Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144254.roa
File: AS144254.roa (raw, json)
Hash identifier: e9dz4IvOwel+Aa77eMdhvIjeztwxSH+3E/6o3lwMOWU=
Subject key identifier: DA:AD:53:DA:1A:D1:66:7D:8D:D4:72:17:88:E9:34:13:37:A7:51:B6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7AD35992B64B4CF474B0317E77DC50C94649D353
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144254.roa
Signing time: Tue 26 May 2026 06:13:02 +0000
ROA not before: Tue 26 May 2026 06:08:02 +0000
ROA not after: Tue 25 May 2027 06:13:02 +0000
asID: 144254
IP address blocks: 240a:a644::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:d3:59:92:b6:4b:4c:f4:74:b0:31:7e:77:dc:50:c9:46:49:d3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:08:02 2026 GMT
Not After : May 25 06:13:02 2027 GMT
Subject: CN=DAAD53DA1AD1667D8DD4721788E9341337A751B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a5:fa:31:00:46:d5:29:ee:37:23:4f:a0:92:
c8:b7:50:1f:e3:c7:45:76:e1:34:ec:47:ff:f4:49:
30:0e:c1:1b:58:4c:09:39:24:ce:35:41:66:22:e7:
65:7c:3b:a2:a9:31:6e:1a:b5:6e:7a:80:9e:8d:37:
40:10:31:7b:3a:02:05:58:97:c4:fc:66:c9:f5:3b:
fc:50:c5:19:ac:fd:d7:7c:1c:56:17:c1:70:a3:99:
4c:11:3d:53:33:74:98:e0:3a:f5:cd:9e:b2:ea:9f:
37:35:ee:6c:75:83:6b:11:72:8f:74:10:e4:6f:2e:
0b:d2:e4:4e:1a:bd:ba:b4:65:b7:01:d0:f5:6d:73:
6e:72:07:15:14:de:e4:d0:a1:95:49:2d:0d:1f:ca:
5b:ed:2b:78:28:50:27:f3:59:00:69:32:a2:58:2d:
fe:8a:23:f4:8b:f3:8f:66:a4:d8:b3:ad:7a:8a:2d:
84:21:c8:60:5a:37:16:9b:c6:08:58:0a:6d:91:81:
61:37:42:c4:4e:85:2b:7e:5f:aa:98:d7:f8:7e:1f:
d9:08:dd:73:ee:3a:a6:87:59:2b:1c:4c:25:8a:7f:
02:85:96:10:56:86:67:6c:db:a4:12:ca:4c:e2:99:
17:06:af:6e:8f:a9:43:d7:a6:d6:c5:10:b8:ca:22:
bb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AD:53:DA:1A:D1:66:7D:8D:D4:72:17:88:E9:34:13:37:A7:51:B6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144254.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a644::/32
Signature Algorithm: sha256WithRSAEncryption
22:83:53:07:3d:19:89:fd:9e:a1:b3:0c:76:21:12:8a:81:e9:
e9:6c:8a:0d:7f:61:d1:20:0d:bd:0e:29:3c:1f:58:53:2a:9a:
e1:be:58:9a:64:e5:cb:7f:95:68:55:6e:5f:02:6a:25:2b:5d:
34:5f:49:d8:04:52:60:43:8d:6d:0d:de:35:f9:49:58:1a:49:
f5:33:3a:fa:3b:28:ed:66:7b:85:8f:49:93:c8:bc:a5:dc:05:
7f:c9:11:e7:f4:0d:3e:62:f8:6b:ed:91:35:aa:f1:93:21:46:
ee:31:80:db:f9:00:47:5b:3c:66:a8:d3:ef:e2:9e:32:0b:70:
5e:77:ce:ca:07:f0:e2:91:60:cc:3a:eb:c7:a2:8e:cc:47:83:
c2:a8:f0:93:a0:1f:ad:76:34:79:0a:4a:04:34:32:c8:78:50:
33:13:35:b3:2d:9f:c8:81:21:b8:0e:43:98:a3:77:fd:b6:ca:
e1:6e:0d:1f:44:73:f7:60:96:69:eb:b6:40:9f:6f:b1:c1:8b:
62:19:c0:de:46:52:2c:35:b7:95:5c:22:79:8e:73:4d:dd:6a:
ee:68:05:ac:e4:a9:ab:c4:f6:73:6c:c0:41:4f:ad:9f:4a:27:
a3:1b:83:9d:ec:f6:3a:af:0a:e9:83:8f:42:2b:aa:bf:c2:f1:
7c:9b:66:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:34 2026 by rpki-client