Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144387.roa
File: AS144387.roa (raw, json)
Hash identifier: bVIAulS0F3r3caJ0P9CGjw9KmW/8PpxfCbcClRuZ4mc=
Subject key identifier: 08:1F:DA:66:F9:C4:A6:CF:A2:D7:AB:9C:21:C7:F4:A2:B4:57:68:C8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6D90F8262E89F74574B4CE54D6BBDA3C4F0A04F7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144387.roa
Signing time: Tue 26 May 2026 06:30:35 +0000
ROA not before: Tue 26 May 2026 06:25:35 +0000
ROA not after: Tue 25 May 2027 06:30:35 +0000
asID: 144387
IP address blocks: 240a:a6c9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:90:f8:26:2e:89:f7:45:74:b4:ce:54:d6:bb:da:3c:4f:0a:04:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:35 2026 GMT
Not After : May 25 06:30:35 2027 GMT
Subject: CN=081FDA66F9C4A6CFA2D7AB9C21C7F4A2B45768C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:40:3b:84:90:85:12:a2:26:a7:e0:a8:91:91:
89:7d:6c:09:ca:2c:bd:d4:d9:f4:fa:c8:c7:9c:88:
7f:0b:b4:ca:a9:6f:aa:b9:50:1b:e2:4e:0e:5a:6f:
9c:df:d9:8c:be:c1:46:c9:98:8c:20:dd:ad:28:9b:
2d:ae:26:de:00:dd:ef:a1:ba:94:46:dd:16:80:77:
66:b3:d5:86:76:f1:e2:0a:c4:c4:ff:8c:35:fe:e2:
ed:82:93:f3:70:e6:46:60:70:25:67:84:63:75:6d:
a7:84:3a:ce:00:1f:7f:25:8c:2f:fd:4a:dc:8a:62:
64:f5:ed:6a:77:dc:47:6c:70:e8:24:72:df:22:ae:
40:9b:6b:0e:74:17:d2:d2:29:87:7b:11:d2:bc:49:
7a:91:25:f1:d6:5e:46:88:76:f4:a7:f5:b4:e2:9e:
b5:b9:17:6b:b5:f6:a7:11:74:1b:95:22:15:44:29:
ed:ca:dd:ae:c7:15:fe:e8:60:8a:51:13:71:fd:09:
11:ff:21:ef:21:4f:01:11:54:ca:d9:8b:a5:5e:1b:
99:bc:43:b4:ef:ea:b2:fb:de:d8:5e:e3:9c:cc:e3:
56:9d:9d:b2:f7:7b:38:00:00:09:40:a6:14:39:6b:
72:cf:2d:ed:52:7c:1f:72:4a:70:11:51:91:d6:c6:
7e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1F:DA:66:F9:C4:A6:CF:A2:D7:AB:9C:21:C7:F4:A2:B4:57:68:C8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144387.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6c9::/32
Signature Algorithm: sha256WithRSAEncryption
43:6c:b8:8c:6f:28:8f:cd:05:3a:62:28:f5:cd:b4:20:f9:84:
47:f1:83:13:6b:fd:0d:83:6b:03:6c:58:71:bb:59:5e:3e:4e:
c8:e4:04:c2:36:a2:a5:8a:eb:37:93:a0:5c:31:8c:6a:e5:2e:
6e:61:83:75:1c:cc:e4:18:27:34:3a:a0:a6:ca:76:a7:0f:e8:
b5:78:4f:c3:35:74:5e:1c:32:5c:9e:6b:01:0f:8c:1a:c0:5e:
d8:0b:ff:a7:ae:b2:2b:18:43:85:ff:26:d8:cf:08:28:89:9e:
87:1c:15:88:81:06:19:19:e1:44:23:34:18:81:79:e2:4b:f1:
d8:14:22:1d:52:58:ee:c9:74:0e:b9:29:3b:ad:a3:81:eb:04:
e8:7e:ff:93:c0:ff:84:dc:31:7c:3b:67:95:07:4a:38:43:67:
8f:c5:3e:c1:3d:42:cc:e6:75:f3:3f:47:ee:3b:88:02:83:6e:
41:db:39:52:77:a2:0e:1b:dc:07:fb:a2:df:b2:f2:50:76:8c:
b6:32:aa:0d:84:39:73:e5:aa:a5:bf:37:56:9e:0a:e4:24:fc:
82:4d:68:ac:8d:17:14:ed:ab:f4:5f:41:8f:57:47:e5:dd:ea:
71:b2:b7:35:21:13:8b:02:ce:cd:e0:88:76:ce:1c:b7:40:da:
8e:f9:6a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:31 2026 by rpki-client