Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144263.roa
File: AS144263.roa (raw, json)
Hash identifier: K9mw0ZyNFGFUb/6uj+/6TZ6pz7kAfk8spduGCMnVAvA=
Subject key identifier: 6A:42:BC:A8:60:8B:4E:66:76:57:B5:E9:20:66:DC:42:3C:5E:FE:E0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3FA8BA2BD7C24D3437D4F6ABF151DA3179350DEF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144263.roa
Signing time: Fri 22 May 2026 02:47:35 +0000
ROA not before: Fri 22 May 2026 02:42:35 +0000
ROA not after: Fri 21 May 2027 02:47:35 +0000
asID: 144263
IP address blocks: 240a:a64d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:a8:ba:2b:d7:c2:4d:34:37:d4:f6:ab:f1:51:da:31:79:35:0d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:35 2026 GMT
Not After : May 21 02:47:35 2027 GMT
Subject: CN=6A42BCA8608B4E667657B5E92066DC423C5EFEE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:df:d0:5d:5c:1c:83:12:d8:14:dc:2e:7b:
e5:a0:65:82:8f:0a:1f:f9:d8:3d:d4:65:78:47:0d:
2f:15:e5:14:2e:5e:af:10:64:68:33:0e:a4:4d:78:
74:0f:af:8e:51:34:0e:c1:59:f6:58:27:80:36:d2:
02:f1:c8:ac:49:75:8f:a2:41:4b:86:f6:d2:dc:0b:
dc:7d:29:47:d2:ab:c8:19:57:97:7a:27:96:98:cf:
41:bb:8e:f3:40:c8:9d:e9:74:60:14:5a:a9:a0:12:
1c:57:83:eb:de:c5:b3:0a:bb:6e:b5:23:db:0f:de:
63:c1:90:e4:71:c0:a6:7a:24:17:ca:56:95:2a:fb:
d6:29:4d:80:89:58:56:c0:ac:a6:02:85:f5:fc:1c:
5e:0b:df:8d:81:8e:2c:35:94:aa:54:4f:47:23:7d:
a5:2a:21:fc:06:d3:1b:44:a3:05:13:59:de:d6:95:
f1:00:f7:90:c3:6b:67:77:4d:bf:7b:69:c1:b0:36:
1e:c2:ff:54:9b:e6:59:b8:47:35:8a:a3:98:f5:8f:
82:f1:42:9b:9c:69:5d:35:85:43:ca:5b:14:24:c2:
ee:59:63:b3:5d:73:cc:00:8d:4d:48:9f:ed:65:96:
ad:42:1a:33:ff:98:7f:0e:a8:74:4b:02:83:c2:34:
d0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:42:BC:A8:60:8B:4E:66:76:57:B5:E9:20:66:DC:42:3C:5E:FE:E0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144263.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a64d::/32
Signature Algorithm: sha256WithRSAEncryption
a3:2b:7a:2c:87:18:e1:23:da:37:7e:60:a9:6b:e8:18:29:36:
fd:9d:f5:d0:6c:c1:07:cc:04:6b:b6:9d:6d:14:bf:17:70:a0:
ff:78:4d:91:b0:6a:f5:76:46:be:05:07:7a:73:a1:6a:98:9f:
a3:44:45:3d:d2:b5:49:09:37:54:fd:45:0b:a6:0f:b9:7e:56:
1e:1e:25:9e:0d:db:81:da:fe:64:35:31:82:be:36:d5:e0:d5:
c4:b3:c3:f5:b0:7c:73:33:a4:0c:ab:e3:2f:e6:8a:3e:72:e2:
44:50:39:95:e8:da:e5:94:fc:a9:8f:79:b5:e3:ee:c7:09:a9:
48:cc:5d:db:0d:dc:de:8c:61:74:f6:3a:22:77:8c:dc:81:93:
3f:54:f7:b0:a7:77:bb:a3:9c:bc:77:83:36:32:76:29:fb:64:
89:e4:af:32:74:04:3a:d3:ee:10:15:8a:b3:c9:aa:66:18:0e:
c5:c2:13:e0:d5:2a:68:31:99:bf:cd:ba:3e:9a:eb:8f:2b:d8:
ec:34:07:67:5c:0d:0d:e4:16:b6:a7:6b:31:64:e8:06:26:0f:
3f:be:88:95:2e:04:ee:b4:93:fc:5f:ef:b4:c8:10:e6:27:b9:
bc:50:66:59:a2:1d:66:34:25:cc:34:9c:75:ae:de:29:1a:d1:
60:f0:65:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:40 2026 by rpki-client