Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144341.roa
File: AS144341.roa (raw, json)
Hash identifier: eFDszBAsznptF5gJxubGj61avFqS2p7MilRLjXcNJZ0=
Subject key identifier: F9:5F:99:FD:FD:79:5D:1A:A6:12:E9:FD:F2:CC:B1:5E:D7:19:D1:56
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0227B5C88362168B2CFA3147D74664627B3AEECF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144341.roa
Signing time: Fri 22 May 2026 01:50:15 +0000
ROA not before: Fri 22 May 2026 01:45:15 +0000
ROA not after: Fri 21 May 2027 01:50:15 +0000
asID: 144341
IP address blocks: 240a:a69b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:27:b5:c8:83:62:16:8b:2c:fa:31:47:d7:46:64:62:7b:3a:ee:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:15 2026 GMT
Not After : May 21 01:50:15 2027 GMT
Subject: CN=F95F99FDFD795D1AA612E9FDF2CCB15ED719D156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:04:e4:56:9b:bd:bc:f6:06:51:e6:42:eb:cf:
d2:04:95:db:8c:1e:3d:c8:60:6f:ee:15:df:ea:c6:
0a:c2:f4:29:a9:9f:88:a9:91:ec:9c:db:bb:92:f3:
a9:28:16:c8:d3:1b:b3:5b:9c:b3:73:a2:aa:c9:a2:
52:30:ba:31:8d:25:04:ff:96:dd:8b:38:fe:aa:5a:
38:9d:9f:32:ad:78:a9:e2:90:07:4c:02:45:24:bf:
0a:f0:9b:96:c4:03:30:ff:7f:51:8f:f2:bc:f7:b6:
cf:31:85:71:c7:75:1b:68:9d:a7:35:71:f7:c2:30:
22:60:b0:8a:6f:9c:fd:54:a1:1b:d3:34:8b:40:90:
0a:3c:3e:bd:9b:63:ac:4a:43:aa:c6:5d:08:e1:1d:
89:5a:a7:0e:a5:53:88:8b:12:31:f1:88:f2:f3:33:
ef:02:b3:57:21:f7:93:92:af:1c:9a:fb:be:eb:f0:
11:8d:66:f6:4c:ce:84:eb:23:98:03:fe:87:38:67:
c8:1e:9e:be:72:37:e0:70:4a:6c:97:a1:89:78:46:
ef:72:3d:f6:e2:f7:ea:5e:b2:7d:b4:f2:79:50:c1:
f9:13:b3:43:1e:54:4b:01:42:d3:36:0f:bb:88:16:
31:88:9b:fb:ef:11:88:de:56:f0:23:80:e0:7d:33:
c8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5F:99:FD:FD:79:5D:1A:A6:12:E9:FD:F2:CC:B1:5E:D7:19:D1:56
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144341.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a69b::/32
Signature Algorithm: sha256WithRSAEncryption
5f:29:9e:26:81:e1:09:e0:ec:76:81:4f:0f:c4:ab:dc:ce:bb:
78:d9:17:f3:f6:8d:8a:a3:83:98:77:d0:5b:b9:36:d9:a4:d3:
22:eb:33:eb:8a:1e:b5:e1:27:ba:97:72:e0:54:45:42:99:1c:
1e:5f:89:bd:22:4a:a1:66:8e:cd:03:82:1a:96:fb:c2:30:c1:
eb:b7:9b:ef:d0:bc:f3:67:35:92:ca:76:2d:69:83:3c:36:2f:
61:71:e5:6d:11:94:b8:6e:07:3c:f7:22:b5:cd:26:d5:eb:b4:
7d:01:e1:06:db:ab:e9:cd:2f:b9:84:b5:32:f4:9c:08:50:59:
a5:54:17:8f:cc:6e:17:42:c0:70:f6:c5:d1:21:c9:9a:b8:e1:
7e:cb:bb:61:b7:90:35:31:e6:67:18:b4:bd:55:5a:c3:eb:74:
c3:53:3c:9f:68:d9:52:6b:02:80:84:a4:57:14:ec:73:9f:a3:
80:f3:29:4f:53:a0:17:56:df:81:e9:83:fa:1b:eb:e5:50:ab:
12:f2:66:1d:45:7a:0a:ed:ef:8b:bb:a6:71:13:c3:23:bd:eb:
1f:dd:29:e5:cf:3f:e2:f3:89:7b:cf:ef:41:f4:28:f9:2d:68:
e0:a2:a7:27:90:90:78:14:d1:61:2a:75:48:72:01:7c:09:7a:
4a:55:4b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:34 2026 by rpki-client