Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144418.roa
File: AS144418.roa (raw, json)
Hash identifier: u0hRlWpwIvYbrfUKOV7ieJ2h9abc2WpkhpUnuPSLgBQ=
Subject key identifier: 60:85:42:6E:89:5C:90:27:83:E3:D0:77:3D:50:52:2A:D5:A5:E7:B4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 70370C4CD5266A64799BF429A77E1637B12D356A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144418.roa
Signing time: Mon 25 May 2026 01:51:19 +0000
ROA not before: Mon 25 May 2026 01:46:19 +0000
ROA not after: Mon 24 May 2027 01:51:19 +0000
asID: 144418
IP address blocks: 240a:a6e8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:37:0c:4c:d5:26:6a:64:79:9b:f4:29:a7:7e:16:37:b1:2d:35:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:19 2026 GMT
Not After : May 24 01:51:19 2027 GMT
Subject: CN=6085426E895C902783E3D0773D50522AD5A5E7B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d3:4b:01:f7:83:80:a5:23:73:19:3b:64:ef:
55:b3:d3:8c:c2:fb:30:c3:f3:71:45:c8:57:e6:54:
42:d9:a9:b1:8a:16:37:dc:c1:07:c8:d0:0a:9c:5b:
e6:1c:48:2f:96:2c:31:30:b6:16:b5:9a:93:e3:40:
e6:99:ea:44:27:37:10:2f:f7:4d:00:da:75:79:3e:
88:8f:1a:59:69:95:9b:02:7c:1d:c3:c3:7c:7f:12:
ff:df:cd:3a:0d:ab:83:52:f3:85:9c:16:c5:e0:c0:
e8:01:56:6d:43:c8:9b:1a:ca:2a:46:2b:a6:66:6d:
25:79:b4:4b:6d:ad:12:77:c5:85:a9:7e:df:20:5c:
53:88:8b:b6:93:4f:72:3a:dc:fa:78:fd:cf:7e:ac:
c2:f5:01:0b:38:cd:8b:a0:56:8f:f2:28:ed:ea:c7:
39:06:a1:8c:6a:e0:d7:b8:96:1b:5c:36:0d:19:81:
58:cf:58:4d:b7:b3:6e:b4:ba:13:4d:2f:3e:5a:38:
40:b8:ff:6e:f7:cf:9d:9b:80:f5:7d:72:ba:e8:03:
33:02:1d:af:16:ed:e0:45:16:9f:1f:d3:43:d9:1a:
91:98:e9:8a:87:84:38:0c:00:fc:bd:bf:39:ff:37:
70:e8:a6:f4:1b:30:0c:1a:52:5d:6f:52:bb:9c:a1:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:85:42:6E:89:5C:90:27:83:E3:D0:77:3D:50:52:2A:D5:A5:E7:B4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144418.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6e8::/32
Signature Algorithm: sha256WithRSAEncryption
43:31:b7:79:ac:aa:39:cc:13:e3:61:db:8d:42:fb:f5:c1:6d:
3b:21:58:14:56:81:2b:4f:ae:77:e0:b3:42:87:94:21:07:0f:
8f:98:b0:36:0e:7d:63:cf:55:bb:ed:65:04:c3:fe:a9:f8:bf:
66:c2:f3:73:0d:bf:ed:87:65:ab:75:c5:66:6a:0a:e9:ed:de:
7b:2d:3a:6e:be:cf:f2:49:ed:bb:2b:50:c1:86:46:e8:99:73:
ee:13:83:32:0c:54:da:99:f0:28:f8:ad:d9:98:72:7e:e7:7d:
90:3b:e4:15:6e:24:cf:68:88:ba:6f:d4:39:84:4d:37:19:fe:
da:1e:3a:a5:26:9c:40:04:c8:8d:29:2b:e2:0b:68:2a:db:02:
27:a5:f9:c2:b9:45:5d:63:77:43:b6:54:2f:24:16:32:3d:78:
87:f1:10:c1:9e:7b:f8:ed:ee:07:03:fe:fb:63:12:60:d7:60:
2b:96:bb:98:1b:a5:67:9c:92:3f:ae:d7:5e:fd:e1:84:9e:8c:
57:b8:b9:8f:a1:3b:bb:69:a6:61:b7:c7:35:37:c5:ee:50:e3:
9e:6c:a8:2d:9e:92:47:54:6b:f6:f5:32:d1:7c:5b:fa:22:81:
1a:5d:a0:af:26:86:1b:00:70:10:30:55:09:d7:05:3d:94:ec:
a0:11:27:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:08 2026 by rpki-client