Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144257.roa
File: AS144257.roa (raw, json)
Hash identifier: aAvkDDg2Bgx16R95RJMz/DBxMLE/meKruWjkg0anzG8=
Subject key identifier: D7:DC:2E:D3:EE:B8:18:83:49:17:AB:D3:43:BC:F4:1E:0C:59:94:9C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0F8857423E9F8CCFD36860A896C05B3010EC8F5F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144257.roa
Signing time: Fri 22 May 2026 07:25:00 +0000
ROA not before: Fri 22 May 2026 07:20:00 +0000
ROA not after: Fri 21 May 2027 07:25:00 +0000
asID: 144257
IP address blocks: 240a:a647::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:88:57:42:3e:9f:8c:cf:d3:68:60:a8:96:c0:5b:30:10:ec:8f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:20:00 2026 GMT
Not After : May 21 07:25:00 2027 GMT
Subject: CN=D7DC2ED3EEB818834917ABD343BCF41E0C59949C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:00:2c:74:86:46:69:83:e9:58:a6:c9:de:12:
b4:de:f4:cb:e9:81:03:5a:3c:3e:b6:58:5e:0b:26:
4a:a6:1f:98:b1:e7:f0:a7:a0:e3:57:a4:68:f5:9e:
9e:3b:98:1b:76:ad:05:d8:60:f6:46:31:76:c0:43:
03:63:9e:d8:1e:1e:47:98:7d:db:e0:c4:71:01:67:
c6:f3:61:7d:e3:44:9e:11:42:2b:40:b7:62:ef:50:
2f:41:cd:85:ed:9d:0f:43:11:09:b4:4b:e3:3f:df:
00:2e:53:0d:4e:88:58:f7:37:05:26:bc:e6:e7:a4:
0c:2d:05:75:28:13:29:f2:58:8a:15:56:c4:cf:d5:
b7:72:42:1d:68:ae:64:0a:64:9c:80:2b:97:1d:18:
ee:64:4d:8c:54:4d:4a:14:4e:61:82:44:cd:48:d6:
b5:9c:0a:d9:a2:b1:90:8c:73:ea:a3:8c:f8:76:f1:
05:ca:f7:34:fe:00:22:eb:0b:e0:a2:ed:49:fe:6d:
f2:34:7c:a3:3f:1b:9e:ec:9c:72:6b:65:c6:a6:4d:
70:58:db:c0:4e:f6:ae:1b:57:17:c7:fb:d7:05:b2:
87:35:e6:75:ef:02:c5:e7:bd:1f:3a:77:ff:20:d2:
3f:a5:de:5f:ce:73:ea:14:48:6b:d2:be:18:a1:7a:
8f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DC:2E:D3:EE:B8:18:83:49:17:AB:D3:43:BC:F4:1E:0C:59:94:9C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a647::/32
Signature Algorithm: sha256WithRSAEncryption
03:2d:9b:93:d6:8f:d9:d9:b9:cd:dc:0c:07:0e:5c:18:e0:7b:
6c:21:f1:67:d9:31:57:0e:fd:d3:bd:7d:62:d5:df:f7:7f:0f:
d2:64:72:d1:11:65:a9:4f:81:9c:84:08:de:4b:92:c1:38:42:
54:56:32:d0:9a:fb:27:e5:ad:1e:cf:f5:81:c3:f7:34:68:66:
08:95:a1:07:3d:fa:3d:83:6e:1a:75:98:0d:9d:79:42:04:97:
e7:fb:f2:40:3c:08:5c:89:d8:06:65:79:29:b7:dc:5a:1f:9e:
a3:37:cf:d7:d3:57:75:1d:95:d2:95:24:78:ad:63:cc:b9:d2:
5b:11:f3:81:f5:b6:9b:20:dc:47:04:4a:ce:9d:3d:a2:3f:27:
69:18:40:df:c1:92:b2:60:60:58:65:16:bc:96:b4:38:a2:49:
8d:a6:31:61:e5:ac:31:70:58:30:2c:d9:97:17:98:64:80:a9:
f7:b8:03:d5:0a:07:1b:dd:c9:35:52:01:ae:0e:fa:12:9b:eb:
a0:a7:f5:7c:14:79:de:81:f3:5a:4a:a4:8d:f0:e6:5e:73:fa:
be:f3:c8:2e:42:dd:7f:db:fc:14:83:6d:a6:32:9d:c9:e5:98:
11:07:89:68:94:18:04:b3:a0:bd:9d:17:75:c5:32:94:58:ca:
4f:f0:01:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:19 2026 by rpki-client