Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144317.roa
File: AS144317.roa (raw, json)
Hash identifier: aJE3dA3EcCsU33yg+Zdc22CqznzGU6mxVd/iRzjlpbg=
Subject key identifier: CE:78:15:7F:54:A3:D1:56:88:68:5E:FD:9C:50:09:17:27:3F:CC:E5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 212578207AA25634E0E67057B14DEAE712239AB1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144317.roa
Signing time: Fri 22 May 2026 04:27:08 +0000
ROA not before: Fri 22 May 2026 04:22:08 +0000
ROA not after: Fri 21 May 2027 04:27:08 +0000
asID: 144317
IP address blocks: 240a:a683::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:25:78:20:7a:a2:56:34:e0:e6:70:57:b1:4d:ea:e7:12:23:9a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:08 2026 GMT
Not After : May 21 04:27:08 2027 GMT
Subject: CN=CE78157F54A3D15688685EFD9C500917273FCCE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:61:c6:64:a9:bb:ad:d2:70:da:91:fc:44:82:
e5:55:49:f8:bc:ba:b6:f6:34:c5:5c:71:cc:8e:e3:
bf:c6:da:62:d8:ec:8f:3d:42:7c:86:fa:1a:c5:2c:
c1:52:51:e6:d5:1d:8e:18:05:90:01:db:8a:2b:83:
c5:0f:07:e3:82:e6:fb:2d:be:bc:57:31:9f:e5:3c:
ff:9e:43:7c:65:f2:83:c4:df:82:86:80:d1:a0:97:
d7:ee:58:f5:5c:41:cb:f7:6a:df:b1:1b:0d:53:ec:
a3:e3:c8:b7:4b:c2:b0:ce:33:1f:e8:0c:0f:40:47:
3b:95:c9:2a:1d:14:56:8c:81:d5:a9:9c:71:e5:23:
73:48:33:74:6f:e4:1f:cd:ad:b5:b7:b6:83:c3:4e:
f9:9d:17:97:e4:bf:e1:03:c1:d8:bb:33:a9:1f:b0:
44:06:8c:d5:7b:79:20:ea:0e:54:05:92:ec:3a:8d:
76:46:f8:92:b0:6f:80:2e:67:9a:f7:de:c3:f5:72:
bc:24:54:a3:e6:16:11:60:b1:fd:21:b2:5e:a5:02:
2f:98:4c:3c:e9:fd:e3:3e:c0:e8:be:3a:e4:e0:01:
cf:4e:1d:10:80:90:85:d5:c1:27:dc:0d:50:06:3a:
8f:fa:97:02:9c:2a:78:c0:0b:92:bf:b2:08:9f:e0:
81:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:78:15:7F:54:A3:D1:56:88:68:5E:FD:9C:50:09:17:27:3F:CC:E5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144317.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a683::/32
Signature Algorithm: sha256WithRSAEncryption
65:c4:f2:db:09:68:d6:66:60:d8:66:7f:f5:da:39:f1:7a:5f:
6b:7c:5e:70:25:d3:a1:7d:89:19:51:77:81:a4:ac:6d:5d:3c:
07:99:d9:ba:0c:87:37:6c:b2:4a:97:83:c7:6f:50:34:5b:5f:
5d:fc:3d:21:77:9b:d3:de:cd:6a:36:b6:2d:73:c2:73:79:41:
0c:c3:9b:e1:e8:98:0f:e0:69:ae:e3:3e:44:b3:ae:aa:ee:a1:
41:ce:93:22:f0:b4:f3:d1:af:49:79:b8:07:c1:90:b0:5e:ea:
80:e3:08:27:a6:db:2e:68:ea:80:08:ff:61:c6:3f:bc:07:11:
24:95:61:04:5b:5c:76:78:40:eb:6c:69:58:0c:70:f5:e2:9e:
ba:40:16:00:de:73:25:32:80:5e:f7:c6:fa:6d:e7:2e:4f:f4:
b5:d2:a3:93:af:4f:f2:9e:68:ad:34:d2:ce:fa:40:30:19:25:
5f:4e:42:67:b9:7a:54:48:2b:1b:59:c9:38:60:c6:8c:f6:e0:
a9:89:d0:d1:e4:37:df:81:58:20:c8:cb:47:c6:c0:04:a1:a5:
e0:d1:10:a2:6e:e9:34:68:9b:cd:11:f2:dc:4a:5f:c9:7b:dc:
83:b1:28:f0:8f:b1:8d:ac:7d:cf:f7:0a:d5:58:ba:f6:d5:0c:
32:65:6f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:16 2026 by rpki-client