Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144393.roa
File: AS144393.roa (raw, json)
Hash identifier: 0jTDrTEOmbwxQQwI5I/e4MzYwAElU40ri4hwQKe/Biw=
Subject key identifier: FA:52:67:C8:3A:44:AC:0A:59:EC:00:C0:4C:C0:9F:2C:3A:0A:70:C7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 37739554C57B2B9431C55455C0B0661A50BB4A9B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144393.roa
Signing time: Fri 22 May 2026 06:45:58 +0000
ROA not before: Fri 22 May 2026 06:40:58 +0000
ROA not after: Fri 21 May 2027 06:45:58 +0000
asID: 144393
IP address blocks: 240a:a6cf::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:73:95:54:c5:7b:2b:94:31:c5:54:55:c0:b0:66:1a:50:bb:4a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:40:58 2026 GMT
Not After : May 21 06:45:58 2027 GMT
Subject: CN=FA5267C83A44AC0A59EC00C04CC09F2C3A0A70C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:b0:86:e6:5c:ce:ee:7a:9b:31:5a:8e:64:
83:9c:c4:4b:38:f3:71:e0:2c:05:d1:65:c1:81:5c:
01:54:e7:45:c2:65:d9:5b:a4:2d:2f:ab:42:19:5a:
b7:65:74:d3:fd:35:ed:b7:ef:28:ef:a2:24:9e:f6:
70:cf:01:2c:af:98:a0:0e:50:be:8d:bf:13:e2:f7:
88:90:4e:e0:c2:d1:6c:c7:8c:38:c4:1d:38:1e:17:
6e:56:e9:45:fb:43:4f:76:11:4f:d8:55:69:42:96:
c1:01:d3:6b:0e:9a:3a:c8:21:0e:93:23:ea:0a:e4:
01:8b:45:50:29:29:02:f7:9a:51:20:e0:f0:0a:67:
a2:a9:11:b8:0c:4a:ff:16:8b:53:00:4b:37:33:af:
a2:e6:6c:3e:83:66:c7:1e:7d:f0:c7:3d:fe:0b:48:
e7:9d:d1:36:6a:83:d9:4f:bc:81:f1:14:6d:d4:58:
4a:fd:63:38:04:f2:e3:e4:bc:b2:13:2d:30:5e:ae:
c3:93:5c:4b:c2:a9:fa:b1:f5:77:03:1d:9f:db:35:
a2:fa:e9:49:71:9d:41:01:2a:fb:d3:82:af:df:61:
70:c1:b4:ee:81:6b:bd:ce:f5:7a:4b:76:34:39:cd:
54:36:bf:db:d3:32:13:23:51:cd:22:4a:a1:71:3d:
1f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:52:67:C8:3A:44:AC:0A:59:EC:00:C0:4C:C0:9F:2C:3A:0A:70:C7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144393.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6cf::/32
Signature Algorithm: sha256WithRSAEncryption
4f:86:e9:b6:5a:a1:31:41:1d:e6:6b:58:14:37:08:45:01:e7:
88:ce:6f:df:70:6c:ad:e3:6b:ee:b0:39:26:e0:79:b8:fd:9b:
38:4b:32:4f:57:b8:c4:6e:d6:40:f4:b1:98:49:74:c4:45:d5:
ef:58:2a:c3:d2:68:03:2d:a8:2c:f1:ca:2a:aa:80:82:ff:dc:
4c:cb:ed:3b:01:4e:dc:12:6b:fc:f5:04:ee:24:d2:5e:8e:1e:
c7:9c:37:32:27:03:b0:1d:11:4c:54:c4:e2:d6:4d:b1:3e:18:
7d:8f:1b:41:af:62:9d:38:c5:56:44:e3:41:43:1c:85:ae:bb:
d2:8c:8e:1a:3c:f7:2a:9d:1a:e9:aa:50:49:ce:7c:16:2a:58:
f9:5c:25:4b:90:a5:52:60:d7:0a:d4:81:f9:a7:e9:cf:75:14:
ff:ef:5a:83:5d:af:f3:6d:69:7a:19:22:ed:78:65:ba:1c:93:
43:ea:67:5d:b6:76:a1:35:58:ff:cb:9e:99:f4:95:df:c2:91:
15:a2:61:f4:7d:aa:20:d8:50:15:eb:ba:96:ee:45:3a:95:76:
be:50:d3:76:bb:27:d1:d5:8f:82:64:6f:4e:10:2b:3b:65:e0:
01:57:71:d6:54:1e:85:3b:8f:8d:5b:e7:16:55:e7:2e:1a:8f:
8f:bd:9d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:41 2026 by rpki-client