Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144284.roa
File: AS144284.roa (raw, json)
Hash identifier: EaU7AtrjYLg59o2u5Fgt/psiAruo9wQKZ/Btok7NjYE=
Subject key identifier: CD:A5:24:BE:9B:A3:FF:BB:40:F6:9A:F8:D3:DC:B1:4B:48:15:65:C4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6E5B010DDB963E45243A8C3A74664C82BAE258D5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144284.roa
Signing time: Tue 26 May 2026 06:12:40 +0000
ROA not before: Tue 26 May 2026 06:07:40 +0000
ROA not after: Tue 25 May 2027 06:12:40 +0000
asID: 144284
IP address blocks: 240a:a662::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:5b:01:0d:db:96:3e:45:24:3a:8c:3a:74:66:4c:82:ba:e2:58:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:40 2026 GMT
Not After : May 25 06:12:40 2027 GMT
Subject: CN=CDA524BE9BA3FFBB40F69AF8D3DCB14B481565C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0c:af:a9:5c:d8:f5:d0:49:cb:8d:fb:4a:94:
60:2e:e0:da:c4:76:72:ab:ea:51:61:e2:91:f5:32:
ce:3f:53:1e:e1:88:a8:8b:a2:3c:cd:49:2f:82:6b:
3a:d0:70:4f:f8:13:cd:0f:c6:a8:6a:6b:b9:a2:6c:
b9:26:c1:54:1d:e1:74:3d:ae:3b:7d:6f:08:5c:21:
bc:f3:e1:a4:a5:bc:7b:97:0e:00:cb:f6:b4:fc:f4:
94:a7:0d:01:cb:a7:2f:0a:bb:23:9d:a9:eb:92:32:
58:2a:00:4b:b8:7e:a5:77:28:90:40:ab:ac:a2:79:
45:c8:82:ea:fc:68:b5:6f:04:13:6d:18:3b:77:c1:
77:4f:80:a7:27:3e:9b:a7:37:78:3c:8b:37:07:b9:
af:d4:7b:cb:20:6a:45:e7:db:5f:b3:85:16:65:a4:
dc:c0:56:b8:47:fb:47:09:05:26:f8:62:47:63:76:
78:da:5d:31:9f:0a:cb:9b:1d:9f:fd:47:f3:5a:a4:
49:12:5a:43:9f:7e:e0:76:85:36:99:1b:21:69:fd:
18:85:57:80:56:49:8f:d3:55:a0:56:58:b2:2a:f4:
e6:2d:ca:e9:3e:3f:36:d8:2c:dc:9b:45:74:f9:6a:
2f:cf:87:e2:94:ad:07:e3:d4:af:e7:37:0b:47:b4:
84:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A5:24:BE:9B:A3:FF:BB:40:F6:9A:F8:D3:DC:B1:4B:48:15:65:C4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144284.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a662::/32
Signature Algorithm: sha256WithRSAEncryption
40:f2:83:bd:43:26:a4:2a:dc:12:7f:6c:04:8a:a3:37:fc:40:
4e:17:43:46:f7:e1:c6:a4:2d:17:0c:ed:20:ab:b2:0a:08:33:
8e:88:cb:47:03:b6:12:c1:91:d6:6f:7d:b5:33:99:98:5d:48:
d2:48:54:e6:28:dd:96:b8:5d:bd:46:22:96:81:90:bf:6c:bd:
63:70:af:df:89:65:b4:65:bc:28:bd:d4:83:56:91:80:3f:20:
20:9a:c0:bb:a8:20:15:05:22:7b:2f:d9:52:5f:ca:ca:3c:94:
75:2a:26:78:b2:43:ca:62:f1:6b:13:1b:b5:8a:6d:c4:4f:d2:
d3:1f:4d:88:23:5b:49:c7:ed:1d:9a:1e:02:11:88:67:71:38:
67:9f:18:e5:48:e6:4a:ba:93:4e:e6:90:52:b9:f6:21:47:44:
c9:22:4f:25:62:a4:f0:0c:1c:93:87:c4:f5:42:d2:42:e5:30:
4e:d4:56:8f:dc:1a:be:d3:49:5b:74:fd:60:70:4f:40:82:82:
1b:ed:78:20:a9:c1:4a:78:f7:7d:bf:33:ec:03:c2:3a:3d:8f:
71:b0:52:2a:ab:3c:64:f4:c0:a5:cb:74:28:aa:97:4d:52:83:
fc:0d:3a:ed:07:60:a3:d7:1a:f4:06:3a:1e:ed:fc:59:7e:58:
48:a2:3c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:11 2026 by rpki-client