Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144435.roa
File: AS144435.roa (raw, json)
Hash identifier: KYH0xuQlV2RRbXvrh/dgLpPvypUuWaHFwVj5tjCIcQU=
Subject key identifier: 71:C7:EB:B1:53:F6:59:BE:87:39:4B:08:70:8E:6B:A3:D1:E1:9E:AE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0DB580895DFD4B45241286446ADB026BA7CDF68B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144435.roa
Signing time: Mon 25 May 2026 02:22:49 +0000
ROA not before: Mon 25 May 2026 02:17:49 +0000
ROA not after: Mon 24 May 2027 02:22:49 +0000
asID: 144435
IP address blocks: 240a:a6f9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:b5:80:89:5d:fd:4b:45:24:12:86:44:6a:db:02:6b:a7:cd:f6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:49 2026 GMT
Not After : May 24 02:22:49 2027 GMT
Subject: CN=71C7EBB153F659BE87394B08708E6BA3D1E19EAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:58:9c:45:42:e4:71:8f:b4:08:c4:d5:3f:4a:
f8:c9:07:96:2b:93:53:7f:79:f0:58:ca:92:d7:0b:
02:40:52:de:05:4b:1e:3a:82:54:23:10:e3:ed:47:
7b:5d:56:cb:31:e6:2d:49:df:d5:4b:2e:2f:a6:2d:
4a:97:6d:ef:17:78:a2:de:b4:2b:fd:ff:b1:0c:ce:
aa:b0:51:5a:71:58:97:ee:f6:9a:0d:47:ae:6a:f5:
ec:71:9e:b2:b2:0b:f1:2e:73:80:2d:6c:71:74:aa:
80:47:ae:15:20:ab:2e:8d:2e:e8:a2:24:67:47:70:
b7:c3:bc:7f:c3:76:60:c2:9f:21:90:e6:dc:f0:a7:
56:0c:28:62:81:13:1c:7e:19:4b:85:6d:2d:0d:f2:
0b:42:fa:e3:9c:bc:76:77:37:4b:c2:ff:d3:2c:29:
f4:91:9b:9a:25:82:68:98:13:da:b5:0a:09:f8:9a:
ef:97:65:c2:11:62:40:2d:76:b9:34:ef:8a:60:45:
f4:c1:be:15:8b:7c:4d:ef:40:d3:06:44:04:6c:11:
ef:e6:72:d7:a7:d5:87:db:44:48:ea:52:a9:74:b0:
6c:d6:b1:be:c5:7d:52:f8:87:23:6d:89:d9:e5:c7:
a9:11:54:b5:f3:0b:a3:85:ad:f0:f8:fa:4d:28:32:
94:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C7:EB:B1:53:F6:59:BE:87:39:4B:08:70:8E:6B:A3:D1:E1:9E:AE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6f9::/32
Signature Algorithm: sha256WithRSAEncryption
3e:0c:07:9f:38:39:e2:04:c0:cf:a4:f4:07:19:20:3b:4e:be:
46:b0:75:44:4b:a5:30:33:78:f4:1c:60:78:64:26:b3:b7:7c:
c9:e6:ee:a2:43:d0:28:3c:5e:c6:b6:5e:69:83:b1:73:f5:7b:
f0:89:fb:d9:52:de:e0:cf:db:a4:7e:1c:b3:a8:bc:53:0e:31:
29:7c:db:dc:53:11:ca:62:76:0a:ab:2b:39:d9:2f:39:78:c1:
18:d0:0a:7f:6f:3c:56:c3:c7:78:be:af:90:37:b0:d4:07:62:
66:26:3f:62:28:87:d2:be:7e:20:93:c2:97:9e:15:e0:ab:95:
a2:93:dd:84:96:68:4a:d5:5d:e8:de:47:94:19:75:6d:95:0f:
25:1a:db:53:58:a8:68:07:d3:39:4c:c0:ad:6c:02:d6:1a:f2:
cc:29:94:cf:02:c6:6f:5b:39:0a:c7:11:f6:22:9f:05:33:b0:
0c:17:0a:ad:c6:c8:93:7c:3f:22:e7:6d:9f:39:cf:6e:81:ad:
7a:4a:c6:66:78:90:c8:4f:4a:5c:d6:66:ed:9f:fe:94:9a:90:
1c:75:6d:65:29:a8:ba:90:85:e4:fe:46:95:de:8e:71:79:32:
51:88:72:ac:50:94:6a:3f:6a:d2:c3:93:f4:55:63:1f:ce:a1:
8e:5a:08:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:00 2026 by rpki-client