Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144415.roa
File: AS144415.roa (raw, json)
Hash identifier: b4ga911Oa/3XW80dE8p3DMShSC/zHQJx6KSvHAMGcQA=
Subject key identifier: 4B:03:6C:D0:BD:91:A8:1C:64:E3:A1:FA:A0:24:4A:FF:42:ED:F2:91
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 28005B7FA4DC486C7EB3BC3D3F3E36C44600DE11
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144415.roa
Signing time: Mon 25 May 2026 01:20:24 +0000
ROA not before: Mon 25 May 2026 01:15:24 +0000
ROA not after: Mon 24 May 2027 01:20:24 +0000
asID: 144415
IP address blocks: 240a:a6e5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:00:5b:7f:a4:dc:48:6c:7e:b3:bc:3d:3f:3e:36:c4:46:00:de:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:24 2026 GMT
Not After : May 24 01:20:24 2027 GMT
Subject: CN=4B036CD0BD91A81C64E3A1FAA0244AFF42EDF291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:27:d5:00:9a:3b:0c:f7:4b:57:16:ad:6e:
9b:3f:0e:5f:85:a2:d3:7a:0c:af:b8:56:0c:40:46:
1a:38:8f:06:5b:51:27:52:f4:da:b7:97:06:4c:ac:
81:7a:5d:ca:cb:d6:ef:3c:1f:ec:f2:20:d0:20:62:
d0:ca:e4:81:ea:39:31:fa:88:e1:58:9e:9a:cf:8f:
39:74:01:72:f8:db:05:df:47:7e:13:00:d1:ad:76:
3b:e4:44:c3:6d:6a:75:ec:08:42:db:cb:15:61:cf:
c1:50:cf:64:71:c7:b3:cd:b2:6a:d5:98:8c:53:8d:
44:30:4a:19:91:6c:f6:3e:03:09:e2:cb:d2:91:ea:
83:39:32:8b:d9:ba:e8:04:5c:4e:11:9f:57:bb:93:
be:cb:34:ce:7b:b8:f9:72:2d:63:7f:b6:3d:4a:3b:
86:99:89:ee:ee:b2:53:e1:2f:8a:62:20:74:8b:1a:
f2:99:d4:83:a0:e6:25:c5:29:5e:e9:f4:63:b4:52:
8d:05:45:04:23:0f:15:fa:98:7d:38:eb:22:e5:ba:
fc:bf:cc:61:02:3e:1d:b6:10:25:64:fb:54:be:a6:
3f:b4:00:3c:9d:93:20:fa:6f:e0:9f:eb:27:9a:60:
42:7c:f0:d0:a9:fd:7d:2a:db:28:85:d0:de:d7:44:
b4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:03:6C:D0:BD:91:A8:1C:64:E3:A1:FA:A0:24:4A:FF:42:ED:F2:91
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144415.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6e5::/32
Signature Algorithm: sha256WithRSAEncryption
bb:7f:4a:b6:08:8c:5d:2b:06:c1:e9:5b:6c:c3:27:1b:ef:0a:
9a:46:c5:54:29:4e:0a:c8:dd:1f:d7:80:c6:16:c5:c6:82:c0:
8f:c0:d2:80:b7:ea:4d:99:f1:6f:53:30:24:b2:15:6c:d2:4d:
76:f7:3d:78:b4:42:75:67:c5:2c:02:76:b4:53:4c:4b:27:7c:
a9:c8:d7:b4:6e:7f:c9:cb:36:9c:1d:ce:08:9e:44:6f:82:83:
6d:8e:57:de:bb:0b:28:22:15:2f:b3:02:60:60:a2:8e:85:6a:
f7:ba:03:ac:90:5c:53:cc:8c:48:56:7a:aa:b6:62:f8:aa:4d:
06:33:9d:be:c8:b8:25:3b:e2:38:f2:7e:c4:34:09:0a:2b:35:
3b:32:91:df:19:2d:f7:ee:51:56:98:a1:0c:8e:b0:db:0f:3a:
2a:86:66:c6:62:be:2d:93:02:52:d7:04:68:fe:2d:ab:f3:08:
ab:09:1b:34:72:4c:84:fd:c0:c3:ff:89:d0:dd:e7:37:9a:13:
04:89:9e:60:d9:e4:af:51:b7:7b:a9:9c:78:61:7e:f8:72:2b:
13:c5:76:db:84:de:d7:9a:df:ff:17:c6:d7:a4:96:5e:6b:5c:
74:67:2c:bb:a9:e4:59:7e:15:71:7b:04:f9:97:c6:ee:69:68:
2d:8a:d7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:39 2026 by rpki-client