Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144302.roa
File: AS144302.roa (raw, json)
Hash identifier: 3GHk8USw1XBFvFA8Xc+IoJs0Q3ZKSePCbOOK8k65eZY=
Subject key identifier: 4E:29:8E:33:55:AF:5A:2F:CE:FD:DC:EE:79:65:B0:BC:EF:3B:7A:B3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 39DDCDEC7FC4440C9EA2EEE6A6A8075C1E5E9E68
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144302.roa
Signing time: Tue 26 May 2026 06:12:27 +0000
ROA not before: Tue 26 May 2026 06:07:27 +0000
ROA not after: Tue 25 May 2027 06:12:27 +0000
asID: 144302
IP address blocks: 240a:a674::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:dd:cd:ec:7f:c4:44:0c:9e:a2:ee:e6:a6:a8:07:5c:1e:5e:9e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:27 2026 GMT
Not After : May 25 06:12:27 2027 GMT
Subject: CN=4E298E3355AF5A2FCEFDDCEE7965B0BCEF3B7AB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:41:a2:77:69:cf:0a:35:74:74:02:a3:7b:58:
ec:d8:18:ec:50:25:8e:00:22:33:b8:3a:84:cd:5a:
97:c3:d3:8e:13:6d:4a:42:90:1f:26:34:6f:fd:c9:
82:a1:ee:69:4b:5d:c3:19:6c:2a:e4:03:35:be:a6:
1c:bd:ff:9c:61:f3:12:dc:6a:12:77:70:7c:cc:cd:
55:65:68:25:a6:71:8f:33:6d:f3:03:61:30:01:86:
2d:ef:e0:b2:08:f0:db:0e:3e:1c:b5:92:03:b9:fd:
c2:5d:ec:56:20:16:3b:5b:74:68:ec:64:82:27:36:
4d:66:51:e9:e5:ac:81:28:64:99:25:98:70:db:50:
68:24:57:23:d0:d6:93:5e:cc:00:0d:68:2d:e1:fe:
f4:3a:04:92:e2:00:94:a8:6f:9f:71:49:ba:06:df:
e6:e1:d5:f3:26:14:90:55:6a:f6:e9:8f:bf:de:d7:
29:b4:56:a6:bc:82:c4:65:49:93:cb:a9:16:40:cb:
2e:8f:73:3a:b9:73:f3:90:77:ff:30:f4:a8:c8:0a:
12:5a:3a:42:5a:23:3b:c2:2a:fe:11:1e:fc:50:58:
d0:a8:e9:8a:a8:5c:25:0b:3d:7c:c3:5a:36:c3:1f:
1e:79:f7:4e:c1:0d:ce:2a:13:70:22:13:b6:12:90:
f0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:29:8E:33:55:AF:5A:2F:CE:FD:DC:EE:79:65:B0:BC:EF:3B:7A:B3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144302.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a674::/32
Signature Algorithm: sha256WithRSAEncryption
92:15:a8:26:59:59:a5:0f:3c:59:0b:a0:19:f8:b9:ab:a0:fe:
ed:1b:8d:2b:5c:c1:40:b7:5c:86:90:c4:f2:b0:6f:7a:fe:51:
0c:e7:68:41:af:0d:47:3d:17:22:af:ab:72:24:13:ac:e3:03:
91:4b:71:7a:09:ca:e9:58:85:fc:4f:7f:50:6b:19:62:5b:f9:
35:c1:6d:e7:8e:63:17:ea:91:fa:f1:db:e0:bf:ad:a9:d1:cf:
bd:9a:80:b9:59:03:72:bc:10:c4:79:fc:c3:19:a0:d0:a7:a1:
ec:19:3e:a9:77:a0:60:5e:bb:55:e4:e2:c0:52:d9:00:55:1e:
0c:0d:a0:55:94:b5:6d:b1:b2:74:ad:96:6d:2b:12:b9:4e:8d:
80:15:8c:55:7a:25:66:80:e4:e7:65:6f:4d:4a:2e:0b:c9:4e:
e6:d2:54:56:87:f1:e0:f4:52:f1:89:3b:d7:ed:1b:a9:02:6b:
35:65:da:8d:00:93:aa:49:df:1e:09:fc:56:42:1d:1e:27:d6:
08:11:81:0b:a7:30:ed:bf:24:61:0e:46:0f:fc:9f:25:93:7b:
23:a3:30:ec:be:f1:d4:d6:65:50:f9:1c:15:41:34:14:5e:61:
75:ec:ae:bd:26:a3:c9:c9:7b:f8:62:bf:53:44:5d:ca:37:df:
25:31:12:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:56 2026 by rpki-client