Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144338.roa
File: AS144338.roa (raw, json)
Hash identifier: L+J4G17MHwJnEA7rMXJTm1tji8+ABKDP8DNTN7p8mMw=
Subject key identifier: 40:D4:F3:B5:39:92:6A:F6:D1:71:8F:FD:93:1D:C9:D0:D3:5D:9B:F9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0D2379E2E09366B175D5B6436E70AEEE329DC7A4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144338.roa
Signing time: Mon 25 May 2026 02:22:39 +0000
ROA not before: Mon 25 May 2026 02:17:39 +0000
ROA not after: Mon 24 May 2027 02:22:39 +0000
asID: 144338
IP address blocks: 240a:a698::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:23:79:e2:e0:93:66:b1:75:d5:b6:43:6e:70:ae:ee:32:9d:c7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:39 2026 GMT
Not After : May 24 02:22:39 2027 GMT
Subject: CN=40D4F3B539926AF6D1718FFD931DC9D0D35D9BF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:71:6a:24:90:27:ca:5c:70:dc:b9:4b:5f:b8:
f1:aa:cd:0c:f3:ad:51:64:ec:98:05:07:ff:1c:9d:
a2:b5:82:3c:17:de:36:e0:70:aa:ab:5e:c7:f5:15:
fd:c5:64:eb:13:2b:46:63:cd:c5:bd:5a:2d:81:f0:
de:46:a6:83:6a:21:59:a3:dd:96:c1:f7:61:d2:7f:
e7:14:b1:4e:26:86:cd:19:06:44:87:42:2b:b1:11:
93:57:dc:99:01:c8:b9:3d:be:5b:77:b0:30:b5:e5:
7a:47:ac:8a:04:7a:9a:09:52:cf:05:03:9c:66:77:
0a:77:8e:d9:e9:10:34:a2:2d:4c:93:f5:8b:49:9c:
4f:00:d6:5e:a9:2e:cc:b6:b5:e3:3d:8b:9c:8a:b7:
c3:af:e3:6d:13:50:f8:f8:3e:5b:3f:8e:90:af:b3:
e1:fa:4e:66:11:4d:c9:ab:9d:bb:3a:01:73:7f:21:
38:ca:74:64:ec:a0:a3:66:e3:62:a9:35:24:3a:53:
87:b5:80:00:ae:30:8b:81:ce:c8:73:34:89:e5:81:
4c:b5:06:dc:82:e2:f8:7f:cd:25:b1:9d:f1:74:14:
3c:f9:84:da:c6:4a:b4:c3:df:c1:7a:a7:27:a5:88:
1d:90:cc:3c:50:a5:c1:f4:8d:25:37:8f:0e:b0:38:
6f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D4:F3:B5:39:92:6A:F6:D1:71:8F:FD:93:1D:C9:D0:D3:5D:9B:F9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a698::/32
Signature Algorithm: sha256WithRSAEncryption
7f:0c:a8:5a:52:81:5b:ca:e4:c0:21:3f:8f:16:4b:28:3d:ed:
f2:13:7e:47:10:8c:f7:0e:d4:74:ed:48:4b:67:b5:55:69:bb:
9e:38:e0:6e:48:b5:47:7a:f7:0e:25:bb:9d:39:35:5e:74:36:
bb:f7:dc:44:0c:ee:86:f7:f1:c2:11:29:cc:5f:56:54:5c:2a:
66:89:2a:5c:61:b2:29:b9:dd:4b:48:a9:da:83:22:50:ba:c2:
25:42:49:aa:4b:73:95:71:99:a5:f5:b6:23:86:f7:e6:ca:4a:
40:17:02:23:d1:87:4d:70:0e:87:fe:45:79:09:4c:68:6c:e7:
ec:4a:cd:8c:ef:86:dd:db:a6:45:2f:3a:d0:e7:4f:38:e6:9a:
a1:73:0e:d7:9d:90:88:4b:a3:64:83:14:56:4e:4d:f6:95:73:
7c:f7:16:32:d1:58:95:94:39:cb:b7:ac:0a:c5:91:0f:69:7e:
2b:9b:0c:7b:c5:df:23:10:39:c3:4e:d4:e3:0f:c4:1e:07:e8:
83:55:d4:1e:64:d3:25:2a:e0:e7:a2:dc:ba:f9:e5:7d:1c:c1:
b4:73:86:ba:fe:ee:9f:66:eb:db:08:b2:4e:2e:10:bc:9b:66:
2f:c3:04:c2:cb:f6:3e:1c:97:85:92:bb:74:42:08:d5:b1:cb:
fb:59:9e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:55 2026 by rpki-client