Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144374.roa
File: AS144374.roa (raw, json)
Hash identifier: Wq4TSQS5mRDpv9Q9/50wZq4sMLni1Mv6ldfgMsOrNJ0=
Subject key identifier: 81:0D:3D:62:7F:67:E7:C2:27:9A:32:55:13:79:8A:26:A3:C3:4E:75
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5658C4380E4BB3513A7975139A3088CA65950A70
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144374.roa
Signing time: Tue 26 May 2026 08:53:01 +0000
ROA not before: Tue 26 May 2026 08:48:01 +0000
ROA not after: Tue 25 May 2027 08:53:01 +0000
asID: 144374
IP address blocks: 240a:a6bc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:58:c4:38:0e:4b:b3:51:3a:79:75:13:9a:30:88:ca:65:95:0a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:48:01 2026 GMT
Not After : May 25 08:53:01 2027 GMT
Subject: CN=810D3D627F67E7C2279A325513798A26A3C34E75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:35:7b:62:d5:db:cf:ed:c3:9e:48:fa:bb:86:
3a:8e:68:4c:48:6c:73:85:60:10:bf:d1:80:cf:01:
aa:bf:0a:cc:90:d9:4e:72:ef:d0:df:6d:7f:b3:df:
1c:c6:21:56:88:42:be:af:5c:a9:40:99:1a:3f:dd:
e8:84:54:e3:b7:77:c6:4a:87:bf:31:51:50:0f:ef:
7d:d1:79:46:59:76:95:d1:86:0e:b1:32:7e:08:44:
d7:67:e9:1b:18:80:d3:32:14:5e:a1:09:39:04:77:
52:84:6f:c8:22:2b:54:d1:01:b9:a6:35:5c:2d:fc:
ea:d3:19:c7:37:e0:4c:b9:a2:12:2f:60:92:b2:3c:
aa:6c:9f:09:53:6f:44:39:39:09:3f:cc:24:c8:de:
c3:fe:8b:31:ff:29:b9:08:0f:f3:3e:9d:1b:50:95:
20:a6:0e:98:16:ad:08:d7:3e:ab:aa:1f:0a:92:de:
1b:fa:61:10:4c:e0:5f:b4:fa:00:65:56:d4:62:8a:
5e:f6:9e:ac:8f:bd:92:f6:ea:8e:8e:be:9f:33:06:
8a:e1:87:4f:85:c5:a6:3c:92:e9:b3:58:88:fb:70:
5e:5c:99:ca:61:04:73:03:3a:e2:48:be:7a:90:e8:
76:41:78:4b:ba:ea:75:d5:70:8f:c0:c5:d0:11:18:
ee:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0D:3D:62:7F:67:E7:C2:27:9A:32:55:13:79:8A:26:A3:C3:4E:75
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144374.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6bc::/32
Signature Algorithm: sha256WithRSAEncryption
42:56:71:66:fd:4a:2f:17:30:e5:ea:e2:15:80:47:96:f3:fa:
bb:99:d0:02:a3:f7:1c:8b:61:c9:cf:41:57:84:e5:44:68:0c:
78:18:14:10:e5:e7:16:2d:ed:b0:92:1c:ea:68:83:d5:42:06:
da:d6:a5:77:c3:0c:5d:cb:2b:11:f7:e0:74:83:2f:f4:44:ab:
7c:5d:69:be:b5:5c:ba:34:80:82:bc:2d:f9:ae:a8:1b:6e:a4:
f7:b4:4d:ca:85:4b:6d:61:6d:d2:4f:5e:56:66:4b:01:bf:da:
a8:1b:d0:64:04:6a:bf:f4:bc:dd:75:fd:fb:44:36:2a:12:97:
d5:f8:21:72:6b:e6:7e:2e:74:02:25:28:c3:58:64:96:71:7c:
32:98:b0:36:15:c7:21:24:ba:ba:f2:43:e7:a3:f2:74:0e:57:
64:fc:ed:06:0d:34:90:a3:8b:1f:fc:a0:04:3a:be:ae:37:83:
9d:ee:41:4e:00:47:20:1b:9c:4f:8d:a0:28:ac:f3:97:36:c5:
14:be:1a:9f:7d:f9:dd:c6:cb:ad:47:05:fb:60:a3:80:6a:d4:
52:6a:3c:7b:04:94:36:09:e2:fe:02:28:69:35:57:6d:5f:15:
ff:34:cb:1f:c4:f0:96:a5:0f:5d:2a:98:f3:69:04:9f:d3:73:
29:21:e3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:05 2026 by rpki-client