Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144264.roa
File: AS144264.roa (raw, json)
Hash identifier: VdRxgOZDrZW9e2nxBNLQV2QPyg4V2u1MQ8XZABSE0D0=
Subject key identifier: 86:70:30:EA:FB:77:62:C5:43:9A:29:6F:BF:5D:25:39:43:E4:2B:2F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4F1ADFA0A4A4DB70B714E7FE8A6222817DC2D12A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144264.roa
Signing time: Mon 25 May 2026 01:20:11 +0000
ROA not before: Mon 25 May 2026 01:15:11 +0000
ROA not after: Mon 24 May 2027 01:20:11 +0000
asID: 144264
IP address blocks: 240a:a64e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:1a:df:a0:a4:a4:db:70:b7:14:e7:fe:8a:62:22:81:7d:c2:d1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:11 2026 GMT
Not After : May 24 01:20:11 2027 GMT
Subject: CN=867030EAFB7762C5439A296FBF5D253943E42B2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:74:10:b1:40:af:5e:08:bc:6b:d8:e6:5c:6c:
c9:a7:66:a7:bf:8f:95:a1:69:7a:f0:6a:44:28:2f:
c3:83:b4:5b:86:3b:ab:55:fb:85:45:ac:4f:70:56:
46:77:ff:8f:1a:97:6c:a8:03:0b:65:a7:8d:b4:90:
35:18:17:d8:dc:cb:e4:dd:3c:2a:88:a8:a4:fc:a3:
58:63:b7:88:5b:2b:16:81:95:ef:47:30:51:8a:a3:
0f:4c:7f:8d:2b:84:bc:7b:b1:68:45:7b:04:8f:de:
44:3a:6d:b3:81:a6:bf:e5:e2:d8:ca:74:82:b1:ce:
d1:4c:c6:a4:33:1e:c5:e7:26:75:d2:a5:26:31:bf:
c0:47:bc:53:5d:4c:ce:ec:4c:36:aa:e1:ce:ab:7e:
d6:5a:e3:56:d9:f6:fe:8c:cc:18:6b:4a:d8:59:24:
d3:a6:e1:15:ce:5b:08:2f:66:15:0d:74:f8:e5:1b:
2f:b8:0c:aa:3a:55:6d:43:79:11:63:46:d7:ae:81:
cd:9e:c5:00:f9:e9:0b:32:2d:28:df:5c:e3:68:0d:
a6:b2:fe:9f:50:3d:cb:93:87:c5:83:9a:e3:52:cb:
ca:1c:c8:fb:3b:6f:dd:f6:05:e4:a4:51:20:6d:47:
45:a6:c9:c2:0c:e0:bb:bd:df:fa:30:6d:43:1f:96:
d8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:70:30:EA:FB:77:62:C5:43:9A:29:6F:BF:5D:25:39:43:E4:2B:2F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144264.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a64e::/32
Signature Algorithm: sha256WithRSAEncryption
86:70:29:d2:62:3e:a5:0a:dd:c7:c8:e8:c6:cb:70:bf:ce:ca:
26:59:cb:2e:f6:06:24:01:bc:9c:24:80:cf:30:6e:a8:84:6d:
ea:ff:6f:2c:80:13:71:7c:b4:13:69:8a:ee:92:b7:0b:9e:48:
ad:61:7f:28:ce:5b:cc:03:61:b4:81:ca:4c:3c:20:c9:4d:35:
75:eb:76:19:14:16:e1:c0:14:33:60:ca:44:90:5c:ef:d1:37:
fe:d2:d2:86:1a:27:db:89:35:cc:2d:6e:50:0d:8d:c0:47:41:
53:95:b4:a1:c8:83:61:9f:2e:ec:d5:52:61:9f:a1:30:1a:7f:
55:81:55:10:2d:fd:5b:0b:99:c1:c3:29:47:c8:d5:60:2d:0b:
16:fe:91:57:7a:06:4c:ae:e1:4a:20:ad:71:8e:29:ce:56:ae:
91:2f:aa:2f:a5:97:14:e4:99:76:8d:ab:50:d4:84:45:3b:b5:
30:cc:66:1a:81:8a:23:f3:7e:3e:be:91:0a:a8:d8:90:02:c8:
b3:47:e1:2b:0a:d6:a7:af:dd:b1:64:0c:c5:e5:e7:00:56:b9:
6b:dc:e3:0e:67:46:59:59:6c:d4:39:1b:c0:a9:ee:22:04:7e:
57:a6:ba:70:6e:cf:73:b2:9a:6b:de:49:3b:a4:cd:49:e1:7a:
18:34:54:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:19 2026 by rpki-client