:67:5d:43:
28:90:26:f4:c4:f3:2a:94:8a:ea:0b:a4:5e:ce:76:74:8e:b0:
2e:8c:ed:64:66:19:38:f3:d8:f0:63:aa:c5:35:f3:a6:5c:c0:
93:53:38:0a:36:7c:ad:1a:21:cd:0a:1a:6d:68:94:45:29:de:
ef:be:24:4b:4a:21:58:3b:1e:62:ec:1e:13:ec:df:72:96:30:
08:f8:c7:2a:d8:ad:4b:b6:2f:cf:eb:f3:f0:dc:97:3f:1b:c8:
78:f5:e0:30:b4:4d:40:ce:03:bb:51:4b:d3:64:6d:2d:82:51:
04:a6:74:5f:c9:8d:fc:e0:50:28:10:e8:4d:9a:77:f4:bb:76:
08:cc:48:7d:3a:99:43:4a:ec:1a:8f:e9:09:07:86:8a:b2:02:
1f:d3:a7:ee:17:90:3b:38:f0:25:02:d6:ff:88:0f:7b:e6:99:
e3:7a:1e:9e:b5:b6:f1:19:9d:10:2a:6e:d5:a6:6c:ad:39:8e:
87:83:19:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:05 2026 by rpki-client