Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144347.roa
File: AS144347.roa (raw, json)
Hash identifier: vTl6AAbzxjq254YKkNeBUU69D/uO95sbGqb89dA39tE=
Subject key identifier: F4:06:2E:DB:B1:F5:D4:0C:A0:C6:12:CA:D8:3D:10:60:01:3D:F9:66
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1326846E0B0E89C7AB6C64ACD8832C685C692500
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144347.roa
Signing time: Mon 25 May 2026 06:28:34 +0000
ROA not before: Mon 25 May 2026 06:23:34 +0000
ROA not after: Mon 24 May 2027 06:28:34 +0000
asID: 144347
IP address blocks: 240a:a6a1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:26:84:6e:0b:0e:89:c7:ab:6c:64:ac:d8:83:2c:68:5c:69:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:34 2026 GMT
Not After : May 24 06:28:34 2027 GMT
Subject: CN=F4062EDBB1F5D40CA0C612CAD83D1060013DF966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3f:07:b8:c3:bd:02:b2:d8:c2:0b:4c:dd:41:
8e:d3:84:50:b1:43:1d:fb:d9:cf:cc:5c:1f:c0:31:
82:ae:3b:29:b5:4c:6b:32:16:8d:79:66:00:40:c4:
de:9b:34:65:cf:96:a5:75:24:5c:40:93:5d:1b:91:
fe:f3:f4:b4:45:42:78:c8:71:23:63:bf:5f:9f:06:
5e:e2:67:8e:9a:0b:0b:ea:b5:d0:e8:2c:6a:f1:14:
45:cd:b7:83:07:ec:10:fb:0a:78:6f:eb:a9:64:de:
22:30:3b:4f:e2:a2:c4:68:ee:80:66:0f:fa:d2:03:
25:33:52:85:89:b6:8c:fe:e9:e9:7f:b6:f0:78:d3:
ff:d2:f0:25:4c:6a:57:78:75:f8:eb:88:2d:5b:02:
2c:c4:60:4e:54:15:e9:aa:99:d5:d8:f7:b8:80:21:
54:52:4a:de:c0:54:38:43:2e:47:e7:93:59:7c:c9:
e7:9f:eb:85:80:f7:d6:4e:c5:b3:c5:03:bc:b2:0f:
12:59:89:ed:90:6c:fd:d1:d9:6a:d4:27:05:f8:4b:
bd:de:5b:0b:df:a8:a5:8f:6a:40:1b:e8:97:2b:ce:
63:b7:a3:d6:7c:0d:d9:d6:fd:a0:62:76:4c:28:0b:
f7:75:fc:75:44:ac:8c:48:6a:1d:dc:a6:4f:ce:5e:
85:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:06:2E:DB:B1:F5:D4:0C:A0:C6:12:CA:D8:3D:10:60:01:3D:F9:66
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144347.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6a1::/32
Signature Algorithm: sha256WithRSAEncryption
08:97:e6:09:20:a7:68:fe:84:d5:f9:83:0f:e9:ae:fc:07:1e:
83:89:bc:1b:39:b2:5b:98:c6:09:db:61:92:7d:a8:72:c3:40:
b1:9c:59:44:65:95:f7:63:3e:67:68:0d:fa:6e:86:23:88:4e:
2a:2f:c7:dc:e6:51:96:55:2e:ba:47:15:ad:7f:76:fa:1e:33:
5b:66:b5:9a:d8:b3:ca:2e:02:b1:09:3d:35:70:91:60:59:cc:
5c:bb:58:e7:7d:05:19:09:63:af:5e:50:b4:77:85:05:84:de:
81:e6:64:c2:a7:13:d9:e0:ec:da:4f:ce:35:4b:20:0e:9f:3a:
0a:c5:f0:03:c7:8f:27:63:9c:75:c8:ef:23:bc:39:b5:96:8d:
b3:8d:38:17:dd:ed:7e:34:94:18:c6:a5:38:f3:8d:a8:7e:90:
d8:0a:db:a0:7b:71:4f:fd:39:e4:da:80:11:04:c1:d6:0b:04:
50:0a:6a:1b:7d:ec:68:e0:73:ed:31:06:fe:57:83:c0:bf:05:
4b:8b:2d:62:c0:3e:8b:5a:a9:0a:9a:ae:12:f9:b8:6e:a7:cb:
81:72:b0:ad:98:ae:ab:d1:70:fc:70:60:28:a1:e3:87:7b:2f:
53:c3:5a:c4:f1:91:a1:5e:4c:23:1c:85:54:d7:c6:36:5f:d4:
da:94:4c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:45 2026 by rpki-client