Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144360.roa
File: AS144360.roa (raw, json)
Hash identifier: NbRnCH9gCTYrBSqodURNgPmF5ylMD7+8ZPqsPFmFsig=
Subject key identifier: B0:C8:A1:78:11:B4:69:A8:4F:F0:83:CA:F7:11:D4:7A:80:96:31:1A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2060A35D2C6E58387729D4D6E04AF728E919F5C9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144360.roa
Signing time: Mon 25 May 2026 01:20:29 +0000
ROA not before: Mon 25 May 2026 01:15:29 +0000
ROA not after: Mon 24 May 2027 01:20:29 +0000
asID: 144360
IP address blocks: 240a:a6ae::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:60:a3:5d:2c:6e:58:38:77:29:d4:d6:e0:4a:f7:28:e9:19:f5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:29 2026 GMT
Not After : May 24 01:20:29 2027 GMT
Subject: CN=B0C8A17811B469A84FF083CAF711D47A8096311A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2b:79:39:3c:76:5f:be:91:f3:bb:9a:af:55:
a7:62:8b:0e:10:28:2e:11:47:8b:f0:98:f1:21:bb:
36:6a:42:71:a3:7c:ff:d6:34:84:4d:75:f1:cc:86:
bb:1b:ac:ca:f6:f0:5f:17:98:16:1f:b6:cd:b1:9c:
06:dc:fb:80:a0:53:ed:4c:5b:5f:0f:82:76:a2:78:
2e:0a:a9:f7:ca:bf:09:a4:d5:a9:05:8d:ce:55:0a:
d9:9d:78:65:b1:45:40:ce:11:8f:c3:ce:2f:28:30:
21:db:53:b0:e9:24:ec:16:d9:5b:34:c8:31:f5:d8:
b4:5f:9b:c4:a2:ea:af:7a:a4:c6:a4:5e:29:0d:90:
7a:e3:72:17:b2:58:00:73:ca:57:6e:70:f4:ac:4d:
19:bb:15:5d:6c:5d:92:5f:02:92:3f:5f:80:fb:10:
62:59:aa:52:f4:23:6e:92:c3:53:20:95:41:c5:b8:
9f:d4:e8:4a:01:25:76:54:50:46:4f:49:f7:c4:3c:
74:8e:a1:85:b9:2b:55:67:5d:f5:39:91:9b:ec:05:
05:33:20:7a:91:e3:e0:bc:0b:85:cc:91:5b:34:55:
02:0b:bd:8a:6f:c7:58:72:ca:ea:d3:5f:7d:9e:1d:
12:a7:bc:fb:a8:45:c5:a0:a4:c5:15:77:61:00:66:
3a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C8:A1:78:11:B4:69:A8:4F:F0:83:CA:F7:11:D4:7A:80:96:31:1A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144360.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6ae::/32
Signature Algorithm: sha256WithRSAEncryption
9a:9f:90:95:2e:82:23:16:eb:7b:e1:e3:f9:1a:bd:f1:1e:b9:
b8:6f:0c:07:ec:c5:74:ce:68:10:5e:8a:8a:f5:53:8b:8b:80:
4e:19:2c:df:bc:09:e7:d2:45:9c:78:c0:0d:93:f4:33:44:06:
1e:58:a8:2b:cd:ff:d6:26:b3:29:f8:9c:de:c7:e8:35:ca:e9:
f9:fb:48:4c:3b:cb:d1:96:7f:e3:10:eb:f8:76:ab:47:aa:21:
87:f0:4b:13:70:8e:31:37:be:1e:09:80:b9:a3:7a:fc:9e:79:
36:fc:2e:a8:68:37:02:40:4a:42:11:a4:c9:73:1b:62:2a:b4:
ed:51:03:bc:65:9e:5a:cb:12:5f:f0:8f:72:d8:f0:6d:b4:2a:
fe:ec:bb:14:32:84:02:e8:f4:ff:d7:76:e5:a6:89:3a:2d:72:
68:c2:0d:a1:16:21:7e:6e:56:f4:35:09:bf:97:a7:49:f7:b5:
48:f5:f2:36:64:5e:2b:10:5b:65:0d:6a:bf:50:fe:0c:15:7b:
83:ca:49:46:d1:da:7c:71:d6:e5:36:ab:c2:3b:51:5a:de:f0:
93:a0:47:f0:39:3d:0b:13:db:3b:b1:96:5f:c7:4f:33:3f:98:
65:63:32:d5:34:96:03:8f:e6:02:bf:fe:eb:b2:20:b1:cb:05:
41:49:38:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:37 2026 by rpki-client