Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144395.roa
File: AS144395.roa (raw, json)
Hash identifier: TSG+snKfpxq7sTbdzySo60gt68VpPl8qBzycAdRRelg=
Subject key identifier: 58:8A:B4:7E:26:A3:37:CB:E7:54:2F:90:6D:59:9D:1D:CB:B1:FA:E5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1017E5A0382C06EF966884F85F3BB8A4915D4615
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144395.roa
Signing time: Mon 25 May 2026 01:38:09 +0000
ROA not before: Mon 25 May 2026 01:33:09 +0000
ROA not after: Mon 24 May 2027 01:38:09 +0000
asID: 144395
IP address blocks: 240a:a6d1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:17:e5:a0:38:2c:06:ef:96:68:84:f8:5f:3b:b8:a4:91:5d:46:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:09 2026 GMT
Not After : May 24 01:38:09 2027 GMT
Subject: CN=588AB47E26A337CBE7542F906D599D1DCBB1FAE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d8:42:e7:76:fd:8f:fc:3c:85:05:d2:f0:6b:
29:68:57:92:18:b2:a3:23:a9:96:23:2d:4d:8f:af:
1f:1a:38:aa:cd:0a:42:3c:04:68:5c:fb:5a:fa:d8:
38:25:40:d3:60:08:91:cb:ad:eb:b1:4e:18:17:9b:
9c:2d:cc:34:23:35:32:a3:16:93:fa:af:7c:b2:3e:
7c:c2:a9:2a:41:8b:d8:ae:96:cc:0c:a0:61:6c:88:
d1:9c:db:e3:98:63:08:e6:61:4f:60:95:53:76:e3:
99:91:93:4a:79:8f:24:26:76:d0:34:51:79:22:68:
90:4b:b1:69:c7:b9:f3:0c:07:81:8e:96:8e:c1:b7:
6c:27:4a:a9:19:64:91:cf:8a:7b:43:89:fa:1c:c9:
7d:0a:07:f0:d3:fb:e7:90:46:fb:bc:e3:1f:46:6e:
0c:ad:29:35:65:5a:e0:36:1c:30:e7:b7:2a:73:ff:
e3:55:4b:12:81:46:d9:b8:64:6a:a4:56:9b:d9:85:
f0:80:f2:6e:9a:b9:d8:e7:42:03:7f:ba:d1:fb:99:
67:f4:24:75:f9:9e:63:51:2b:d6:81:f7:fd:ba:4a:
71:0e:7d:db:8c:f0:85:98:25:7a:0c:a5:16:a7:d6:
2a:e3:ff:64:ac:14:29:d9:de:1d:63:50:53:ae:19:
04:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8A:B4:7E:26:A3:37:CB:E7:54:2F:90:6D:59:9D:1D:CB:B1:FA:E5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144395.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6d1::/32
Signature Algorithm: sha256WithRSAEncryption
0f:be:86:88:68:78:00:78:71:88:49:f8:1d:9f:e4:8b:84:5b:
c8:12:aa:0e:2c:10:2f:4f:f8:d2:17:37:9b:44:75:d6:5e:b9:
e6:28:6e:c4:08:07:bb:24:a5:cd:8e:5d:14:7b:9f:a0:8e:d8:
74:f2:a2:e5:6f:a2:c7:8f:20:e5:84:43:e2:80:79:ef:f2:c0:
30:c2:b9:f1:7e:de:87:7d:56:88:20:d0:02:be:d8:78:c8:3e:
0f:9b:67:94:50:14:29:f5:97:7c:c4:73:1e:ee:c2:b2:0a:0b:
c6:9d:49:52:32:19:e7:e1:a5:9c:f3:c1:04:0a:e4:fa:12:ca:
54:d8:d4:96:32:d1:d0:7c:08:89:cc:98:21:f8:7b:df:f4:0b:
60:50:1e:2c:24:2d:1d:f6:9b:9a:1e:c5:ce:4e:96:c9:d0:08:
38:bf:c8:34:1b:65:ad:e1:56:c5:6b:72:1b:7f:7b:11:a4:74:
d4:23:34:41:bb:b4:ed:01:46:1b:2e:3f:42:d9:10:01:69:46:
d6:67:55:56:33:a5:75:a8:4d:61:63:1f:f1:a7:67:69:ec:6b:
42:f0:cf:db:0c:4e:19:a8:89:61:10:1a:ec:08:3e:e4:70:4d:
5b:3f:f7:1c:8c:c4:35:54:82:a2:08:9d:8d:b9:0b:4c:22:b9:
76:7d:91:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:59 2026 by rpki-client