Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144345.roa
File: AS144345.roa (raw, json)
Hash identifier: xWY6Vf7k1tn9XAggVTf0v+H/K3f7nyFzjCed/7W+WDk=
Subject key identifier: 6B:5D:CF:33:00:49:28:1B:B2:9F:B8:AE:65:1D:33:79:69:C2:B1:18
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2D9C949BF420A6C46A79ABFEF374E9523AF6536A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144345.roa
Signing time: Fri 22 May 2026 06:05:46 +0000
ROA not before: Fri 22 May 2026 06:00:46 +0000
ROA not after: Fri 21 May 2027 06:05:46 +0000
asID: 144345
IP address blocks: 240a:a69f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:9c:94:9b:f4:20:a6:c4:6a:79:ab:fe:f3:74:e9:52:3a:f6:53:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:46 2026 GMT
Not After : May 21 06:05:46 2027 GMT
Subject: CN=6B5DCF330049281BB29FB8AE651D337969C2B118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:a3:87:13:cf:8f:db:db:99:42:cd:5b:9e:
03:6a:8e:de:e5:c5:68:db:7c:2d:81:c4:ac:ef:9b:
36:57:96:47:9c:97:66:db:cb:0f:d2:41:c5:0d:b3:
63:0a:d6:c5:59:88:8c:4f:cf:64:86:5f:de:80:fe:
5e:b2:cf:a4:e9:93:a1:96:b6:db:34:9c:c5:4d:81:
60:60:05:4d:cf:01:e7:68:70:9a:6b:9f:cc:6b:bb:
48:6b:99:fc:d8:6e:5c:e2:f9:c3:bd:96:ff:97:6c:
bd:a6:f9:6b:cc:d1:8b:00:56:a8:36:85:f9:25:46:
b1:d4:d8:ac:50:e0:a6:ed:0e:3e:8b:88:8a:c1:02:
df:7a:99:e8:7e:7e:4b:46:da:3e:6c:35:d8:9a:a6:
96:be:85:ee:35:49:e1:ce:40:6e:36:51:91:29:aa:
6d:3c:23:ad:eb:ef:8f:c9:09:a7:56:f6:f0:91:71:
e2:10:ef:33:e9:e2:5c:7f:44:fc:10:e7:cd:cd:f2:
73:45:79:cb:d1:80:0d:5c:83:30:92:76:d7:d3:88:
d7:40:7d:c4:0b:5b:16:3f:5b:6d:79:45:cd:36:f9:
c0:19:96:8b:ab:74:fa:ff:55:96:65:ff:19:d4:0c:
8e:50:40:75:57:fe:de:50:90:75:e9:db:6e:fb:2b:
86:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5D:CF:33:00:49:28:1B:B2:9F:B8:AE:65:1D:33:79:69:C2:B1:18
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144345.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a69f::/32
Signature Algorithm: sha256WithRSAEncryption
2e:29:d5:eb:2a:0c:2e:c8:8d:58:ce:a4:37:ff:d0:25:98:2e:
0c:d7:c7:15:05:bd:03:29:f4:cd:12:b5:ad:7a:b1:3b:05:7b:
56:e2:9c:d6:5a:a9:0c:96:1e:dc:67:b9:33:ac:cb:e6:62:a8:
f8:a2:7c:5a:92:99:65:66:9b:c1:05:ed:67:2b:96:ec:00:12:
64:fa:ea:0f:37:6e:1c:ed:c7:d9:26:53:a2:4c:ad:6f:98:d2:
c9:60:77:29:da:4f:75:00:56:ae:c7:6f:5d:fa:a9:db:ed:a3:
b1:75:29:d2:79:cf:76:07:68:53:ee:4d:c5:f1:a4:0d:e7:2c:
1d:9a:c2:ca:98:c9:52:2b:df:8a:e1:16:8c:f3:09:33:a1:ef:
2d:f2:bb:2d:78:86:e3:4f:15:c2:82:7b:cf:dc:29:7b:8d:95:
86:cf:db:a1:f0:5e:cb:99:ff:10:7a:b8:24:6d:d7:10:46:15:
be:9b:86:ce:f7:98:75:0d:92:d2:c5:06:09:15:4c:d4:04:88:
24:ef:19:9e:c4:0c:f8:10:c1:aa:03:ed:d7:54:32:f3:8d:5f:
32:31:16:41:69:6b:c1:f5:60:9d:15:b2:68:57:d4:03:80:64:
e2:7a:3b:7c:01:39:ce:0e:03:43:bf:b2:43:4b:26:fb:99:78:
ba:28:77:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:30 2026 by rpki-client