Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144434.roa
File: AS144434.roa (raw, json)
Hash identifier: ZjY0JLhKDhOha4XhyUub8ESdqJgoy/LIyjHmZonipI8=
Subject key identifier: AE:E1:B3:E0:29:14:72:64:AC:4C:3C:79:03:FA:73:08:43:A8:86:1C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 702F1E4F1136E6029B94EE45F138F5E2D12E585C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144434.roa
Signing time: Tue 26 May 2026 06:30:50 +0000
ROA not before: Tue 26 May 2026 06:25:50 +0000
ROA not after: Tue 25 May 2027 06:30:50 +0000
asID: 144434
IP address blocks: 240a:a6f8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:2f:1e:4f:11:36:e6:02:9b:94:ee:45:f1:38:f5:e2:d1:2e:58:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:50 2026 GMT
Not After : May 25 06:30:50 2027 GMT
Subject: CN=AEE1B3E029147264AC4C3C7903FA730843A8861C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4d:34:25:c1:04:a2:89:ec:47:a9:3c:3b:03:
93:4a:db:8c:0a:cf:38:6d:ee:17:35:f6:4c:6c:22:
1c:2b:46:9b:32:4b:81:cd:8a:19:12:36:c4:38:78:
ce:64:e2:c2:60:86:26:8e:c4:26:f1:c3:7f:7b:6a:
50:78:8d:f1:bd:e3:91:3d:f9:1c:82:c3:a5:ba:7b:
5c:40:c4:94:45:53:14:18:e5:12:24:7f:b6:b2:77:
77:82:1f:f0:d7:b3:dc:24:7b:85:38:d6:0f:6a:be:
d7:69:fa:df:58:80:c8:94:a9:e9:1b:a8:d3:1b:2d:
19:d6:f8:5b:0c:62:89:2f:9b:ee:e4:a9:3f:63:b3:
c5:c6:db:ca:27:7d:dc:a9:96:62:f3:77:7a:15:5a:
02:23:dc:fb:ca:bb:52:50:09:8f:06:ce:38:b8:b8:
c0:0e:44:88:fa:11:0a:90:6b:aa:fd:29:0e:e8:d4:
bf:7d:b9:36:a2:86:22:b8:69:62:73:d4:ac:c4:59:
06:b6:4e:5a:df:05:0d:96:39:f9:e1:9b:dd:13:3c:
13:f7:d5:50:ad:8e:9c:5e:8b:30:04:75:94:c6:25:
52:72:8a:fc:43:ca:27:d1:12:74:3d:0e:3f:15:02:
a4:5d:73:0a:dd:44:25:e5:71:a6:57:7c:02:2f:8b:
07:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E1:B3:E0:29:14:72:64:AC:4C:3C:79:03:FA:73:08:43:A8:86:1C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6f8::/32
Signature Algorithm: sha256WithRSAEncryption
57:4e:b3:f9:a3:ce:d4:e0:33:f2:ea:11:b1:8f:fa:56:fe:f2:
c6:11:8c:58:cd:a2:58:b4:9b:a4:a2:3c:b4:31:91:12:ed:b8:
77:a0:59:6d:ad:43:b1:03:b6:50:8a:ee:8f:55:56:84:9f:7c:
0c:95:d7:88:a0:b9:30:49:47:c6:53:23:fe:88:10:57:61:ab:
6f:00:b2:76:14:58:88:b4:d0:51:83:ec:24:7b:2f:be:6a:0e:
ca:d5:16:77:5c:1b:24:9b:a6:5d:d1:2d:ab:54:7d:92:a3:0b:
46:20:c5:2b:35:98:0c:8b:fd:b8:9b:0e:bb:2a:99:c2:24:eb:
3e:d6:08:e4:5c:b3:52:64:3d:52:53:48:fa:24:76:03:6d:22:
21:4e:77:30:db:15:4f:0c:0c:1d:9e:a1:ae:13:19:a6:d6:ce:
27:9f:ac:c2:78:1d:68:e6:14:64:77:f8:e1:1b:08:a7:4c:15:
78:9f:07:04:74:3b:83:e8:0e:4d:68:84:d4:75:21:71:34:3b:
81:aa:3b:3e:5e:df:f7:4f:7a:c5:e0:3e:bb:a4:75:f8:b3:82:
fc:50:f0:d2:8e:47:cc:3d:ac:df:55:64:57:7d:c8:2e:e5:69:
3d:60:92:c2:8e:04:f1:55:46:f1:9e:89:6d:57:3f:1d:4c:02:
3a:79:0e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:44 2026 by rpki-client