Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144321.roa
File: AS144321.roa (raw, json)
Hash identifier: S5VaHFCCreSY6o0HBYdSr1vRYvUKSP+a5Un5xF9uyNA=
Subject key identifier: AF:37:56:25:8C:0D:E8:23:6F:D5:B7:10:80:DA:9A:40:50:72:C2:47
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2332DC0B9DBC02C7254CE0468E74C620146F25A4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144321.roa
Signing time: Fri 22 May 2026 07:41:14 +0000
ROA not before: Fri 22 May 2026 07:36:14 +0000
ROA not after: Fri 21 May 2027 07:41:14 +0000
asID: 144321
IP address blocks: 240a:a687::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:32:dc:0b:9d:bc:02:c7:25:4c:e0:46:8e:74:c6:20:14:6f:25:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:14 2026 GMT
Not After : May 21 07:41:14 2027 GMT
Subject: CN=AF3756258C0DE8236FD5B71080DA9A405072C247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2f:bd:e9:8c:3c:cb:0b:6b:30:bf:74:39:2a:
ce:b6:86:d0:de:eb:2d:0c:9d:ff:c8:aa:f6:4b:f4:
04:19:4e:88:58:c2:15:12:f9:b6:4e:94:7e:62:2a:
fa:8b:52:f7:35:1f:1b:c5:a4:fe:a4:6b:c4:88:2b:
0b:31:48:93:88:c7:d5:18:34:7a:a4:88:01:40:de:
27:84:56:2a:38:b8:60:d5:20:91:81:05:dc:fc:50:
a0:e9:82:f8:00:58:17:46:7e:98:74:81:2a:91:16:
34:19:0a:82:85:6f:15:a9:c4:75:1e:e5:c0:47:ef:
ac:e5:54:55:61:27:1f:3e:34:3b:47:33:b9:f7:16:
9e:13:a8:ea:2a:02:91:cc:7a:8e:7e:a3:80:5f:12:
92:1b:bf:af:ac:ad:5c:67:09:4a:c0:ea:27:90:dc:
1c:e2:d5:18:99:fb:7e:f3:76:37:eb:b8:9a:92:a5:
48:20:bd:6e:1b:f8:c3:38:15:4f:f8:85:49:10:5c:
12:e1:65:9b:b5:3a:01:4b:e8:b0:65:85:2f:bb:84:
86:1e:2d:77:1f:2d:fe:c8:14:07:23:e0:99:bc:25:
90:36:b0:e9:ca:75:c7:e8:50:f9:a4:f5:98:b3:b3:
ac:74:68:1c:aa:d4:c5:16:7f:47:d9:72:7d:f6:61:
c4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:37:56:25:8C:0D:E8:23:6F:D5:B7:10:80:DA:9A:40:50:72:C2:47
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144321.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a687::/32
Signature Algorithm: sha256WithRSAEncryption
96:cd:49:0b:b2:ce:20:ce:34:88:1f:26:2b:f6:5a:8d:c8:71:
b8:10:87:11:c7:73:43:85:00:fe:4f:c4:dd:2e:5b:a2:d9:2f:
b7:fe:2b:31:c1:86:07:c0:a5:5f:cb:26:57:44:cb:63:f0:a0:
37:d0:fd:83:8c:6d:44:31:61:f2:2b:96:c0:fb:9c:ff:a8:34:
81:8e:ed:b4:d8:0c:1c:e2:ef:0e:5a:69:35:56:c0:ca:70:76:
7a:35:a1:cf:35:83:90:8e:53:e1:37:9f:75:7f:f0:59:4c:18:
02:56:f8:a6:11:7f:2d:b6:f4:e2:1f:34:2d:cd:d1:e0:0d:6a:
8c:9b:f5:22:e7:cb:07:37:c7:87:fe:67:17:7e:a6:a9:a4:da:
4f:28:61:a4:d7:76:52:4b:64:03:7b:e8:01:7d:18:f6:a4:5b:
ea:7c:7d:87:53:75:18:81:e7:ad:5e:f6:e7:bb:0e:fe:c0:fa:
b4:3c:e4:17:21:0e:19:3f:2d:49:01:98:c9:23:5f:9e:c5:f7:
a1:80:41:da:8c:86:c4:cf:2d:a6:cb:22:93:3d:c3:45:55:ac:
ee:b0:cc:b1:f7:72:2f:8c:bb:3f:58:71:f5:6f:bf:28:4b:ed:
ee:71:e8:e9:32:88:d1:8f:02:f1:68:85:2c:6e:86:34:94:9e:
32:49:50:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:56 2026 by rpki-client