Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144334.roa
File: AS144334.roa (raw, json)
Hash identifier: mVg6daFxnhjItJte2VZAzt/U0qdEdHcmVYDY/vx6ofs=
Subject key identifier: 9E:E7:14:BB:B0:3A:31:91:B0:C5:52:FD:25:50:27:00:3D:FA:5B:44
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4F3809690F0994D13AD8A757BED5BE3968817A41
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144334.roa
Signing time: Fri 22 May 2026 07:40:54 +0000
ROA not before: Fri 22 May 2026 07:35:54 +0000
ROA not after: Fri 21 May 2027 07:40:54 +0000
asID: 144334
IP address blocks: 240a:a694::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:38:09:69:0f:09:94:d1:3a:d8:a7:57:be:d5:be:39:68:81:7a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:54 2026 GMT
Not After : May 21 07:40:54 2027 GMT
Subject: CN=9EE714BBB03A3191B0C552FD255027003DFA5B44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:58:3c:2e:db:96:06:f5:55:29:34:fe:52:f5:
54:33:7b:d2:35:d3:e7:d7:74:db:fe:d4:06:d8:81:
25:fc:47:40:74:ca:bb:88:7f:27:64:44:fb:c7:0c:
c7:fd:ba:d2:f3:64:41:1a:63:6c:11:0e:b2:4f:2b:
5f:40:85:f1:31:86:03:aa:f8:9f:af:8e:fc:9f:67:
e8:9b:d3:2c:27:08:54:cf:3c:e9:77:02:10:07:32:
50:21:09:c8:20:22:f6:7c:4e:63:36:52:ab:31:e0:
bf:be:8f:4a:2b:be:23:b7:17:6a:97:df:c4:42:9e:
1c:bd:19:d9:fd:95:77:c0:1c:e3:73:f6:38:d4:c3:
67:0b:90:6d:e8:02:19:97:c5:9f:fa:cc:fe:59:df:
25:80:af:72:60:20:cc:02:e4:11:86:9d:33:3a:f5:
8d:4a:ea:24:3d:a9:5d:17:1b:3c:b2:52:60:ac:d0:
9b:80:e3:f5:6c:8d:aa:b8:6f:24:0c:b3:27:75:13:
3a:81:f2:10:a0:e6:62:e1:d0:32:ae:02:4e:ce:12:
b8:5c:33:06:88:4e:f4:5f:c6:5c:42:f7:0a:3e:6d:
0a:fa:e4:4d:68:21:fd:71:c7:77:b9:f7:95:4d:a1:
a0:e6:c9:03:59:8c:8f:84:53:b3:93:e8:84:b5:a6:
01:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E7:14:BB:B0:3A:31:91:B0:C5:52:FD:25:50:27:00:3D:FA:5B:44
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a694::/32
Signature Algorithm: sha256WithRSAEncryption
6a:57:2a:73:c9:8a:74:37:3e:4d:a3:1e:45:fd:07:b7:a5:29:
4c:23:6c:ce:45:59:7f:14:81:0c:65:54:e2:ed:9a:82:e7:94:
1a:d7:7d:1b:ef:f1:83:52:7e:57:bc:f8:ba:5d:a4:4b:9b:a9:
5f:b3:cc:3b:2a:55:63:be:88:94:46:21:08:fc:3d:c0:b0:e4:
d5:17:25:1f:36:50:06:1d:47:c2:44:bd:35:06:10:51:18:89:
2d:73:e0:c6:7a:cb:ac:5d:b2:2b:43:bc:fa:04:0c:ba:bb:99:
b5:f4:8a:40:3a:08:1d:46:ff:20:63:1c:32:20:11:37:b2:6d:
66:90:e6:70:88:c4:24:a1:96:8b:81:e9:61:81:ec:03:3a:ab:
ed:36:7c:66:7b:df:d3:18:05:f8:12:dd:c5:ef:d1:85:d6:73:
50:f6:dc:4f:11:a0:22:a4:a1:f8:c1:56:c7:84:a5:d6:94:01:
8a:72:76:ab:f6:da:45:95:2b:a4:53:fb:cd:30:55:e4:d3:47:
a2:28:29:da:28:22:a7:05:d4:55:a9:45:9e:43:f3:d9:f6:a0:
2b:5a:4a:b3:1f:61:d5:d9:42:de:38:36:ad:f5:a9:5a:59:94:
66:c5:19:1d:bb:e2:64:a0:90:f3:7c:21:f9:00:47:66:a3:6d:
6b:1f:75:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:49 2026 by rpki-client