Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144428.roa
File: AS144428.roa (raw, json)
Hash identifier: 6hiq/OXiPhEiLAOEae3EdAEFLPvJRg/nBogpKQHmcOo=
Subject key identifier: 73:26:A5:15:7A:A3:5D:F2:A4:28:67:1C:19:75:2C:4F:7E:CB:F5:35
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 345433EE0A7AF1A81BB15A337DA33A82DB3A434A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144428.roa
Signing time: Mon 25 May 2026 06:49:15 +0000
ROA not before: Mon 25 May 2026 06:44:15 +0000
ROA not after: Mon 24 May 2027 06:49:15 +0000
asID: 144428
IP address blocks: 240a:a6f2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:54:33:ee:0a:7a:f1:a8:1b:b1:5a:33:7d:a3:3a:82:db:3a:43:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:15 2026 GMT
Not After : May 24 06:49:15 2027 GMT
Subject: CN=7326A5157AA35DF2A428671C19752C4F7ECBF535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e4:0e:7b:d8:a0:cc:ec:89:21:97:e4:35:17:
5f:ea:f9:bb:59:c6:52:da:c6:11:57:b9:46:fe:a8:
e1:14:f0:18:bf:33:a9:3c:b2:a1:9f:58:b7:3c:a3:
40:79:39:ab:92:0e:4a:3f:ce:92:70:d7:5f:12:48:
cc:e3:f5:b7:ea:6d:64:f7:64:f2:7c:fe:05:76:a9:
27:5d:f3:ca:a6:92:24:f4:94:fb:e4:d8:3d:e8:81:
11:e6:f0:0d:c9:ae:df:41:2a:ec:fa:bc:9b:95:c8:
0c:4c:31:ab:3c:2a:e2:7c:74:b3:2e:4d:43:3b:75:
b0:1e:29:4f:87:55:1a:71:63:b4:d7:e7:1b:7f:41:
29:f1:19:46:7c:ed:14:62:01:b6:13:9e:d3:49:c2:
48:0f:c4:cf:fa:68:05:63:85:9d:89:70:87:1e:db:
2f:43:7d:ba:43:b3:b7:06:60:d6:54:17:8b:e8:1c:
ef:55:46:af:11:7c:23:8b:10:22:97:71:5f:b0:96:
42:4c:92:43:14:35:28:77:c6:c4:b8:64:d9:80:7d:
9f:e8:6b:b9:04:77:e9:69:b3:16:a3:53:97:6a:34:
76:8f:3b:1f:a0:c5:cc:e7:fb:c3:23:f1:c2:41:b7:
08:74:35:db:d1:0e:e5:87:02:6f:fd:8a:f5:e0:37:
15:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:26:A5:15:7A:A3:5D:F2:A4:28:67:1C:19:75:2C:4F:7E:CB:F5:35
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144428.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6f2::/32
Signature Algorithm: sha256WithRSAEncryption
34:f1:f4:ad:55:cb:d3:1b:62:a0:25:2c:7a:8a:dd:d4:74:a1:
25:30:bf:ca:5b:50:b8:f8:71:a6:9c:30:e3:2c:c6:2a:9c:27:
d5:36:79:51:04:c8:34:ff:66:ac:7f:97:63:2a:b6:5d:b3:92:
68:3b:4b:fb:b6:00:14:96:85:13:dc:4e:90:13:ef:2c:2a:a7:
1d:3e:72:3e:9a:78:dd:18:84:0d:3a:da:52:42:bd:24:02:72:
b8:98:c3:38:1c:cb:78:fb:1f:36:cf:05:4d:0b:00:e1:a0:99:
a7:f7:b7:a8:cc:f9:3e:37:7e:c3:00:9b:b5:25:45:8a:d0:22:
50:ab:62:a8:e9:17:b3:1c:1e:01:25:d3:ff:31:9e:fd:d8:51:
b8:5a:d0:8e:0d:69:be:cf:46:00:ee:4c:35:ba:9c:58:3f:d0:
79:99:cc:fc:02:f4:da:9d:8d:ae:6c:df:c3:97:cb:62:e5:72:
b1:ef:72:72:e5:72:54:8e:57:4a:e6:a3:e8:e6:14:bb:f0:6d:
d0:34:80:6d:f0:3b:e2:bb:ec:bf:75:77:0b:b9:da:de:e7:c8:
45:5f:6d:01:d2:f4:2d:ff:d4:d4:ed:14:ac:41:79:d1:d9:f3:
e6:35:fa:97:76:c8:fb:90:9e:a6:57:cd:dc:03:0a:96:bf:ea:
0f:dc:88:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:21 2026 by rpki-client