Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144385.roa
File: AS144385.roa (raw, json)
Hash identifier: GsRkqsVGen5Zyi4GKuKQZjIdk7MaDAMcKTao0/xjnvc=
Subject key identifier: 1B:BC:AD:A0:ED:75:A5:82:07:7E:2B:8E:96:13:E9:0F:89:65:B6:18
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 104E02C9C041145D12486BF3400E8485530B55BD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144385.roa
Signing time: Tue 26 May 2026 06:12:45 +0000
ROA not before: Tue 26 May 2026 06:07:45 +0000
ROA not after: Tue 25 May 2027 06:12:45 +0000
asID: 144385
IP address blocks: 240a:a6c7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:4e:02:c9:c0:41:14:5d:12:48:6b:f3:40:0e:84:85:53:0b:55:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:45 2026 GMT
Not After : May 25 06:12:45 2027 GMT
Subject: CN=1BBCADA0ED75A582077E2B8E9613E90F8965B618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ba:a4:31:ba:41:ff:ad:ad:48:59:7c:a3:40:
bd:e7:38:a4:d3:d3:7b:79:3e:8f:c0:54:22:a5:63:
37:39:6b:31:c0:39:4c:70:52:3b:a1:69:3b:3b:30:
68:47:04:0f:48:bd:69:92:3f:28:8a:f3:7b:a0:6d:
a3:d3:df:01:92:97:bb:36:a2:0e:d4:c5:d4:93:7e:
e0:64:68:de:ca:51:8b:8b:ee:ad:fc:22:e7:b2:87:
c7:21:65:ec:4c:f2:0b:8a:e3:d3:12:fc:8f:4a:0e:
00:f9:16:58:99:13:8f:a7:cb:2b:bc:c1:88:9a:83:
e0:6a:c1:ba:84:1a:34:fe:a9:29:68:2a:a6:8e:52:
8d:e8:8f:90:0f:20:f2:d2:15:50:83:49:bd:b6:ac:
cd:a8:39:a0:2d:63:f0:8f:b1:3f:43:b5:5c:ae:01:
8d:e7:bd:60:28:4b:9c:87:63:9f:25:c8:b1:be:1b:
e7:b7:ca:94:b3:8f:16:4f:c2:a1:2c:95:ff:e0:91:
c0:5a:fd:2b:99:86:ab:7a:1f:4b:73:cd:d9:5b:52:
18:8b:86:70:d9:06:fc:34:bc:9a:75:1e:b6:13:86:
53:a3:e5:25:ee:a4:b1:f8:08:ab:d5:bd:96:a6:bf:
08:ea:77:6c:69:20:4f:20:8f:c3:df:31:cc:d1:a3:
31:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BC:AD:A0:ED:75:A5:82:07:7E:2B:8E:96:13:E9:0F:89:65:B6:18
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144385.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6c7::/32
Signature Algorithm: sha256WithRSAEncryption
0d:a6:34:46:95:7f:30:b5:db:36:a1:ed:eb:0a:9a:b4:4c:60:
a0:b8:46:45:1d:a9:aa:ba:76:30:ab:bd:e1:79:02:f3:e7:31:
3d:14:8e:a6:fa:ac:36:41:76:1e:83:65:fa:a3:f8:00:1e:0d:
ad:c0:dd:cc:3d:ec:0e:8c:8d:29:8f:c8:bd:00:90:ec:c9:bc:
2b:c8:1c:b7:e6:dd:2e:91:33:3c:9a:1a:c8:e2:8d:10:f6:45:
63:54:48:bf:be:f8:12:0f:18:2c:1a:ce:d2:61:ba:e0:6d:7e:
75:f1:a7:5f:62:98:e4:ce:28:a5:69:3b:94:6c:84:31:cf:52:
c3:4a:a7:49:57:7d:ef:60:11:13:6a:24:23:59:25:3b:52:5a:
79:d7:c4:54:50:20:43:6e:0c:b3:1b:78:13:b5:70:bd:8c:70:
2d:a3:a1:8a:86:6a:27:d1:5a:ef:56:c7:31:a0:32:b6:3e:a4:
c4:47:b8:59:7d:fc:03:07:91:1f:2a:4e:9d:ef:4a:08:f9:be:
a8:8e:77:fe:10:bb:e2:2e:9a:42:99:8c:82:f5:ad:8b:f0:ac:
53:12:1d:a6:c8:37:a7:57:0c:ab:84:95:a0:a2:21:49:4d:3c:
71:80:c8:7c:1f:fe:8d:5c:a7:cb:96:ca:1b:91:b3:8d:49:71:
20:67:e6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:10 2026 by rpki-client