Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144306.roa
File: AS144306.roa (raw, json)
Hash identifier: 3u9OyKCxctmQpn/a+zeAzESP9x1HVA4NLQ3RQwPMxNE=
Subject key identifier: B5:51:2D:DC:FB:EB:BE:7F:F3:F2:21:61:F0:CA:17:DB:23:C3:5B:7D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1BCF08BE1CFC932E2C6B3A812A7236AFDEF44507
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144306.roa
Signing time: Mon 25 May 2026 06:28:18 +0000
ROA not before: Mon 25 May 2026 06:23:18 +0000
ROA not after: Mon 24 May 2027 06:28:18 +0000
asID: 144306
IP address blocks: 240a:a678::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:cf:08:be:1c:fc:93:2e:2c:6b:3a:81:2a:72:36:af:de:f4:45:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:18 2026 GMT
Not After : May 24 06:28:18 2027 GMT
Subject: CN=B5512DDCFBEBBE7FF3F22161F0CA17DB23C35B7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bb:fd:97:d8:7c:ef:49:bf:bd:9b:73:5b:3a:
5e:88:d9:04:8b:92:71:ea:56:92:64:69:31:c4:2d:
9d:fc:cf:27:97:b5:e0:68:f8:66:20:29:fc:a3:e9:
63:be:bd:14:51:e8:f2:5d:2d:94:ed:9f:fb:2d:d1:
2e:d1:0a:2a:dc:65:ea:5b:aa:d0:9d:a4:db:95:5e:
9a:f0:97:5f:3b:eb:3a:05:36:1f:84:d5:4e:ef:8d:
84:bc:01:6b:20:09:b9:50:d0:21:d0:69:5f:ae:fe:
99:b3:55:7a:82:8e:23:28:04:af:be:a4:f1:95:01:
5f:ba:ec:c0:57:4f:41:49:67:a4:0b:80:ec:93:e4:
0e:8a:17:ce:2d:26:23:a6:24:d2:82:3a:07:3f:01:
74:2e:0c:7c:87:6e:0d:87:8e:5b:a7:e6:eb:54:95:
3b:77:b8:e8:7b:8f:56:08:55:bf:36:eb:4d:aa:89:
af:eb:f8:48:62:4e:14:96:8e:e5:8c:a9:d1:79:cf:
e2:76:f4:e8:c2:e0:d6:bf:dd:b0:c7:9f:55:4d:24:
48:6b:88:70:7b:94:b2:4f:03:98:50:5f:6a:30:23:
09:b5:c9:7f:72:d1:07:ff:36:f5:cd:82:42:52:c2:
79:3e:81:c2:bd:81:b7:7a:41:fd:bc:6d:da:e8:30:
51:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:51:2D:DC:FB:EB:BE:7F:F3:F2:21:61:F0:CA:17:DB:23:C3:5B:7D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144306.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a678::/32
Signature Algorithm: sha256WithRSAEncryption
89:7c:58:f4:fe:d7:93:eb:b1:85:74:81:b4:58:da:1b:ea:ca:
52:0a:9c:3b:fa:9f:2d:5b:be:e8:09:62:c0:37:61:83:f4:23:
eb:2e:b0:db:58:54:91:c7:9d:e0:de:08:ee:04:f6:9b:ab:08:
b4:f3:57:d8:af:44:74:fc:69:58:8e:b3:b0:34:51:57:87:a6:
56:f8:7f:b6:59:d6:2d:96:ce:1d:01:94:23:76:49:86:16:a3:
6e:ac:59:c3:e6:05:41:02:2b:bf:55:c8:b3:22:c3:1d:64:14:
56:7f:36:a0:58:e9:40:6b:83:29:da:15:59:bf:29:83:84:ad:
67:51:54:87:21:00:24:2d:77:3d:32:c6:63:e2:1d:9d:74:ac:
c4:3c:ef:53:85:d3:df:62:35:09:75:29:a7:cf:6a:ff:f8:b1:
dc:3c:31:08:50:f8:6b:d7:9b:f6:b3:2b:b6:4e:e8:eb:ca:f2:
6c:45:23:b3:39:06:7c:ea:a6:5a:85:5c:10:0b:24:2d:ee:d0:
2b:08:9e:f7:5f:b8:a4:a0:db:7d:8e:fa:07:07:48:79:ce:fd:
af:7c:2d:0f:d6:a1:48:d0:ba:53:8e:a0:63:cf:0e:d3:9a:f1:
6a:a4:21:48:74:33:1a:c4:be:05:70:10:b4:3c:6e:ff:d0:d0:
44:46:ba:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:23 2026 by rpki-client