Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144258.roa
File: AS144258.roa (raw, json)
Hash identifier: YYVdrbfC7fbDAlWGG1VDsyqW/Qwwnq+fDYgkLtMYNI4=
Subject key identifier: 49:45:18:37:B0:CE:9C:AB:78:0A:D5:A6:27:CE:0E:12:BC:2D:0A:D9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6BBA0B0B4396D66AD1382573D7365AAC54A6962E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144258.roa
Signing time: Tue 26 May 2026 03:16:58 +0000
ROA not before: Tue 26 May 2026 03:11:58 +0000
ROA not after: Tue 25 May 2027 03:16:58 +0000
asID: 144258
IP address blocks: 240a:a648::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:ba:0b:0b:43:96:d6:6a:d1:38:25:73:d7:36:5a:ac:54:a6:96:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:58 2026 GMT
Not After : May 25 03:16:58 2027 GMT
Subject: CN=49451837B0CE9CAB780AD5A627CE0E12BC2D0AD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4c:53:97:d2:4d:98:0e:57:fe:49:34:62:b5:
99:62:91:6d:17:bc:52:6e:6c:50:ab:c5:b4:61:93:
f6:61:84:73:c3:00:f8:b0:0d:93:f6:fa:4d:f7:df:
97:d0:40:fb:7e:e2:ec:36:82:fb:9d:8d:6a:5d:7a:
a5:6a:4f:6a:cb:87:54:26:90:8d:21:0a:47:4a:0e:
81:20:de:ee:f1:a1:e2:29:b8:49:3a:2f:b8:bf:da:
be:b1:43:85:b2:66:1a:a5:37:1d:d6:e0:b7:9c:7a:
7d:93:8f:52:03:5c:ff:81:fb:60:64:04:45:ca:57:
b5:92:7d:cf:db:34:9c:1c:83:2a:ee:94:c6:b9:61:
79:f1:c1:cf:b4:44:d5:b8:f5:95:f6:0f:fc:f9:0e:
d7:81:61:db:a4:34:db:77:d6:3a:ef:fc:9d:eb:37:
60:07:2c:52:f5:ec:a4:fb:c5:1c:6e:10:33:20:2b:
0e:1d:3b:38:8d:a7:cb:b8:21:8b:11:64:c4:4f:54:
3b:c7:a2:9a:56:49:95:ad:c7:36:dd:c2:83:d4:dd:
5d:f6:44:fe:c3:ee:07:00:fe:24:f4:eb:f4:53:8a:
45:2b:c1:9f:54:35:16:e5:49:4e:ee:44:5b:5f:41:
01:08:0c:93:21:02:66:1a:20:03:5a:bf:1e:fc:59:
10:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:45:18:37:B0:CE:9C:AB:78:0A:D5:A6:27:CE:0E:12:BC:2D:0A:D9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144258.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a648::/32
Signature Algorithm: sha256WithRSAEncryption
86:dd:64:c0:54:ab:6b:e9:fe:6f:ce:7f:bb:94:36:7c:f9:91:
50:97:ce:34:77:47:2e:a7:ec:85:0d:e1:ca:ce:f6:4a:9e:69:
d0:09:25:1d:54:df:1e:b3:06:f5:fc:fc:37:7c:3a:17:7e:a1:
bb:5b:2e:4f:ce:74:d6:9d:c7:ca:25:03:fb:e1:45:67:5e:d6:
2a:f2:5a:4d:06:f2:0a:68:e4:dc:88:42:c0:6f:f9:74:b2:2d:
8d:0d:17:78:08:42:83:03:c9:b1:b1:c3:d2:a5:0c:6b:10:c6:
7e:d1:f3:7e:fa:0b:2a:9c:8b:4d:ff:d9:f7:f4:da:41:f1:7d:
33:4f:87:7d:a2:ba:3d:63:5d:96:f5:66:9d:95:19:6f:e9:8b:
a2:8c:26:65:44:a2:e9:fa:b9:46:b3:ed:56:6e:6f:2d:6d:16:
43:fe:bf:1a:f8:8a:49:73:fd:55:e0:9f:da:ae:ba:31:72:25:
09:5a:5a:91:be:0c:64:cf:e2:35:d2:9b:a3:4e:25:a4:5b:51:
74:8e:33:50:35:33:87:f9:aa:46:f5:6a:bb:e2:f6:14:70:a4:
df:4e:02:83:8a:d5:9b:98:c2:eb:3a:0e:6c:74:08:27:b7:3d:
b5:23:2a:fd:6d:91:09:d4:41:8a:91:cc:f1:83:32:de:a6:db:
49:e6:20:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:41 2026 by rpki-client