Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144272.roa
File: AS144272.roa (raw, json)
Hash identifier: 4SpU62ulZTNbjDF0YEDTCvAjK8n9sQ+NOEewv4uRLpM=
Subject key identifier: D0:A2:A6:15:4C:10:41:8A:2D:9E:FE:39:C1:45:AA:39:5D:F5:1C:83
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 434C8E3A825EFE5C285598F3B965147580EACA79
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144272.roa
Signing time: Fri 22 May 2026 04:08:29 +0000
ROA not before: Fri 22 May 2026 04:03:29 +0000
ROA not after: Fri 21 May 2027 04:08:29 +0000
asID: 144272
IP address blocks: 240a:a656::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:4c:8e:3a:82:5e:fe:5c:28:55:98:f3:b9:65:14:75:80:ea:ca:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:29 2026 GMT
Not After : May 21 04:08:29 2027 GMT
Subject: CN=D0A2A6154C10418A2D9EFE39C145AA395DF51C83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fe:60:ac:26:f6:15:db:04:56:f5:4c:df:8b:
2d:90:a1:0f:16:ed:cb:9e:14:13:34:35:74:ed:4b:
cd:54:ec:27:4e:95:c2:0c:d9:4c:d3:0a:19:5a:e7:
5d:70:41:c1:e6:0f:c6:4a:38:f5:66:47:f3:fe:d9:
16:a0:a8:17:cd:d5:8f:9c:45:f2:d6:42:1a:87:77:
4b:a8:d9:74:f8:b6:12:17:54:e9:1e:1a:16:0c:70:
15:d4:11:7f:46:9f:05:6c:93:a4:8e:b3:87:1f:8c:
5b:6a:7c:aa:68:de:73:ca:4f:bc:86:aa:a7:61:39:
42:2a:9a:5c:ef:94:84:1c:48:a4:2e:08:35:5b:d1:
1d:0f:0c:61:5a:51:ac:a4:f5:18:1d:2a:c1:e0:64:
27:fe:28:f5:8d:1c:8b:b3:d7:b8:dc:e0:ee:fa:77:
46:a9:d7:36:80:49:d4:b5:95:1a:ef:24:c6:d0:fa:
a4:1b:a2:d8:f7:60:52:0d:ca:f9:94:81:a3:a7:2d:
8a:c6:62:88:18:9c:ed:c9:4a:be:46:66:9a:8e:33:
8f:f6:3c:36:77:07:c4:07:e3:67:56:3d:e5:bf:8d:
a4:71:f0:7e:e7:2b:49:97:47:33:3e:0c:b0:cf:69:
08:ba:cc:04:98:a6:d9:85:bb:4c:69:8e:a6:69:65:
e8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A2:A6:15:4C:10:41:8A:2D:9E:FE:39:C1:45:AA:39:5D:F5:1C:83
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144272.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a656::/32
Signature Algorithm: sha256WithRSAEncryption
8f:97:53:9d:71:70:b3:c5:b7:a9:d0:51:29:01:29:2b:89:a6:
20:8f:a6:98:48:37:8a:c1:c8:8d:5e:8b:39:96:18:e7:7b:20:
ef:f7:e4:a2:7b:6a:42:5f:83:30:6f:16:9b:bb:59:86:56:cd:
70:0e:b0:e9:a8:c4:78:1c:0c:76:41:22:99:59:00:86:3e:57:
23:66:bb:1f:ed:9d:65:b3:2a:df:8b:d0:c9:59:67:40:cb:29:
1d:33:80:0f:2d:06:cc:8a:a4:7e:fd:b0:1c:bc:34:a9:00:41:
c0:91:1e:cd:77:b5:a5:43:2d:7d:27:0f:7b:d2:8e:19:4a:10:
d1:3e:dd:98:4f:5d:3d:15:fa:41:14:9c:de:35:be:1b:1a:cb:
d7:fc:d0:6b:0d:9d:d8:51:e8:26:1b:02:f6:2c:c3:37:b2:55:
ac:b6:07:ae:02:87:13:47:61:54:ac:c7:09:09:e5:8b:ce:fb:
ec:94:ae:d5:94:d9:b6:2f:6c:12:56:d7:af:f2:94:7d:e3:d2:
81:40:f4:20:93:c3:01:4f:4e:90:63:dc:56:18:13:a9:d4:8a:
c4:d3:bb:51:b9:5d:12:f1:40:c4:e7:21:9b:19:4a:cc:2e:48:
68:74:e2:d3:4f:19:c3:64:05:d0:63:d4:2b:45:97:8b:73:0b:
ec:13:30:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:28 2026 by rpki-client