Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144389.roa
File: AS144389.roa (raw, json)
Hash identifier: dDZF2fO+vpBCj4PJpVXKc7JkQkbNaKjn45u3hEmcM1k=
Subject key identifier: 75:03:05:57:7C:C9:3F:49:C2:69:23:35:81:47:1F:0A:94:AD:89:59
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0B51CA2AEF5E90AA9E822E4FA1338DACA787223D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144389.roa
Signing time: Fri 22 May 2026 04:08:20 +0000
ROA not before: Fri 22 May 2026 04:03:20 +0000
ROA not after: Fri 21 May 2027 04:08:20 +0000
asID: 144389
IP address blocks: 240a:a6cb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:51:ca:2a:ef:5e:90:aa:9e:82:2e:4f:a1:33:8d:ac:a7:87:22:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:20 2026 GMT
Not After : May 21 04:08:20 2027 GMT
Subject: CN=750305577CC93F49C269233581471F0A94AD8959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:17:2b:93:c8:f7:87:3a:ae:28:26:48:41:
ee:d7:03:73:6a:92:0e:0a:4d:95:c1:4b:ea:bd:29:
53:b5:9c:31:bb:c1:0f:90:b1:58:55:2b:75:6f:d2:
a4:e2:3e:f5:52:08:54:42:7b:21:1d:6e:5f:71:be:
b3:73:28:2e:4f:75:8c:ed:0b:66:9d:7a:39:59:f0:
17:76:6c:81:5c:57:4f:dd:7c:e5:b3:cc:bb:7e:f8:
7f:1a:6a:e6:ed:c0:15:51:50:e6:87:37:2c:57:67:
79:1c:9c:e0:76:2b:2e:47:8a:82:20:54:39:6a:4f:
e7:85:51:e3:c9:2f:2a:4e:4e:09:dc:ba:83:32:e9:
21:ec:58:ee:85:66:01:5c:b1:dc:e1:b1:9b:fd:72:
46:f5:a6:a6:a1:b6:f2:d1:ff:02:90:ac:e3:ad:56:
57:5f:19:1a:f9:64:46:62:18:8c:ba:6f:eb:5e:85:
5a:2f:15:b1:cd:7b:25:bf:f4:17:bf:be:cc:48:b1:
eb:24:0d:6a:86:44:b4:4f:88:02:e4:1f:3b:37:4e:
45:36:41:df:8d:ca:d3:09:cf:89:da:6d:68:c3:a5:
bf:eb:eb:9b:28:7e:29:ab:25:fc:6f:4e:42:d1:42:
ef:63:58:f2:6b:b2:67:75:89:4e:89:c6:8b:c8:17:
97:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:03:05:57:7C:C9:3F:49:C2:69:23:35:81:47:1F:0A:94:AD:89:59
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144389.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6cb::/32
Signature Algorithm: sha256WithRSAEncryption
32:61:99:aa:cd:37:07:e4:8a:e2:91:08:97:13:92:13:4d:3b:
ef:2e:6d:2f:3d:19:30:44:ff:e3:c6:ec:9d:b5:ed:32:ca:14:
37:33:0b:67:e5:fd:78:82:d6:a0:bb:a4:61:03:89:8c:7a:f3:
78:42:51:aa:ed:96:08:c5:24:a7:24:c3:4a:36:ea:72:68:b5:
56:d0:a6:10:f8:89:29:b8:bd:59:20:d0:34:fb:22:0a:90:40:
e7:3c:32:c3:1e:c9:95:54:71:00:0d:b5:c7:dd:9d:e1:e5:9d:
c3:b7:97:54:b5:1a:3b:76:50:29:87:4c:7b:35:2e:93:25:02:
a5:14:7c:6c:37:58:84:f8:0d:fd:48:91:a8:bc:53:ed:b2:61:
c0:cf:ce:c2:92:c1:f8:0d:3e:75:a5:9c:e3:a2:f4:34:1a:cc:
26:63:a4:e6:95:88:e6:6e:9e:c9:46:e7:04:33:37:ab:63:7c:
8b:03:58:3d:db:97:6b:31:28:5c:08:4e:eb:03:ec:a7:be:45:
19:e5:c4:bd:d4:91:ef:20:01:67:36:6c:4d:5a:b3:b1:9b:04:
bb:a3:54:d4:9f:cf:59:a6:0e:9f:43:f6:7a:9d:1e:4a:50:fb:
c3:c6:3b:af:59:f8:de:d0:9e:68:da:b4:33:36:36:e6:dc:ab:
9d:d8:55:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:49 2026 by rpki-client