Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144381.roa
File: AS144381.roa (raw, json)
Hash identifier: K+iatreeBjls1x5J+0pCQrUZpYM0J49rwoUIZoFNwTo=
Subject key identifier: 88:FF:91:DA:49:2A:CD:49:3B:2F:AC:D1:A5:DB:F9:FB:5E:55:38:95
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 199F191A5C7F7828A3419236D1EE1424CA8A43BE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144381.roa
Signing time: Fri 22 May 2026 07:09:04 +0000
ROA not before: Fri 22 May 2026 07:04:04 +0000
ROA not after: Fri 21 May 2027 07:09:04 +0000
asID: 144381
IP address blocks: 240a:a6c3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:9f:19:1a:5c:7f:78:28:a3:41:92:36:d1:ee:14:24:ca:8a:43:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:04 2026 GMT
Not After : May 21 07:09:04 2027 GMT
Subject: CN=88FF91DA492ACD493B2FACD1A5DBF9FB5E553895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bf:82:26:77:ea:94:16:72:a4:00:72:e4:c8:
db:99:c7:ec:aa:36:46:91:dd:b3:20:04:20:56:e8:
f2:40:e0:ec:da:dc:ec:77:f7:46:c3:5f:4c:dc:08:
e7:46:94:f7:c4:64:d7:d0:41:0f:48:b0:5f:d4:94:
7c:6d:f0:61:ba:e7:74:61:d4:66:6a:78:d4:da:f0:
19:f6:1a:92:17:13:c6:f4:e1:c1:d1:1d:eb:0e:9e:
0b:29:9f:32:c7:a8:e8:49:36:f3:73:20:04:ff:3d:
b6:54:d5:b7:7f:cf:ad:9a:de:06:2c:51:41:2e:12:
5e:d1:fe:b6:32:1a:ae:1e:06:fc:ac:13:78:2b:77:
8e:df:20:12:3e:92:41:07:97:a7:4b:57:61:87:a8:
f5:e7:81:c9:1b:c3:10:e1:74:6c:7c:ba:2f:14:87:
b2:fe:1d:c1:e6:11:84:df:35:5b:1e:3e:71:47:23:
81:1c:0e:d0:9c:08:9a:9d:dc:bf:b3:ea:18:5e:fc:
cd:82:17:c0:59:08:09:dc:86:87:ce:a5:e7:58:8f:
6a:61:2e:a7:ca:01:49:8a:83:03:bd:d9:3d:2c:75:
98:3b:00:eb:f6:d8:b3:b3:dc:ad:89:b6:55:6f:33:
10:e9:ed:aa:f9:78:9a:ea:06:21:c8:c7:d5:a4:c7:
0e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FF:91:DA:49:2A:CD:49:3B:2F:AC:D1:A5:DB:F9:FB:5E:55:38:95
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144381.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6c3::/32
Signature Algorithm: sha256WithRSAEncryption
94:c6:bb:df:1c:cc:dc:8d:98:32:45:26:c1:0a:60:d5:24:54:
02:0c:10:28:56:6f:99:5e:82:8b:9c:a4:15:99:1f:f5:9e:5b:
f5:64:bb:ae:86:71:16:7d:2f:d0:12:14:cf:7f:da:3b:7f:f2:
c8:4f:e8:71:b3:07:ce:ce:04:18:25:35:f2:e6:aa:0a:c9:48:
84:34:c9:a9:0f:10:18:72:dc:ed:34:19:57:6d:a6:99:41:f6:
b7:a4:49:98:83:d7:7f:f3:f0:70:89:16:63:35:40:85:57:2a:
29:4a:d6:9c:e2:38:17:78:13:c1:33:e8:cc:f5:05:7d:7b:01:
6e:ca:ee:e3:3e:76:f9:5a:4f:82:3a:d4:de:00:f5:41:7e:9f:
2a:e2:1c:ab:71:33:9b:d5:66:cd:e3:b7:92:8e:39:a0:cc:b4:
e9:c4:44:df:9f:26:e7:73:11:a9:5d:4c:27:c1:bd:c8:9b:f4:
e0:be:1e:b2:29:0c:8c:9a:3c:9c:a5:e6:ab:34:d1:61:a7:5d:
97:25:29:a2:e3:15:89:a2:15:89:47:70:c3:46:fc:23:c7:73:
89:27:0f:79:28:5a:a8:f6:54:c1:60:e9:14:4a:8d:25:55:e8:
e3:6e:7c:e8:f6:46:92:ca:6e:36:8c:4f:eb:16:37:56:0e:16:
c7:ae:f0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:26 2026 by rpki-client