Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144330.roa
File: AS144330.roa (raw, json)
Hash identifier: LX6ySXhjNfhvu0udFzo5AUIB9x6o4pzOqGvCkAK+KC8=
Subject key identifier: CF:CE:98:F3:2E:55:0B:14:B3:4D:92:08:91:95:D1:32:AD:BD:F3:C0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 07DD671C9544B2077BFF2FCA0D776239C1075F9C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144330.roa
Signing time: Fri 22 May 2026 07:41:08 +0000
ROA not before: Fri 22 May 2026 07:36:08 +0000
ROA not after: Fri 21 May 2027 07:41:08 +0000
asID: 144330
IP address blocks: 240a:a690::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:dd:67:1c:95:44:b2:07:7b:ff:2f:ca:0d:77:62:39:c1:07:5f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:08 2026 GMT
Not After : May 21 07:41:08 2027 GMT
Subject: CN=CFCE98F32E550B14B34D92089195D132ADBDF3C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4f:e9:da:2b:5a:ca:d4:78:ef:f7:92:2e:82:
23:b2:df:35:f7:5b:99:76:56:35:62:cd:54:d2:9e:
76:cb:bb:d5:9a:80:5a:cf:0c:06:2e:7d:dc:77:f5:
dc:e2:b2:c1:15:b3:0f:06:88:fc:61:1d:60:d3:db:
cd:38:57:3f:ad:e5:bb:ca:32:7e:13:10:b1:77:51:
32:e8:98:e8:bd:a5:71:aa:88:bd:d2:27:84:e6:b0:
5d:2e:f2:bd:85:1a:3c:96:bd:e8:05:a8:e8:b5:d9:
c2:c6:24:d2:6a:06:3f:ec:e3:04:f8:d9:15:c4:88:
3c:0a:ed:65:d5:ae:3d:70:b5:53:4c:c2:52:74:6e:
d3:5c:78:16:08:cc:cd:04:38:34:c0:5d:92:92:db:
df:49:4c:92:53:93:af:05:2f:83:a2:b4:9c:41:d3:
5f:e8:e3:10:c6:1d:62:d2:d2:cd:d5:19:f5:7d:52:
38:5c:86:c3:5a:52:b9:b5:ef:ba:48:80:08:78:f1:
40:1a:ab:dc:08:02:b3:eb:ef:fc:0b:cc:e6:39:7f:
80:b7:a8:0f:e7:b0:ac:7d:5d:e3:a3:d6:4b:d9:50:
03:58:de:ae:98:96:08:28:f8:2c:3d:dd:e7:d5:45:
2f:31:a3:5f:6b:60:06:a3:dd:41:22:76:07:3d:66:
c0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CE:98:F3:2E:55:0B:14:B3:4D:92:08:91:95:D1:32:AD:BD:F3:C0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a690::/32
Signature Algorithm: sha256WithRSAEncryption
21:78:79:1d:dc:d1:97:fa:3e:1f:22:0d:78:90:83:2d:0d:ab:
7d:ea:98:cb:3a:84:27:e2:4f:78:94:d3:f1:82:d5:28:b9:d0:
9d:6f:fd:60:b5:07:e2:60:2d:4d:59:7d:0c:80:24:0f:2f:4e:
3b:99:22:71:0b:60:b5:53:07:0b:48:fa:0f:02:fc:69:51:54:
66:0c:76:bb:e1:bc:03:d0:c3:d6:e0:95:c8:af:b9:d9:9b:3f:
b6:fd:5d:02:cd:7a:98:e4:83:a2:86:c6:c0:5f:b7:a6:ca:32:
3a:8d:3d:9b:91:ab:a7:e2:5a:41:fd:a8:1b:d4:41:07:de:34:
33:74:56:dd:be:07:97:22:44:09:c2:4d:b1:74:8c:2a:82:39:
8c:63:53:40:8e:7f:66:a5:ae:85:48:d8:34:9f:92:5b:c0:dc:
1b:67:c9:bf:89:23:ac:c4:48:05:8d:12:33:bb:bd:0c:ed:c4:
88:55:65:90:b2:59:5e:da:5c:89:4e:ac:6f:95:b9:31:35:5b:
1f:79:7d:d9:2b:b2:0c:97:de:13:3f:80:69:c6:2b:08:e7:f1:
27:ed:05:83:ba:20:c0:8b:7b:f7:87:a9:48:6f:02:c5:29:fd:
1b:79:43:39:83:74:46:3b:e3:83:3c:19:24:70:6a:60:3c:7c:
ed:a9:22:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:19 2026 by rpki-client