Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144274.roa
File: AS144274.roa (raw, json)
Hash identifier: o/RuX42s0mmulDyMdqrQfn6nOGWbh0xWq/px7ESNXWg=
Subject key identifier: 13:B4:26:F3:93:33:EB:56:7B:EB:6E:7C:E9:BE:28:AE:BB:7C:60:EA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2B4C02E16C2485B8BB95E97BB1787F6EDF5AA93E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144274.roa
Signing time: Mon 25 May 2026 02:22:20 +0000
ROA not before: Mon 25 May 2026 02:17:20 +0000
ROA not after: Mon 24 May 2027 02:22:20 +0000
asID: 144274
IP address blocks: 240a:a658::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:4c:02:e1:6c:24:85:b8:bb:95:e9:7b:b1:78:7f:6e:df:5a:a9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:20 2026 GMT
Not After : May 24 02:22:20 2027 GMT
Subject: CN=13B426F39333EB567BEB6E7CE9BE28AEBB7C60EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:09:30:91:d4:71:d6:18:ef:e0:ff:e4:c4:78:
20:49:74:40:97:79:71:13:b0:c9:10:cb:fd:e0:33:
7b:b7:4e:fb:bd:06:de:94:65:8d:7c:83:e6:33:d5:
f9:44:db:50:7c:63:99:42:25:3d:22:b8:8c:a2:e5:
59:91:d3:55:1c:0d:25:5d:64:0e:8f:c4:01:23:b5:
a0:1a:3f:15:a1:68:0c:0b:28:7d:4e:13:da:b0:ec:
65:04:15:ce:a7:9e:6a:fc:dc:5f:f5:bd:0d:21:a0:
8a:9a:2f:6b:f1:b4:34:ad:5d:8f:0a:6c:c1:91:5a:
4c:6c:58:61:93:d3:ed:17:cd:5c:0c:b3:d0:f4:76:
11:3e:02:6e:03:51:bd:a7:94:34:5d:f3:d6:c6:02:
46:99:42:16:6b:29:6b:aa:20:0c:50:14:92:ed:6c:
33:7e:da:dc:de:91:ca:89:cb:c2:ac:66:d3:23:76:
cd:47:42:02:07:fa:61:f1:9d:ab:48:98:33:e9:f6:
96:d3:7d:a4:d2:a3:c1:70:1b:6c:66:04:a7:77:d3:
48:ce:42:23:ef:e1:9a:29:35:11:60:18:47:77:de:
01:bc:d0:68:6e:44:a2:e0:d2:17:b4:40:73:1b:72:
cb:18:ca:cc:52:23:e6:b2:8f:24:0a:7d:70:9e:e6:
c8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B4:26:F3:93:33:EB:56:7B:EB:6E:7C:E9:BE:28:AE:BB:7C:60:EA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144274.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a658::/32
Signature Algorithm: sha256WithRSAEncryption
0a:53:45:16:63:1c:6c:71:07:19:6b:1c:05:34:b7:3d:ce:81:
f8:4e:aa:6e:96:d8:cb:f4:2a:6b:eb:cf:92:e5:c5:6e:78:9d:
48:21:ea:f7:8b:04:c9:07:22:62:cc:ad:a2:bb:c4:a5:33:d6:
92:52:de:13:ec:27:07:9d:e5:fb:c1:06:9c:49:b6:87:3c:5d:
79:24:9a:91:43:56:9c:0e:a3:0c:40:9b:24:66:2f:ea:cd:4a:
85:09:1a:4c:8c:ce:6b:0e:02:00:14:3c:4d:d9:19:89:8b:90:
d6:16:ee:5a:44:a4:c5:f8:75:38:af:9b:3f:c1:8a:89:47:96:
bf:44:0a:de:71:80:a8:89:f0:36:4a:21:31:f2:e0:29:86:54:
cc:14:d3:5c:ea:fe:f8:da:64:64:c0:ff:62:d4:f4:80:fe:89:
e9:43:f9:25:90:f5:7e:fc:7a:02:b3:84:96:a5:56:ca:2f:7e:
11:f1:4d:33:5b:2d:d1:62:f9:76:18:94:ec:f7:6b:f1:59:c5:
9d:ec:f6:ec:d4:58:f0:94:50:63:de:10:de:29:9a:de:65:5b:
65:33:f4:ae:a2:b3:5e:32:1f:9b:31:3e:79:06:f5:41:59:78:
3f:45:92:72:88:cc:17:49:e5:f4:4b:e0:1b:f6:f8:62:b2:e5:
5d:56:64:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:14 2026 by rpki-client