Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144294.roa
File: AS144294.roa (raw, json)
Hash identifier: vidvxkWFreih0m8cWRnIKb+f0m00WM7Bo8jr3ugv4wA=
Subject key identifier: 17:57:B2:EB:D3:E6:03:04:23:98:86:5B:F9:F5:4E:D3:FF:0B:97:39
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2F2BA2D6B63914845AE2DD4904F69F684A67C71F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144294.roa
Signing time: Fri 22 May 2026 06:58:34 +0000
ROA not before: Fri 22 May 2026 06:53:34 +0000
ROA not after: Fri 21 May 2027 06:58:34 +0000
asID: 144294
IP address blocks: 240a:a66c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:2b:a2:d6:b6:39:14:84:5a:e2:dd:49:04:f6:9f:68:4a:67:c7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:34 2026 GMT
Not After : May 21 06:58:34 2027 GMT
Subject: CN=1757B2EBD3E603042398865BF9F54ED3FF0B9739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c2:e7:43:e2:1f:90:e5:04:8c:8d:55:5b:99:
cc:d3:ca:ac:bf:81:c8:3e:3a:3d:40:98:df:2c:dd:
c1:ad:46:c7:31:05:d7:df:f5:00:dc:46:02:2b:cc:
5a:ed:0f:59:6e:04:82:25:05:13:36:75:77:55:fd:
9d:4d:bc:2e:04:4f:61:cf:dc:31:21:4f:f3:34:d6:
ce:ba:5d:dd:42:29:97:3b:96:b9:a5:a4:6a:5a:61:
08:e4:ed:ad:90:70:30:ec:ef:99:b1:7d:26:43:77:
49:8a:4a:40:ed:21:c5:71:5f:72:97:1c:17:f5:ca:
2a:f7:04:99:db:40:c1:f0:14:f5:cd:92:ce:75:09:
80:29:b9:cb:df:4a:b0:9f:1c:62:84:98:94:46:3d:
79:bb:0f:4d:80:cf:46:90:3e:18:1b:c5:03:7a:32:
5f:54:38:a5:e5:25:ca:44:c7:1f:32:aa:c1:26:43:
d2:8a:a2:f9:ef:02:aa:36:95:19:76:90:25:97:e6:
28:a0:21:ac:e8:fa:0a:a5:7e:9b:4d:3b:6c:d9:20:
6f:52:7f:50:ef:4e:5d:84:1f:a0:e3:31:80:0e:f9:
a1:e6:c5:ad:43:ea:d1:60:e6:39:b1:15:15:9b:5c:
e8:92:4d:44:95:9f:f0:e2:84:5e:cb:3d:df:a9:23:
59:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:57:B2:EB:D3:E6:03:04:23:98:86:5B:F9:F5:4E:D3:FF:0B:97:39
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a66c::/32
Signature Algorithm: sha256WithRSAEncryption
b3:4c:75:73:f4:cc:f8:48:48:00:a6:3b:bc:17:b3:fe:a9:55:
75:78:47:45:9f:04:cd:9a:b3:82:59:56:4c:93:d7:f2:81:e1:
d9:2e:52:4a:d7:9f:af:65:02:f7:30:dc:c3:c1:7c:09:14:54:
13:0e:13:52:5f:b5:33:82:c4:9b:b0:7e:97:4c:fe:ea:97:3f:
6c:a8:e9:61:d3:ae:f9:ee:77:0f:c0:a8:ea:b8:18:9c:c4:9e:
71:c8:6f:24:94:ad:85:60:48:6a:75:9a:88:9a:8c:c4:07:ec:
c3:25:90:6f:1d:7f:a8:b0:7f:b3:aa:19:9b:3b:8f:9d:8c:89:
a2:9f:75:19:64:f0:60:82:4f:05:64:21:a7:6c:b3:c4:4e:83:
50:bb:b0:0b:ca:75:1a:1d:f1:f0:a7:29:40:70:dd:ea:98:54:
6d:b0:fb:b9:ec:6a:89:cc:1b:21:98:76:a6:de:08:6c:c4:f4:
08:4c:32:4d:6e:04:28:77:0e:9d:d9:99:97:31:d9:a0:68:8e:
cc:f3:f4:a4:96:16:2f:30:be:1a:ec:84:91:43:02:99:03:68:
5c:d7:f8:90:25:77:b5:ee:9f:2b:f1:65:bc:36:d4:a9:fa:eb:
e4:db:00:93:65:47:da:86:cb:54:f9:31:1e:b7:99:52:1c:47:
56:14:0d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:46 2026 by rpki-client