Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144394.roa
File: AS144394.roa (raw, json)
Hash identifier: 36KwzmHb0te2AUDK8ifmugMIj7TN6LNMQBoO4c1z0OU=
Subject key identifier: EA:F1:C0:36:E9:A1:C3:EF:DB:9E:61:D7:D0:25:18:8B:73:4D:03:91
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3CCFD528127CB568C31436D75EB05731EB74A17F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144394.roa
Signing time: Fri 22 May 2026 07:32:14 +0000
ROA not before: Fri 22 May 2026 07:27:14 +0000
ROA not after: Fri 21 May 2027 07:32:14 +0000
asID: 144394
IP address blocks: 240a:a6d0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:cf:d5:28:12:7c:b5:68:c3:14:36:d7:5e:b0:57:31:eb:74:a1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:14 2026 GMT
Not After : May 21 07:32:14 2027 GMT
Subject: CN=EAF1C036E9A1C3EFDB9E61D7D025188B734D0391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d7:93:52:6e:4d:f6:96:b3:fe:8a:f3:98:ce:
98:d9:a9:fd:1f:a3:91:a0:6a:7e:65:65:4f:a7:8b:
90:f6:95:d6:d8:e5:1c:74:11:4a:27:7d:d9:7f:65:
f7:83:39:ca:e2:c1:78:a2:72:82:2c:e5:65:7b:bf:
eb:c9:50:63:3f:0b:d4:02:cf:85:7a:f2:c2:74:69:
2c:06:25:17:01:76:c7:fe:1f:79:1a:f8:a7:5f:d6:
dc:f4:a9:87:b8:e9:eb:ff:fd:12:5c:e8:0b:e3:9b:
ff:d6:4e:fa:9d:8b:3b:bf:39:e8:95:3a:25:0e:82:
06:86:9d:76:00:50:57:8e:cc:27:67:ba:be:f7:98:
e2:0a:13:91:b0:2a:d9:b6:0a:4f:af:22:76:52:bd:
61:b7:8d:ab:77:74:55:e8:8f:13:ef:5f:fa:29:68:
30:f0:4c:f2:62:49:9d:47:61:96:44:fe:41:d3:ac:
a8:75:83:4e:90:92:04:16:87:eb:31:76:c7:74:f6:
40:04:88:06:f7:7e:1c:64:39:c3:77:02:62:bd:40:
10:d9:3a:1c:e4:23:a1:13:2b:8b:ae:d2:e0:f4:d8:
25:92:cb:0e:03:ab:d4:01:a4:bc:aa:da:1d:d0:62:
ad:5e:17:9f:c8:24:84:06:ae:e3:f7:de:e3:b9:36:
a2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F1:C0:36:E9:A1:C3:EF:DB:9E:61:D7:D0:25:18:8B:73:4D:03:91
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144394.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6d0::/32
Signature Algorithm: sha256WithRSAEncryption
ad:bc:24:b5:21:81:ba:a5:ca:65:9a:56:27:7a:84:93:8c:38:
82:c2:25:ec:a1:00:fa:1f:d8:3b:9a:7e:9e:ce:e9:a5:ab:05:
07:02:af:bd:c7:9d:3c:6b:0c:3c:05:a0:b5:9e:86:b1:61:90:
ea:c0:f4:eb:a2:7f:63:c1:11:99:d3:fb:89:39:83:fd:48:0b:
58:c8:49:56:ed:6f:0c:7a:11:18:65:0e:a2:7f:24:57:fe:54:
7a:90:a6:7a:3a:5e:85:67:80:cb:b2:1c:61:56:fc:7a:75:7e:
76:9b:b9:28:81:15:cf:5a:be:19:31:c0:b6:24:ab:ab:41:5e:
1c:a6:51:06:f0:c6:3a:26:fd:0d:7e:6c:ec:d8:be:a0:26:0b:
90:71:43:de:3f:91:41:1d:f5:07:de:3a:18:da:7f:15:11:64:
0e:5f:eb:94:45:4d:d9:c9:10:11:ee:e1:2a:94:be:41:b6:76:
5b:ea:28:c4:49:12:66:4a:2e:0e:2e:60:c9:f6:f4:01:c5:2a:
c4:73:2c:20:a7:11:2e:92:ae:84:4e:44:60:ab:1c:60:eb:54:
95:db:b9:f1:98:d2:a9:03:ed:14:0b:65:bb:16:27:2d:81:3c:
0d:15:05:c9:b4:74:ab:ad:cf:4f:84:b8:f1:4e:ed:28:e0:ad:
f1:3a:13:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:04 2026 by rpki-client