Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144431.roa
File: AS144431.roa (raw, json)
Hash identifier: trD0EELxxEEdN6QB2hEdpyuSZ/DHoULDYUYiXTPEyoY=
Subject key identifier: D2:68:72:8A:DA:2A:DA:CE:6C:9D:4A:B2:B7:49:34:14:4E:71:2B:A9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2B6E2D4AE81D09BAF759AEB5317B410518C5E5D0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144431.roa
Signing time: Mon 25 May 2026 06:28:48 +0000
ROA not before: Mon 25 May 2026 06:23:48 +0000
ROA not after: Mon 24 May 2027 06:28:48 +0000
asID: 144431
IP address blocks: 240a:a6f5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:6e:2d:4a:e8:1d:09:ba:f7:59:ae:b5:31:7b:41:05:18:c5:e5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:48 2026 GMT
Not After : May 24 06:28:48 2027 GMT
Subject: CN=D268728ADA2ADACE6C9D4AB2B74934144E712BA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a0:ab:f0:0e:69:b4:cb:0b:d8:29:92:32:99:
71:f8:a9:eb:59:02:df:d7:6d:0a:67:24:39:63:cc:
97:61:a0:f3:3b:b8:36:eb:5e:09:ea:69:d9:f7:4f:
45:e8:21:59:c2:0c:14:ee:7f:a6:6d:b8:c9:0c:bd:
59:46:e8:51:d4:a2:6a:97:0d:e7:a6:e5:50:a8:0e:
73:d8:98:5c:0b:40:57:f6:87:d1:05:61:9d:a1:ff:
50:b6:81:1e:f6:cd:a3:9c:15:8c:01:e8:0d:04:8c:
6c:36:a4:09:5d:6b:86:5a:5c:0e:ca:b1:f5:dd:b2:
81:bf:34:70:08:db:08:2e:73:cb:53:b2:4e:08:7c:
f7:f9:7d:da:b1:cf:92:20:b5:56:89:31:84:41:22:
1b:73:e5:bb:c1:73:ea:05:8d:2d:9b:0c:09:7f:04:
3c:c8:af:e2:60:31:e1:da:77:1a:80:d1:4c:bd:0f:
91:71:4b:49:a6:92:39:15:89:b0:f9:9a:b9:9c:89:
bc:b4:45:f8:83:e0:9c:d9:47:27:f1:c2:e6:fc:1f:
ac:e3:f3:14:0e:90:0e:6a:85:01:38:83:89:7a:0e:
56:8b:f0:6d:a4:1c:7e:09:0b:3e:46:e7:d9:47:74:
a7:11:6e:43:b9:e2:10:cc:04:c8:38:09:68:e4:14:
6b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:68:72:8A:DA:2A:DA:CE:6C:9D:4A:B2:B7:49:34:14:4E:71:2B:A9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6f5::/32
Signature Algorithm: sha256WithRSAEncryption
43:e5:5a:a8:2d:91:ea:55:00:e0:ed:86:a9:c4:71:08:e6:92:
d6:eb:d2:e6:3e:a9:9a:64:6b:03:06:41:44:39:d5:8d:ef:17:
dc:92:86:52:18:30:09:15:55:2a:0d:b6:54:be:87:a4:2a:e3:
96:12:0f:d5:de:fd:74:6d:2a:7b:92:97:0e:bc:21:55:ab:96:
82:cd:11:ce:ab:14:a5:bd:1b:ac:52:a8:9b:e2:e2:f5:b6:05:
42:f0:89:b4:69:fb:be:46:6f:8f:fa:9f:20:94:5f:90:dc:ab:
b7:af:23:af:78:63:42:44:07:e0:1b:9f:ca:36:6b:f7:e0:2b:
a9:11:74:cc:25:7d:fb:ef:c7:93:11:a7:d9:ec:7d:bf:32:40:
17:91:54:26:ae:20:c8:53:78:85:15:08:37:1e:e9:6d:ba:0d:
2b:c5:b7:11:9e:f3:fe:c5:23:73:3f:bb:83:c1:91:58:b3:56:
bd:65:fd:68:38:81:a9:6a:1d:4d:5f:d1:c2:ed:c1:5c:b1:e1:
17:2a:7b:10:a4:29:38:ae:c4:dd:7e:22:ea:ca:0e:70:88:a3:
1b:ca:68:49:d6:42:01:68:06:2f:e2:07:6c:d5:d1:69:56:6a:
d4:b5:99:6c:30:a6:6c:9c:05:1a:29:7e:0c:1f:fe:e5:fc:53:
41:f3:61:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:52 2026 by rpki-client