Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144396.roa
File: AS144396.roa (raw, json)
Hash identifier: vK0Ls7YcWMUfNceZ1k3DD9YB0ZiQaJDxB9x6PKP4YoY=
Subject key identifier: 35:FF:ED:67:28:83:04:61:E2:A5:D7:84:5A:16:E9:D1:B0:07:06:85
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3966BC089BB6248AF8C21D6C20ABE1F6066938AF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144396.roa
Signing time: Fri 22 May 2026 07:24:23 +0000
ROA not before: Fri 22 May 2026 07:19:23 +0000
ROA not after: Fri 21 May 2027 07:24:23 +0000
asID: 144396
IP address blocks: 240a:a6d2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:66:bc:08:9b:b6:24:8a:f8:c2:1d:6c:20:ab:e1:f6:06:69:38:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:23 2026 GMT
Not After : May 21 07:24:23 2027 GMT
Subject: CN=35FFED6728830461E2A5D7845A16E9D1B0070685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c4:40:69:59:57:c9:72:3b:df:0d:54:03:f9:
e8:40:73:d8:35:52:27:3c:9b:66:c8:d3:d8:7f:fe:
f0:69:f7:ea:45:af:e0:34:ef:1f:c6:d5:17:05:e5:
f9:69:2c:47:22:20:26:05:3a:7c:cc:21:c9:04:6d:
1d:cc:13:dd:c4:3a:e8:61:fb:15:32:80:e5:70:c6:
47:c9:ea:12:e6:8c:19:86:69:58:fe:f6:0c:5f:56:
79:78:e2:d9:25:74:9f:4c:36:a8:63:7a:55:c6:ed:
79:ef:a3:bf:25:e8:e0:9d:38:a0:5f:a7:98:ff:4e:
28:b7:45:c8:3f:e2:c5:2d:72:0b:66:f2:d9:58:88:
67:c7:76:bd:d6:0b:7a:79:64:83:d4:5c:ef:79:62:
fe:1b:b0:12:ed:58:5e:e7:8e:13:09:5c:5d:e2:82:
43:d1:d5:27:dd:70:df:e5:55:8d:ea:00:1d:37:53:
c9:ea:34:90:f6:b6:75:04:f3:be:0b:81:9e:28:ae:
3f:97:e4:ae:f3:20:a8:0e:a9:32:69:6c:58:6f:f5:
af:f5:32:99:0e:72:50:95:e5:84:bb:e2:25:37:d3:
a3:2a:37:64:7b:a7:62:c7:2d:7c:70:24:7e:f7:71:
fc:bd:75:89:d1:ff:2c:30:a6:18:6a:26:87:67:be:
54:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FF:ED:67:28:83:04:61:E2:A5:D7:84:5A:16:E9:D1:B0:07:06:85
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144396.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6d2::/32
Signature Algorithm: sha256WithRSAEncryption
88:48:60:3a:9c:f1:8f:8c:86:70:e9:e0:e7:8f:50:ad:14:61:
96:b2:11:8a:58:19:9a:21:9d:66:96:68:a3:76:32:58:b7:46:
98:77:7d:ad:bb:c6:c0:bd:ce:32:ce:b6:7f:13:bc:bd:f0:d2:
09:e9:b9:02:4f:0d:75:d8:53:70:7a:e9:50:2c:70:a3:ed:23:
9b:a8:b0:13:33:0b:7e:48:17:ab:f3:b3:7a:4d:f8:86:0a:ec:
d2:ad:60:38:42:48:19:22:56:40:76:3f:8f:24:69:be:e6:33:
d2:93:6e:a7:ba:7d:09:e6:36:7e:0a:bd:f1:dc:50:dd:cc:6a:
12:a1:51:29:dd:d7:fd:76:55:c5:e9:36:b5:1f:52:0a:b9:d9:
41:e7:18:29:93:e3:c5:76:d8:33:30:08:f6:48:88:6b:1c:39:
0b:64:68:3d:05:0d:89:f2:18:a0:88:09:9f:b3:40:4f:42:9c:
bb:b6:e7:ee:f2:1a:fe:20:8d:dd:6e:c3:a6:74:9f:3b:d7:83:
c8:c6:03:90:9a:5a:eb:eb:f3:ac:22:7e:9e:25:27:db:c6:db:
5f:ad:5e:15:da:62:bf:a5:24:3a:ef:15:ca:5e:24:b9:87:ee:
4c:0a:50:04:ac:31:e0:a5:a5:05:5f:96:c9:16:68:65:c2:f8:
89:ad:a8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:55 2026 by rpki-client