Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144356.roa
File: AS144356.roa (raw, json)
Hash identifier: uzP1Hv0jEBOrKOZ/xhKISH4LZdIfTbnrHIwfSekRKl0=
Subject key identifier: 87:44:C6:95:3C:A5:85:72:B6:88:A3:1E:26:75:91:99:9E:A2:9F:73
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 73B42923E285C701E1A632779080FD05108D26C5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144356.roa
Signing time: Mon 25 May 2026 02:22:43 +0000
ROA not before: Mon 25 May 2026 02:17:43 +0000
ROA not after: Mon 24 May 2027 02:22:43 +0000
asID: 144356
IP address blocks: 240a:a6aa::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:b4:29:23:e2:85:c7:01:e1:a6:32:77:90:80:fd:05:10:8d:26:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:43 2026 GMT
Not After : May 24 02:22:43 2027 GMT
Subject: CN=8744C6953CA58572B688A31E267591999EA29F73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:99:99:f3:ff:ed:a8:2f:b4:00:c1:a6:12:
bb:96:ce:44:89:97:00:b1:5c:5a:f8:88:3f:11:9d:
98:0c:ff:5b:ad:5d:3a:81:85:a6:72:a8:a7:93:80:
1c:9e:14:07:b6:20:7f:26:98:d9:b0:ad:b4:76:0d:
9a:97:64:2b:12:0a:64:19:a3:de:92:15:f4:79:c2:
b6:af:15:8c:8c:3e:8f:6f:30:6c:05:cc:63:41:9c:
14:03:7a:fa:a6:47:7a:f9:bc:c9:3f:b6:84:8f:1c:
8d:56:8e:dc:8a:56:50:54:42:17:6f:3c:36:8b:aa:
ec:30:1f:1f:4d:ed:d6:24:b8:dc:33:e5:41:41:04:
96:81:f5:55:e8:1b:8b:86:9e:67:91:ab:62:ce:39:
ad:0b:53:98:31:4b:dd:31:0a:19:85:90:61:b5:b3:
79:2a:33:d8:f4:3f:6a:59:62:ef:08:da:90:4b:6c:
df:c2:4a:ea:40:e1:6a:a5:26:42:37:38:22:7a:b0:
b5:b6:3b:4f:e2:e2:ef:6c:3d:b2:54:c4:ae:c4:d8:
69:61:15:20:46:04:de:98:22:10:22:3a:6d:d2:a8:
18:32:a3:ce:69:66:4d:0f:99:b7:ef:36:1f:4d:ac:
1b:e3:48:0b:cd:7b:33:29:6b:39:c8:27:6e:48:ca:
ca:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:44:C6:95:3C:A5:85:72:B6:88:A3:1E:26:75:91:99:9E:A2:9F:73
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6aa::/32
Signature Algorithm: sha256WithRSAEncryption
af:45:0d:5b:df:a5:e9:ee:d4:bc:99:e9:31:0f:70:da:1a:4b:
65:a3:9c:66:56:d2:9d:79:11:17:29:79:8f:b4:4d:60:49:b0:
a6:2e:48:5b:88:e1:2a:75:a2:a9:bc:13:65:3b:7e:9d:24:bb:
1c:a2:c6:eb:fe:e4:a6:4f:ce:57:f0:d1:51:7c:d0:15:f4:e4:
67:1a:1e:ad:40:96:c3:1f:74:8d:12:47:c5:1f:95:42:cc:37:
3b:4c:39:e7:8b:42:14:bf:15:55:e3:e0:49:45:ec:83:05:72:
f7:75:c9:cd:b8:4e:48:dc:54:16:93:46:f6:d0:83:2f:a9:de:
ee:81:ea:8c:99:2f:d1:3f:aa:d1:18:5d:63:89:02:ac:60:56:
ec:ec:37:d1:1f:99:13:0d:14:e8:0f:8c:b7:3c:63:b2:dc:bc:
18:cf:fc:61:30:b1:95:6d:54:ec:54:9e:a6:cd:b0:fe:25:31:
d1:25:12:ac:d5:7b:2c:3b:96:97:83:5b:f0:5b:fd:30:8e:17:
8c:2e:3d:97:0c:b0:ad:f7:60:f4:ac:fb:1a:84:17:a9:0e:cc:
84:09:b5:fc:9d:bd:59:e3:30:b2:fb:7b:e6:07:8f:3c:b4:bf:
fa:10:43:a0:79:90:bb:3a:73:fd:d5:c6:bf:5b:33:b1:ea:f0:
80:38:a0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:04 2026 by rpki-client