Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144256.roa
File: AS144256.roa (raw, json)
Hash identifier: 3HTOY6WcvXUM91eoLvg4pdhaG/K/WcCi1usueyq2hD4=
Subject key identifier: 69:6E:EC:57:A5:CF:EA:80:42:64:3B:DD:4F:2A:66:48:14:40:D4:2A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3660B7BBCF1788E77EBC7D58A5701212AC117328
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144256.roa
Signing time: Fri 22 May 2026 07:40:43 +0000
ROA not before: Fri 22 May 2026 07:35:43 +0000
ROA not after: Fri 21 May 2027 07:40:43 +0000
asID: 144256
IP address blocks: 240a:a646::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:60:b7:bb:cf:17:88:e7:7e:bc:7d:58:a5:70:12:12:ac:11:73:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:43 2026 GMT
Not After : May 21 07:40:43 2027 GMT
Subject: CN=696EEC57A5CFEA8042643BDD4F2A66481440D42A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:57:50:0a:62:6f:47:07:89:c0:e5:6f:dd:b6:
b3:77:c0:ab:1e:35:e8:7b:8c:f7:2f:cc:0e:54:f3:
0d:2e:42:1d:78:e4:2e:7b:6a:31:5e:ed:9a:8e:30:
75:59:03:18:4b:02:2e:19:77:c5:b3:7e:57:4e:99:
6e:ff:9c:e1:61:60:b6:11:50:bb:2b:54:d9:fc:51:
f3:8f:b8:45:b4:87:d9:71:70:0e:3a:e9:e1:67:1b:
b3:e3:89:2d:ef:30:75:5a:d3:50:cc:8e:de:5c:07:
3b:7d:b0:17:db:21:0e:aa:5b:c2:5f:c8:fb:d1:aa:
4a:a9:72:57:fd:d2:32:15:5b:fc:9f:5e:34:3e:2b:
60:5f:8f:14:a2:4c:d1:94:a5:5e:c7:85:be:57:98:
be:ac:d1:cc:28:bb:c2:80:be:86:d3:91:25:63:a4:
94:be:2c:14:2b:c2:d8:7a:ab:2b:3b:71:01:42:12:
92:57:6f:bf:80:1f:f9:1d:9d:57:ef:b4:8e:53:29:
b2:41:6d:db:5d:6e:14:c2:f3:44:fc:cc:aa:e1:1f:
2a:e7:73:2a:73:37:ae:f9:28:23:5a:ea:dc:bc:2a:
1d:51:ac:41:1e:56:ff:84:c0:fa:27:02:ee:fe:1c:
75:db:f8:13:02:a9:b4:52:d0:ef:8b:53:8b:65:b4:
af:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6E:EC:57:A5:CF:EA:80:42:64:3B:DD:4F:2A:66:48:14:40:D4:2A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144256.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a646::/32
Signature Algorithm: sha256WithRSAEncryption
30:66:a0:89:96:04:85:bd:5a:2c:39:ff:6f:7b:94:d5:3b:1e:
05:8d:83:6c:36:66:25:c0:0c:6d:b5:2f:fe:e6:9c:50:25:6a:
94:c8:71:6c:52:0f:e7:45:fd:77:57:55:23:c9:aa:c6:10:59:
89:d5:f5:0a:11:b0:b5:00:87:c1:44:29:98:b3:6b:68:ec:e5:
54:98:2b:53:0d:d1:18:df:36:f3:e1:d6:e5:f3:7f:b4:48:a7:
e3:24:db:ee:51:85:c9:05:b7:0a:d8:95:55:49:b3:fe:e9:58:
d6:bf:26:d9:66:44:19:3e:bd:50:8c:a2:f5:47:b4:9c:3c:ad:
3b:36:7f:3d:11:e3:17:00:1f:16:a3:42:66:06:ed:40:0e:bc:
c6:c2:13:19:f1:69:5a:5e:b5:a8:50:fb:61:10:a0:b6:aa:65:
ff:e2:12:12:d4:2f:d3:d4:5e:8b:85:9a:40:d4:05:46:e3:d3:
25:88:c0:96:ec:57:65:53:eb:08:fc:20:ec:eb:0a:95:07:f8:
bb:bd:2b:2d:11:e6:68:da:fc:a2:98:21:b2:07:0c:2d:b4:da:
44:a6:09:44:16:13:2a:83:3f:e5:68:0e:35:5f:10:03:69:2c:
d0:43:ce:54:cf:9a:52:20:bb:60:f2:a7:8b:84:3a:6e:5d:b9:
41:ad:28:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:34 2026 by rpki-client