Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144296.roa
File: AS144296.roa (raw, json)
Hash identifier: UnVzARgctT4J4vZOvdZi1Av1C+b9SwllmgxQ4QRQPqg=
Subject key identifier: 0A:B8:7C:63:5D:38:05:D5:50:D2:42:8B:15:80:12:A4:14:8D:AE:C7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0368B94143242FD23A5259411482390B236EA514
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144296.roa
Signing time: Mon 25 May 2026 02:22:39 +0000
ROA not before: Mon 25 May 2026 02:17:39 +0000
ROA not after: Mon 24 May 2027 02:22:39 +0000
asID: 144296
IP address blocks: 240a:a66e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:68:b9:41:43:24:2f:d2:3a:52:59:41:14:82:39:0b:23:6e:a5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:39 2026 GMT
Not After : May 24 02:22:39 2027 GMT
Subject: CN=0AB87C635D3805D550D2428B158012A4148DAEC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4e:71:2a:8c:4a:50:25:d4:fe:bd:d4:06:ae:
2d:be:a3:8e:99:80:9d:d7:de:79:ba:b6:76:9c:6d:
c1:11:ce:65:86:27:4d:a1:6b:0e:18:27:ec:ca:a2:
c4:d8:92:f7:03:43:f9:74:ed:a5:73:fd:4f:84:a6:
4f:6d:69:bf:ff:a9:2e:3e:26:c8:37:07:89:e5:1d:
74:27:cc:c1:6c:f7:52:aa:ff:09:1b:e8:f5:5d:a5:
8b:0c:d3:54:a6:02:4b:b2:80:3d:19:97:30:66:06:
64:b7:5b:6b:1f:3d:19:df:08:a7:86:08:c5:d9:d2:
a2:ba:5f:44:11:39:ce:1e:57:68:91:e3:b6:f8:d6:
fc:fd:38:ef:20:9d:3a:d8:c6:89:a1:06:8c:9e:a5:
d3:b9:20:71:6f:6c:09:1d:e0:50:f5:43:de:0f:10:
1a:aa:a3:aa:58:88:b4:ff:9f:b1:88:38:14:12:f5:
55:04:94:01:80:ed:6a:29:f8:fb:98:92:6e:27:45:
a7:a5:54:bc:db:2e:c0:4d:9c:73:b0:26:1f:38:58:
0d:7b:78:b8:e9:de:c6:b4:25:35:47:ac:c3:69:86:
00:64:d5:84:e8:d2:ab:30:55:58:91:3c:3b:b8:68:
c7:90:c1:cc:f6:7a:e0:e6:25:92:68:b1:c5:af:e0:
4d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B8:7C:63:5D:38:05:D5:50:D2:42:8B:15:80:12:A4:14:8D:AE:C7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144296.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a66e::/32
Signature Algorithm: sha256WithRSAEncryption
3a:9e:51:3f:16:19:42:75:4f:a6:f8:b7:57:c0:2a:5b:51:41:
28:79:f7:ba:a4:d4:6b:39:ad:83:8d:8b:c8:79:2c:71:61:fb:
c5:28:52:f2:e1:e5:57:ba:b6:3c:43:d9:6a:bb:05:01:3d:53:
dc:bf:0f:20:ea:bb:df:62:d8:c2:b4:0d:46:51:05:92:0f:ba:
e4:3c:14:8e:60:30:12:62:07:d8:59:4b:fc:69:15:d3:3d:b7:
98:a8:52:a6:61:da:fd:b0:cf:c3:fc:a5:9e:33:bb:d5:76:ab:
84:7d:48:89:18:ee:db:5a:84:28:fb:68:b3:71:86:09:8b:1d:
3e:00:85:88:1a:e7:54:a2:53:ea:e6:c1:ad:54:41:2b:c1:13:
5c:d7:f7:3c:11:a5:c8:e1:23:9b:e0:ce:08:c7:a7:b4:ea:b9:
2f:30:4a:1f:04:40:d9:0d:af:2a:e4:33:9e:b1:0e:5e:36:82:
81:aa:41:a0:c2:67:02:81:07:a5:0c:db:50:11:c3:46:72:93:
64:75:3c:6b:1f:93:da:0e:ed:66:57:dc:2f:ca:70:14:5d:e5:
e5:ad:cb:0b:df:ac:26:5a:1c:6b:c4:30:f6:af:4c:ff:4c:5e:
5f:bb:47:09:f1:a7:ac:2b:75:02:74:90:b3:2d:c8:0b:a9:73:
d4:d7:da:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:33 2026 by rpki-client