Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144432.roa
File: AS144432.roa (raw, json)
Hash identifier: 0qvygAHkWXWbXIr4QnKuo/z/L2/64ru+aaNUfGCdnlE=
Subject key identifier: 22:FC:72:41:1F:45:75:54:93:F9:82:26:EE:95:2E:6C:F3:F1:76:E9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2D98B9F2FD7B6213B1649457062EC9664F252B06
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144432.roa
Signing time: Fri 22 May 2026 06:46:01 +0000
ROA not before: Fri 22 May 2026 06:41:01 +0000
ROA not after: Fri 21 May 2027 06:46:01 +0000
asID: 144432
IP address blocks: 240a:a6f6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:98:b9:f2:fd:7b:62:13:b1:64:94:57:06:2e:c9:66:4f:25:2b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:01 2026 GMT
Not After : May 21 06:46:01 2027 GMT
Subject: CN=22FC72411F45755493F98226EE952E6CF3F176E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:47:78:53:35:54:50:77:f1:13:59:f2:34:fe:
45:98:b5:88:17:61:36:c4:59:f0:3a:88:20:95:ce:
3f:75:c2:cf:49:71:4b:6f:06:cf:c4:59:6c:13:f7:
d8:b7:9f:5d:19:73:48:1a:42:b6:65:9f:03:66:15:
96:91:f3:de:36:fb:ab:76:68:04:51:d6:1d:c3:46:
f8:88:6d:27:f9:85:d6:86:b2:74:b5:ac:7b:ae:a6:
ed:72:3e:5d:c8:e4:2d:15:f0:6f:88:e1:c7:fb:fc:
55:16:7c:6c:30:2e:20:e9:4b:ab:ba:e3:7e:4f:94:
0a:ce:69:06:c8:41:69:88:b9:85:84:47:40:75:48:
d6:6b:12:21:a9:54:1c:03:3f:e1:e9:7c:25:fd:88:
d3:30:38:bc:23:ae:41:96:05:8b:a0:b0:41:db:54:
e5:67:49:06:2e:9a:c0:1d:10:04:7b:c2:c7:30:30:
c5:b4:9d:c7:99:7a:03:26:fe:c6:06:6d:93:7f:a5:
76:6d:03:72:3a:43:a1:df:b5:79:16:25:a5:70:39:
4c:9b:f1:5d:94:e4:bc:52:49:a4:37:30:3b:5a:08:
ca:22:08:bc:b7:9c:37:0e:77:ff:ee:73:5a:3a:ca:
d8:a6:98:49:71:75:3f:74:90:65:2b:7e:3f:ed:d3:
17:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FC:72:41:1F:45:75:54:93:F9:82:26:EE:95:2E:6C:F3:F1:76:E9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6f6::/32
Signature Algorithm: sha256WithRSAEncryption
1e:5e:bb:f8:15:30:e9:bf:e6:76:6f:6b:55:67:74:da:3b:0a:
95:77:5d:8a:77:31:fe:b5:3d:cd:13:f7:16:0d:04:38:bc:4b:
8f:b8:31:9b:bc:dd:d5:b2:0f:96:30:04:72:0e:be:d3:ed:61:
aa:a7:cb:26:20:75:c2:10:0a:e9:5b:95:a9:28:65:69:4f:88:
72:ce:29:c7:69:54:7c:ec:82:d4:90:59:11:90:e9:56:b3:4f:
94:37:70:27:c8:58:45:4a:17:e4:0f:23:c4:1b:d4:44:d4:8e:
75:72:32:1c:41:f4:b9:a5:17:03:a1:f2:67:36:47:ab:ac:46:
7d:6f:8e:1e:b2:76:0b:9f:2b:35:10:e2:99:6e:1b:46:50:74:
32:d3:ab:7b:c9:c5:d6:8c:32:ef:1a:29:5f:5d:3b:43:9b:50:
7f:50:e8:46:63:b2:dd:7a:69:8a:46:f4:8b:fa:63:86:f3:84:
1c:81:c1:f3:f7:b4:9e:4b:6c:d1:57:fc:79:51:00:25:1f:2d:
79:bc:55:22:77:ea:de:f5:1d:2d:76:18:5a:48:8f:ad:a9:87:
fe:e8:1e:3e:1f:11:6b:3a:d1:5f:f2:b1:6d:35:b5:46:c5:3e:
02:8c:ac:35:5c:04:10:2b:03:41:b7:a1:0c:e5:7d:d1:1a:da:
0d:c3:6d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:06 2026 by rpki-client