Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144255.roa
File: AS144255.roa (raw, json)
Hash identifier: iZgptXxayDFcmRhaUvOMVCAXAUwF1hjfvGmuWJ4rLW4=
Subject key identifier: 7C:C1:6B:F7:44:CA:74:2A:71:EC:C7:67:26:C2:1C:D1:F2:5E:7A:79
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 54C48AA4C10488BA034D506E272118379E627265
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144255.roa
Signing time: Tue 26 May 2026 06:12:33 +0000
ROA not before: Tue 26 May 2026 06:07:33 +0000
ROA not after: Tue 25 May 2027 06:12:33 +0000
asID: 144255
IP address blocks: 240a:a645::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:c4:8a:a4:c1:04:88:ba:03:4d:50:6e:27:21:18:37:9e:62:72:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:33 2026 GMT
Not After : May 25 06:12:33 2027 GMT
Subject: CN=7CC16BF744CA742A71ECC76726C21CD1F25E7A79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8a:cc:94:64:64:0a:a0:b3:6c:b0:3b:3a:52:
0a:96:0b:e6:0f:c1:3b:88:bf:ed:41:13:5b:4c:5a:
e4:c4:fc:19:49:db:60:1d:51:a6:f0:4a:34:3b:0b:
14:99:ce:39:a9:b1:79:bc:ca:33:e3:5b:95:ce:a3:
0a:35:59:8b:cd:46:fb:a0:b9:e8:69:d5:ac:03:8b:
80:7d:b4:2a:9a:7b:af:e4:0a:f1:76:77:25:fd:51:
c8:42:d5:69:03:33:66:f0:ab:75:88:15:37:5c:30:
5a:f9:63:cc:11:89:74:fb:5b:2a:a7:b9:c4:3b:a7:
7c:ea:a7:72:36:32:d4:10:cb:d5:cf:f3:80:86:f4:
85:09:74:fd:c6:11:f4:a1:c1:e4:6d:e1:55:17:2b:
91:b6:73:7a:4f:98:2d:93:fa:06:db:8c:b9:11:81:
db:1f:43:8f:7a:17:99:fe:50:f3:40:0a:72:f3:b2:
c0:d1:c3:e6:0c:09:16:8d:70:04:fa:32:6e:56:87:
a8:c6:30:26:87:1f:fc:0d:08:1b:84:75:01:cd:b5:
89:60:d4:da:2f:cc:48:ff:b3:d0:9b:00:b4:e4:1e:
59:0b:e8:48:1a:b0:f6:35:b6:aa:a4:2b:4d:d5:7a:
a2:40:c6:00:b0:7b:8f:64:36:ab:62:0a:a3:0a:48:
7e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C1:6B:F7:44:CA:74:2A:71:EC:C7:67:26:C2:1C:D1:F2:5E:7A:79
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144255.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a645::/32
Signature Algorithm: sha256WithRSAEncryption
6e:de:b3:06:5d:a1:23:e6:e1:f5:f0:4d:c0:20:4b:a4:fa:af:
26:d0:02:a2:23:ce:73:67:77:e6:b0:fd:31:80:2c:53:ab:64:
6a:ae:68:68:8d:30:5d:c2:f4:a1:17:85:08:2f:cc:95:a5:e3:
f0:16:70:71:1a:e6:63:39:7f:9f:68:4b:bc:b2:e4:70:f9:1b:
e0:a2:a9:6d:4e:41:78:60:13:e8:84:42:97:2c:62:b4:a0:3f:
d9:11:16:e4:fe:96:e0:ba:16:a2:32:6b:68:7f:96:64:87:cb:
d2:c7:08:e6:d5:49:23:86:76:35:c1:c9:66:5c:55:9b:98:93:
79:ee:33:e8:50:d2:e4:d9:4a:5e:ec:22:8e:a6:bd:35:bf:f3:
1d:f7:92:68:ea:2d:12:0b:b2:8e:a9:7c:67:dd:01:81:91:4c:
b2:0b:34:0c:02:c8:ca:27:ec:30:69:aa:6c:96:81:20:8c:08:
6d:8f:80:d5:58:45:0a:53:22:0a:19:75:35:e1:20:7b:d0:0b:
8f:7b:cb:b1:ca:ff:87:db:47:52:81:6a:9f:71:55:3d:96:06:
0e:19:3c:18:1a:e2:d5:19:df:bc:5f:fb:19:ec:f0:8d:f9:c4:
84:d7:30:e3:c4:0e:c6:8d:50:ae:e5:17:0d:25:c9:64:2e:ea:
c3:c3:ee:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:45 2026 by rpki-client