Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144276.roa
File: AS144276.roa (raw, json)
Hash identifier: R2OZixW2pZFVVnIcxFGoKwJMVHmag6LAtt4mEZIWtRc=
Subject key identifier: DE:28:24:A6:C8:AE:BD:BB:48:FA:40:D7:F9:AB:95:87:28:0B:BE:0D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 59FFC1E3026BF10630D069E063DF7F7CDAC98D2D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144276.roa
Signing time: Tue 26 May 2026 01:13:24 +0000
ROA not before: Tue 26 May 2026 01:08:24 +0000
ROA not after: Tue 25 May 2027 01:13:24 +0000
asID: 144276
IP address blocks: 240a:a65a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:ff:c1:e3:02:6b:f1:06:30:d0:69:e0:63:df:7f:7c:da:c9:8d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:24 2026 GMT
Not After : May 25 01:13:24 2027 GMT
Subject: CN=DE2824A6C8AEBDBB48FA40D7F9AB9587280BBE0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:63:85:4d:56:1e:44:da:55:30:fb:b6:e9:e5:
1d:3b:ea:84:3f:46:54:ac:51:52:c4:7e:7a:30:03:
66:27:ca:bc:63:98:36:b4:13:37:5f:af:e8:40:5a:
78:f8:4b:3c:74:6d:c7:ee:ea:97:c8:79:2f:2f:51:
af:28:5b:af:48:68:fa:27:04:8d:b2:34:54:f7:12:
71:2a:ff:91:ff:ce:a8:c5:6f:33:98:1c:24:af:a8:
04:f4:99:fd:8f:2a:01:ce:1b:55:ff:90:c0:04:e4:
c5:49:f8:bf:ae:f1:1b:72:9d:b5:ad:84:53:40:ef:
5c:74:f3:9f:f5:9b:2b:13:f9:7d:b0:8a:d4:ed:43:
f9:73:90:37:92:d9:77:8d:30:73:25:b5:61:c4:30:
d7:a0:5d:14:cc:57:4a:e3:ba:23:ff:cb:42:f1:8c:
3b:dc:e7:75:17:bd:f3:33:b3:64:ca:c7:e2:36:db:
0a:e1:14:05:d0:82:c9:52:e6:56:2d:d3:d6:25:ed:
90:9b:b6:3c:b1:17:26:b6:1f:67:e3:a4:71:ca:c9:
28:0f:ad:41:0f:57:36:59:ba:99:bb:5e:48:c9:b2:
7d:05:51:ca:d2:8f:55:ee:0d:97:11:62:da:45:51:
47:e9:66:78:e9:7e:97:43:62:0d:83:d0:8b:94:a1:
41:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:28:24:A6:C8:AE:BD:BB:48:FA:40:D7:F9:AB:95:87:28:0B:BE:0D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a65a::/32
Signature Algorithm: sha256WithRSAEncryption
17:b6:bb:7a:cf:86:80:63:d5:9c:e0:c8:b2:d8:98:74:49:a6:
fb:f5:3d:6c:4b:35:3a:94:9f:57:25:43:8d:db:db:7b:38:57:
c5:a1:45:56:ae:e0:66:53:07:28:17:37:f3:38:5b:e3:53:da:
68:38:72:a9:54:f7:91:97:93:b7:a9:d8:a9:fc:ea:04:51:22:
b5:1a:65:f6:10:c0:69:2d:06:c9:ac:02:0b:d6:a3:46:5a:4f:
58:1a:e2:46:59:81:fa:db:ea:ef:95:ab:83:56:3f:6b:33:21:
12:22:20:0c:be:fe:d8:75:a2:09:4d:93:1e:66:7d:fe:76:39:
95:7a:38:b5:f8:df:f2:ec:fd:63:f0:c6:9c:23:47:4b:e6:ce:
e2:1c:37:ae:ff:23:f2:31:91:48:55:bc:2b:8a:de:d1:06:ee:
94:a4:56:a0:9f:3b:ee:e0:7d:b8:6b:c9:1b:f1:90:9e:ff:f9:
c5:24:de:57:fb:e6:41:6c:8e:67:fb:76:ad:2a:3c:6b:0c:84:
d8:3b:c7:ab:a4:c0:68:d1:5e:02:05:24:67:5c:ce:a5:78:f2:
42:95:c3:25:42:51:1f:68:89:9c:77:6f:33:db:1c:65:89:21:
8a:b9:35:3f:d0:53:4b:87:ea:be:a6:7a:6a:b4:f0:b7:90:6d:
64:a2:41:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:56 2026 by rpki-client