Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144342.roa
File: AS144342.roa (raw, json)
Hash identifier: Erz/JtSPt10dVvkzWMc93pRmq0+RT0HAXVC3hofsGH4=
Subject key identifier: 0D:76:21:08:D8:CD:FC:68:DD:75:BC:22:2B:DA:EE:6D:DD:16:6E:84
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2DFC2239A6E1FE1485A9E7A73A33947BFD0BD2FD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144342.roa
Signing time: Fri 22 May 2026 04:07:55 +0000
ROA not before: Fri 22 May 2026 04:02:55 +0000
ROA not after: Fri 21 May 2027 04:07:55 +0000
asID: 144342
IP address blocks: 240a:a69c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:fc:22:39:a6:e1:fe:14:85:a9:e7:a7:3a:33:94:7b:fd:0b:d2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:02:55 2026 GMT
Not After : May 21 04:07:55 2027 GMT
Subject: CN=0D762108D8CDFC68DD75BC222BDAEE6DDD166E84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:86:ec:6f:29:40:c6:4c:b4:87:2e:cf:4a:
5f:54:d9:83:21:b1:fd:16:77:08:cc:cc:e5:d1:7f:
4a:5e:cb:61:20:23:2c:87:24:b3:3d:11:50:de:e5:
54:6c:3d:d2:f4:85:54:77:d6:5f:82:c5:25:09:c5:
03:5c:3a:6c:24:3b:38:04:60:64:95:a3:7c:cc:89:
5f:c3:28:67:b7:8c:ac:43:2c:86:16:e6:e9:ee:57:
e1:c4:77:5c:3c:00:b5:01:36:91:ef:ee:d1:1b:da:
55:7a:19:89:e7:f6:16:40:c2:65:7f:52:ea:46:ce:
12:0a:c5:3b:e4:1d:4f:9a:75:8b:b0:38:ce:0f:a8:
9c:c1:ca:1b:01:46:7a:32:24:26:6c:dc:8a:14:c6:
58:33:e7:f6:d0:09:9a:c6:c6:9e:18:75:39:8b:4d:
0a:5b:06:c9:b3:bb:25:f8:13:e4:0c:df:ec:4f:83:
b8:00:79:14:ec:94:1e:a7:9e:44:41:92:c2:d5:df:
a5:8e:ef:1e:5b:73:e6:45:82:4d:66:74:7f:29:4e:
0e:06:55:c9:cd:00:3f:1d:7b:63:31:48:fc:1a:ce:
b3:a2:05:4e:1b:62:82:7c:43:bc:49:dc:14:57:f9:
84:97:62:90:b9:60:7b:18:9d:b1:ea:14:9d:4a:bf:
46:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:76:21:08:D8:CD:FC:68:DD:75:BC:22:2B:DA:EE:6D:DD:16:6E:84
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144342.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a69c::/32
Signature Algorithm: sha256WithRSAEncryption
14:6a:d1:fd:bb:99:8c:53:3d:59:6c:40:71:5a:54:7f:45:cb:
3d:03:f3:b0:73:d4:2a:7c:6e:68:42:0d:6f:08:78:ae:fa:25:
32:14:8c:f9:8d:e1:1d:b3:57:43:25:83:11:45:31:ea:92:3c:
51:41:af:02:06:ad:74:bf:eb:81:a3:d6:98:3c:1a:88:e2:3f:
a9:b1:a5:be:e3:8b:ed:bb:81:24:dd:72:56:96:a1:1d:37:47:
cb:dd:f9:73:ce:f8:8e:0d:86:bc:d3:4a:51:f5:61:9a:40:18:
3d:72:38:ad:55:a5:d4:dd:97:c1:a9:df:03:7b:a2:76:aa:cb:
26:4c:59:b1:26:8f:53:36:a7:15:42:ce:15:5c:13:d4:70:81:
7d:b9:2e:b5:08:7c:c0:78:a6:da:fb:43:93:cf:c8:fd:54:6e:
a0:c1:be:ea:a5:94:0a:af:e7:83:0c:f0:5b:c7:44:86:d2:80:
b3:70:15:bf:ed:65:08:cb:b5:6f:de:34:f2:ad:59:89:65:a9:
cd:fa:0b:ef:51:07:36:1d:16:d6:8d:79:a4:c2:41:fd:dd:80:
25:61:2b:f6:85:bf:a3:0f:b7:c9:db:19:5f:87:95:99:59:18:
f0:47:de:e2:ef:b0:7b:38:3f:28:b4:fe:e8:44:6a:4b:f4:cf:
da:65:29:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:01 2026 by rpki-client