Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144392.roa
File: AS144392.roa (raw, json)
Hash identifier: /5jEEM5PkLI+zgYFqfKJxd70BXLi0F0MOHM2rLhHu34=
Subject key identifier: FE:69:67:03:81:8D:99:36:1A:ED:79:B2:63:28:C8:08:7F:5C:75:EE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 314D8F05FBC32ADCB97D4D7C0A15A2ED9BA778E7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144392.roa
Signing time: Mon 25 May 2026 03:19:09 +0000
ROA not before: Mon 25 May 2026 03:14:09 +0000
ROA not after: Mon 24 May 2027 03:19:09 +0000
asID: 144392
IP address blocks: 240a:a6ce::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:4d:8f:05:fb:c3:2a:dc:b9:7d:4d:7c:0a:15:a2:ed:9b:a7:78:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:09 2026 GMT
Not After : May 24 03:19:09 2027 GMT
Subject: CN=FE696703818D99361AED79B26328C8087F5C75EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:f0:1c:f9:8e:5b:91:f8:d6:f1:79:67:c0:
ba:e5:a0:10:3e:12:a1:a3:17:be:25:28:a7:1f:ec:
49:e5:c2:03:2a:38:27:87:e1:f1:a9:14:6b:15:62:
05:b5:fe:05:b4:5e:f5:9e:ed:05:d9:a8:17:a3:85:
3d:7d:97:2c:1d:61:24:3c:37:28:7c:19:81:92:35:
da:8e:96:0b:99:7a:61:1e:d3:79:0d:84:9a:4a:41:
84:e7:5b:75:43:13:2d:ad:cb:8f:aa:06:22:c8:e5:
0a:f3:0a:de:55:4b:86:a0:18:72:03:6a:1f:1a:f9:
b1:49:63:9a:87:ca:93:30:02:de:69:2a:73:39:3f:
24:e3:93:96:81:f6:c6:42:f0:0a:28:4a:14:51:22:
21:03:bc:49:70:b0:f7:b2:0c:74:24:4d:60:31:ee:
95:45:5f:6c:ed:e0:8b:48:79:0e:c5:f2:9e:af:46:
e3:df:66:4a:7e:a5:b7:11:41:a3:39:ae:6d:f7:5b:
6c:3d:1a:33:05:47:50:20:3d:2c:d2:3a:f6:3d:ec:
aa:e1:a8:d5:59:7e:fe:ad:d5:ce:d6:a7:e9:b1:c3:
c1:54:7d:e2:5f:e8:e8:89:bd:84:90:2c:09:79:78:
61:31:d9:29:f3:4f:16:ca:97:7a:7e:54:e5:f3:bb:
d8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:69:67:03:81:8D:99:36:1A:ED:79:B2:63:28:C8:08:7F:5C:75:EE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144392.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6ce::/32
Signature Algorithm: sha256WithRSAEncryption
a2:f2:5b:bc:13:10:12:dd:e6:5e:07:34:b7:9b:0c:b0:c9:14:
b8:15:47:59:d6:52:f2:49:30:0c:9a:a1:a8:2e:bf:f6:58:ef:
a9:53:37:18:44:02:10:96:bc:ec:c4:c9:f0:73:65:c6:b1:50:
47:0e:19:2c:71:a6:7d:b2:7f:ef:53:ed:13:aa:4a:96:74:3e:
a3:c3:c2:33:95:d8:06:70:9d:34:5b:92:e7:ad:f3:8c:57:50:
16:b4:c0:a2:38:65:ac:94:e1:73:a9:43:69:d4:66:b4:c1:87:
9d:87:5a:c2:15:5f:16:54:46:81:18:7c:f6:95:f3:9f:6a:46:
81:e4:95:13:28:28:22:32:8a:ab:e0:d5:c1:51:bd:0c:e2:23:
70:83:3a:20:e7:06:bb:a5:b5:f7:ad:61:c8:c2:ea:94:56:dd:
6e:22:7f:f8:64:69:10:5d:78:1b:7a:78:9c:19:41:ad:a3:be:
89:d6:29:94:7d:bf:7e:41:7d:ad:9b:47:8e:25:5a:aa:6a:ca:
0c:4d:e0:41:95:46:66:80:36:ee:7b:56:ac:1e:f7:64:0c:29:
db:29:2f:c2:1e:a1:50:8a:ac:9a:fd:23:10:82:fe:4c:03:5a:
97:74:08:f3:ee:46:1c:0c:cc:aa:5c:c6:e0:03:5c:9c:b2:34:
c9:62:ac:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:10 2026 by rpki-client