Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144339.roa
File: AS144339.roa (raw, json)
Hash identifier: SlWX1FFHb8Fb0PKyZYCZCBfnwSQSP+BYM/Pe7xM97dA=
Subject key identifier: 48:B9:30:A7:5D:B3:BF:D5:6B:B7:05:C1:3C:C1:A4:51:27:3C:99:51
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 41634AF93C07517E025EE65B8475C478AD22E810
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144339.roa
Signing time: Tue 26 May 2026 08:53:03 +0000
ROA not before: Tue 26 May 2026 08:48:03 +0000
ROA not after: Tue 25 May 2027 08:53:03 +0000
asID: 144339
IP address blocks: 240a:a699::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:63:4a:f9:3c:07:51:7e:02:5e:e6:5b:84:75:c4:78:ad:22:e8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:48:03 2026 GMT
Not After : May 25 08:53:03 2027 GMT
Subject: CN=48B930A75DB3BFD56BB705C13CC1A451273C9951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8f:29:c0:18:ef:12:42:4e:da:35:d9:e8:30:
00:b6:84:ab:d0:df:e9:0c:6f:cf:a9:4e:b3:8c:e2:
cd:48:ad:65:23:ab:58:21:27:eb:33:4f:c1:dc:84:
c2:00:fe:81:87:e9:a3:c7:44:50:87:58:8c:58:72:
eb:29:c5:6e:12:e7:2d:18:c9:2d:0f:c5:87:71:1b:
a7:96:2b:c4:d2:62:07:d5:d8:82:ae:b9:b5:47:11:
0c:15:ed:d2:4c:42:2c:44:7e:43:c3:78:0f:68:0b:
a0:7e:b0:c1:61:20:45:95:e9:4c:b1:3b:67:22:44:
ac:5d:ab:51:91:06:55:bf:f7:60:60:70:4a:dd:11:
89:33:79:c5:dd:db:12:af:d6:10:e7:fc:e7:10:02:
31:61:e5:9c:b0:f5:df:55:c7:5a:8a:93:fa:b2:14:
12:78:2d:3a:3e:b6:e2:57:f1:fa:20:83:cb:08:68:
b2:26:ec:7c:74:0c:98:6c:79:4c:95:f7:55:1f:9c:
8b:95:82:2e:db:87:62:a0:5e:30:88:65:1e:40:ec:
30:4e:7f:36:c5:e0:60:49:31:17:08:d3:b9:c4:1b:
00:76:65:ff:67:f1:fb:19:a6:79:d4:a9:4c:1a:90:
95:3b:c1:c2:04:34:32:10:4b:cc:09:6b:fe:b9:cf:
6f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B9:30:A7:5D:B3:BF:D5:6B:B7:05:C1:3C:C1:A4:51:27:3C:99:51
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a699::/32
Signature Algorithm: sha256WithRSAEncryption
a9:4b:0a:bf:9f:f3:3e:f5:69:93:a3:cc:d3:af:e4:17:a6:12:
58:fb:0c:af:79:4b:a9:80:a0:66:25:8c:25:e9:73:2f:75:85:
d3:93:85:1e:26:4a:55:87:8a:85:84:f1:13:d4:aa:ec:7c:82:
25:dc:93:aa:53:24:7b:aa:fe:55:f9:a1:65:67:b6:8f:9f:1c:
3e:3a:82:4f:70:23:01:e7:00:c6:24:69:0f:69:ea:d8:be:58:
5a:4c:16:46:f7:55:df:50:12:39:1b:40:cb:18:22:9a:62:a8:
92:66:17:11:e3:79:6b:af:5e:c1:2a:cd:7b:f8:5a:26:92:77:
95:a4:b1:a5:06:e1:e8:1b:63:0d:99:46:61:fe:27:f8:96:0e:
53:4b:9f:1c:b6:86:69:9d:fe:45:06:1b:89:a4:83:7d:d7:14:
eb:70:d6:e0:d3:c1:10:62:b1:6c:dc:9e:da:75:b7:3f:43:a4:
84:07:6f:cc:83:2a:4e:69:b3:f1:e9:26:4a:a0:00:25:8e:04:
8c:6b:44:05:99:8d:39:79:81:1d:bd:d5:ad:d3:4a:a1:b1:b3:
34:ef:ed:10:6a:42:4c:53:c8:3a:78:1d:2d:fb:84:9a:8f:1e:
e9:fa:79:8e:15:db:79:46:22:b6:e2:33:23:21:7e:65:8e:8e:
3c:c7:ec:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:04 2026 by rpki-client