Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144300.roa
File: AS144300.roa (raw, json)
Hash identifier: oyc7/7RpgAfwDym4+LEf42nxIEgIitdHJIDEL6tun8o=
Subject key identifier: 27:48:66:51:6F:12:C3:3B:33:9C:10:0A:64:2F:42:01:CE:7F:9F:59
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2AE8EC0A8D879C341DDDA81F2134892F855ED8C3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144300.roa
Signing time: Fri 22 May 2026 06:05:21 +0000
ROA not before: Fri 22 May 2026 06:00:21 +0000
ROA not after: Fri 21 May 2027 06:05:21 +0000
asID: 144300
IP address blocks: 240a:a672::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:e8:ec:0a:8d:87:9c:34:1d:dd:a8:1f:21:34:89:2f:85:5e:d8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:21 2026 GMT
Not After : May 21 06:05:21 2027 GMT
Subject: CN=274866516F12C33B339C100A642F4201CE7F9F59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cb:f3:09:4e:04:30:ad:4c:76:59:31:21:74:
25:55:6e:ac:be:57:cd:70:41:af:96:07:58:25:cd:
c2:0e:28:28:c1:50:b8:8a:43:08:ff:80:d1:e2:1f:
e6:c0:6f:fb:52:21:e6:91:d2:1c:c2:4c:db:cf:db:
5c:13:07:c6:12:80:a8:82:ac:73:2e:71:27:74:08:
73:fe:8b:f8:a1:9c:95:7c:f5:74:bc:17:26:8c:2f:
2d:85:ef:6d:95:06:9e:24:a2:96:2e:bc:f5:43:0b:
12:b6:ce:38:19:3c:d7:cc:20:67:9a:46:fb:d7:11:
46:6e:a9:94:e0:a9:7c:97:7c:a1:f9:d9:f5:c2:0e:
78:e6:e3:0e:21:68:2d:ab:d7:b0:74:33:f8:4f:b5:
ad:d1:83:b7:c3:f1:62:b0:de:26:d5:3a:a4:a8:80:
ad:f5:e1:e1:fd:7c:00:47:91:80:2f:11:6c:af:55:
91:d7:7f:ff:2f:57:9e:e9:36:b3:01:9e:cc:76:56:
07:d6:0d:13:25:ad:cb:9e:af:0a:2c:80:bb:b7:ad:
b3:3f:fb:46:84:af:7a:60:4e:3f:88:88:ab:dd:5f:
9b:ac:a9:16:3e:5e:af:40:97:b0:39:07:dd:55:83:
d5:c7:43:d7:b7:cb:5b:f0:11:35:ca:4b:60:af:f7:
49:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:48:66:51:6F:12:C3:3B:33:9C:10:0A:64:2F:42:01:CE:7F:9F:59
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144300.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a672::/32
Signature Algorithm: sha256WithRSAEncryption
49:be:10:b8:54:e1:de:8b:ed:18:be:ea:e9:28:6e:1f:d7:1f:
16:54:78:dc:12:54:ff:1f:c4:40:2e:cc:6c:fb:71:3d:f2:95:
30:db:92:4e:f4:90:9c:ae:95:c4:1b:b2:ee:55:54:10:7f:ff:
0b:a2:e1:fc:73:9e:12:85:a3:e4:cf:07:e0:9d:db:db:e2:a0:
5b:6b:e6:a5:77:c8:82:23:b4:bc:52:65:81:c7:0b:a1:1c:04:
12:32:22:bc:62:e0:1e:c8:19:19:db:d1:16:6a:e7:d8:fa:33:
fc:c5:07:1b:a6:6f:23:34:18:16:70:a2:30:83:2e:83:ce:7a:
da:86:49:27:d9:14:97:73:81:8d:1a:5b:b0:fd:22:7d:9f:40:
83:96:e7:5f:d9:03:2f:60:73:f6:2c:3a:ce:53:21:21:1b:e2:
8a:b1:05:0e:e9:98:3f:3c:9d:19:49:e2:3e:85:09:fd:12:91:
61:32:8c:73:2c:69:14:86:90:a7:a0:b4:90:b0:e7:cc:b2:19:
40:8e:65:24:38:23:67:82:c9:8c:aa:d5:62:6a:d1:34:44:c3:
32:6e:b2:08:75:87:2b:b2:6e:ad:b3:ca:28:69:61:56:a8:fe:
20:02:1d:09:42:32:a0:05:04:a6:0b:d7:08:33:f9:d6:6d:5e:
76:4b:15:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:38 2026 by rpki-client