Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144343.roa
File: AS144343.roa (raw, json)
Hash identifier: GlSVRCvGCp465f2caAFmL473yN2DZQWtFaTWWZFDrVY=
Subject key identifier: D2:0A:B1:9B:FB:35:55:53:44:5A:E0:24:D8:73:D1:9C:C3:21:0C:88
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0672C90DCEE94CA0CA8D1DE51E51984ADBAE4211
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144343.roa
Signing time: Fri 22 May 2026 06:27:33 +0000
ROA not before: Fri 22 May 2026 06:22:33 +0000
ROA not after: Fri 21 May 2027 06:27:33 +0000
asID: 144343
IP address blocks: 240a:a69d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:72:c9:0d:ce:e9:4c:a0:ca:8d:1d:e5:1e:51:98:4a:db:ae:42:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:33 2026 GMT
Not After : May 21 06:27:33 2027 GMT
Subject: CN=D20AB19BFB355553445AE024D873D19CC3210C88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:6c:80:90:a7:c0:ba:e7:ef:c0:d6:bb:f1:
c3:cf:58:f0:a9:a6:6d:7e:4c:f5:55:c7:c2:8d:ea:
e3:02:4a:ee:db:fc:00:45:89:20:52:dc:75:6f:62:
cc:34:2a:07:26:95:ba:3d:ef:47:6a:5d:2d:46:54:
cc:21:cb:b0:48:38:9c:6a:7d:1e:78:94:7e:c9:c6:
27:9c:ee:22:1c:74:f2:5f:83:30:b2:e9:5d:da:81:
a7:06:5f:64:0b:0b:4f:6a:81:c1:fc:ff:11:c3:38:
04:a6:ca:9d:49:6e:0d:4a:4e:6f:1a:0a:5c:06:12:
bc:7e:c2:26:26:10:bb:a5:81:c6:a3:fb:67:af:66:
93:83:41:f9:e2:24:4a:dc:ea:5a:60:a8:98:64:ed:
b3:ad:4f:e2:ed:28:5a:e6:dd:76:07:b0:44:6f:14:
c8:ca:23:fe:04:f3:4e:9c:6c:4f:96:c8:76:6d:c4:
40:e3:ad:9e:42:85:66:72:32:35:88:da:40:ee:c9:
08:72:e9:57:86:39:97:7c:19:b2:2c:68:39:a0:a6:
cc:36:26:4c:18:96:c4:11:3d:b7:72:fd:75:85:79:
96:8c:e7:dd:99:c1:a2:a1:dc:9f:fd:06:19:4e:20:
4b:7b:5d:84:89:cc:5f:8b:ca:9e:fb:f7:a3:33:b6:
2e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0A:B1:9B:FB:35:55:53:44:5A:E0:24:D8:73:D1:9C:C3:21:0C:88
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144343.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a69d::/32
Signature Algorithm: sha256WithRSAEncryption
ba:2e:f1:8e:1b:95:df:d9:9f:56:45:d9:9f:2e:f2:3f:fb:c9:
ce:47:d1:31:9e:e4:a8:40:28:78:a3:73:91:3e:48:cf:14:b5:
96:30:b6:52:5d:12:37:36:b8:bf:2e:46:49:83:99:0b:75:40:
be:c9:88:49:eb:c7:43:32:5d:3d:99:dd:3b:43:30:28:b5:87:
52:95:c0:82:48:ca:96:f9:01:90:dc:06:de:7f:1a:9a:0d:e0:
fa:77:31:ac:c6:2f:1f:3f:65:5f:90:6e:d0:dd:47:d1:f5:ec:
5a:4a:15:d7:21:08:ac:fe:84:14:52:bc:8c:cd:5b:f0:35:8e:
df:f7:25:fd:46:21:8f:8a:d9:a4:86:82:d3:80:60:aa:a1:89:
7e:07:f2:52:a0:20:a4:2a:50:4a:fb:54:6e:4c:f5:fb:27:9c:
f9:05:23:11:15:1d:10:55:33:73:21:a0:2f:e4:92:17:97:78:
ec:56:a2:bb:97:79:81:da:67:52:87:d4:ef:62:03:f0:87:c2:
f2:15:d3:07:5e:39:93:2e:59:01:78:93:f2:3e:eb:fe:5e:14:
4c:6d:29:22:b9:3d:79:b7:01:75:c6:05:07:0f:45:1a:d9:f6:
8c:4d:df:43:e8:37:57:9c:e7:a4:5e:7a:29:3a:5d:3f:6d:4c:
fc:e4:51:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:51:01 2026 by rpki-client