Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144297.roa
File: AS144297.roa (raw, json)
Hash identifier: JhKVvZmbPUo3A07hltidFOku+opbxsQLCZJG3vpsyPY=
Subject key identifier: 70:9E:E5:E6:D6:E5:46:B4:65:FA:62:A6:4E:1F:E6:68:82:9F:EB:CB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 01C7E024B61F69FF35D379A1BF11B03989DBB941
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144297.roa
Signing time: Fri 22 May 2026 07:24:22 +0000
ROA not before: Fri 22 May 2026 07:19:22 +0000
ROA not after: Fri 21 May 2027 07:24:22 +0000
asID: 144297
IP address blocks: 240a:a66f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c7:e0:24:b6:1f:69:ff:35:d3:79:a1:bf:11:b0:39:89:db:b9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:22 2026 GMT
Not After : May 21 07:24:22 2027 GMT
Subject: CN=709EE5E6D6E546B465FA62A64E1FE668829FEBCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:88:19:b8:fa:74:50:bd:5c:0b:cb:d0:9b:50:
f0:e3:a9:09:97:ac:ba:41:22:0d:8e:3c:c5:5d:f9:
08:19:bc:44:d4:0d:78:19:38:d6:c4:b2:53:dd:34:
37:7d:af:d3:8a:d5:be:9b:92:54:45:45:d7:8c:81:
48:7a:8a:cb:61:c1:3c:80:71:49:e0:e7:8a:c6:be:
2e:21:3f:4e:c2:9e:67:28:b2:4c:fd:d5:97:b8:26:
1a:6a:a1:31:2f:0a:87:27:56:97:f8:71:09:c5:32:
3b:d4:ba:9c:60:41:37:4b:35:25:85:98:d4:e2:46:
48:d4:e0:88:63:c5:21:3c:d8:fb:6c:76:37:6e:f8:
5d:13:96:67:9c:60:29:69:a0:7b:16:cc:89:f4:b3:
45:41:cd:34:c5:42:cf:45:ca:11:ee:e6:0c:cc:0f:
6c:13:55:91:f3:a5:d1:97:c6:a2:28:16:0b:6b:bf:
b4:cc:f5:1f:d6:c5:be:82:00:f6:8e:b4:55:f9:1f:
06:db:1a:16:1e:44:34:f8:74:52:07:8b:08:08:23:
fd:34:69:d5:a7:15:07:9e:9b:65:05:89:70:d2:95:
a2:4c:e4:d1:14:40:0e:71:7c:84:af:b3:e5:21:b5:
ab:84:80:78:ad:c0:17:3c:40:a4:9d:fb:68:f3:81:
79:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9E:E5:E6:D6:E5:46:B4:65:FA:62:A6:4E:1F:E6:68:82:9F:EB:CB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144297.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a66f::/32
Signature Algorithm: sha256WithRSAEncryption
65:0d:11:2d:fa:90:ec:8f:8c:98:b0:58:b0:49:17:5e:38:ec:
d6:96:4f:b1:c7:ae:fd:09:4c:70:69:2b:a0:e9:9e:7b:68:53:
46:20:ae:4a:51:b7:25:ce:2a:5b:25:a1:2d:57:2a:ef:5a:b2:
70:6c:98:66:83:e6:f1:15:0d:71:07:fe:32:74:7f:8d:d4:ac:
1d:a5:b1:90:9a:07:07:13:08:0b:39:df:3f:75:32:d5:62:9f:
69:52:71:76:12:73:06:d1:f5:db:03:c1:b2:ce:2b:a0:54:0a:
79:4e:8a:5a:a2:ed:7a:cb:50:20:54:85:bd:33:e6:c2:6b:bc:
50:0d:bf:1b:ae:6c:6d:06:2a:90:21:e0:aa:3e:8c:7b:2e:77:
56:b8:66:54:2a:23:54:f1:9a:e1:d4:1b:8f:ae:5b:a5:26:8d:
d9:f3:bf:88:68:02:0a:1d:cf:0d:8d:a1:47:e6:8b:dd:c0:9e:
21:e8:38:71:62:0f:97:92:f0:b0:aa:56:56:43:42:bf:3f:04:
04:76:9e:44:df:3a:5c:36:dc:f3:c4:f3:05:95:e2:d8:6c:40:
16:64:d2:8a:95:3c:e8:72:d5:2b:f8:0c:a2:97:24:58:b4:f7:
d5:4f:48:77:84:d8:64:a9:28:d1:92:d5:96:ff:eb:d6:8b:1b:
81:38:7b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:18 2026 by rpki-client