Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144436.roa
File: AS144436.roa (raw, json)
Hash identifier: llYL+eMk/2ezybQqP1FGpuKu6Q5MCVzZqgT4XbuedqM=
Subject key identifier: 27:ED:AB:B6:9C:94:DA:65:02:21:74:FF:6F:F7:0C:E3:55:57:E6:01
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7FC932AC9F3B27B11D8B9B1683F0C28F5BC03F3D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144436.roa
Signing time: Fri 22 May 2026 07:24:49 +0000
ROA not before: Fri 22 May 2026 07:19:49 +0000
ROA not after: Fri 21 May 2027 07:24:49 +0000
asID: 144436
IP address blocks: 240a:a6fa::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:c9:32:ac:9f:3b:27:b1:1d:8b:9b:16:83:f0:c2:8f:5b:c0:3f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:49 2026 GMT
Not After : May 21 07:24:49 2027 GMT
Subject: CN=27EDABB69C94DA65022174FF6FF70CE35557E601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:79:78:07:f0:84:73:3a:57:09:9a:f9:20:8d:
cc:e4:ca:be:de:4d:36:9a:38:84:56:12:7e:f8:82:
d0:76:6b:d3:8e:f2:27:c7:05:cf:59:3e:11:fc:39:
27:b0:e1:1a:4f:2d:74:70:da:b1:a5:ad:7a:38:94:
fb:77:04:c8:94:83:19:74:cd:b0:ab:26:7e:86:53:
73:e2:a5:cf:03:0d:64:14:f3:86:62:82:b8:d1:ed:
65:02:d0:6f:a3:a9:b5:af:c0:c4:73:f7:11:ca:3d:
f0:dd:2f:29:8a:8c:e0:47:ca:58:9c:4c:13:94:31:
bb:26:54:cd:c7:3b:02:13:22:8e:5f:88:86:82:73:
6a:3a:14:8d:b9:5a:a5:1d:36:36:87:b3:8c:c8:ee:
86:44:f7:ae:47:c1:fa:b8:d0:35:21:c1:9e:c3:dc:
a1:64:b7:30:a9:a4:76:99:e8:50:fc:07:21:61:9a:
43:d7:37:20:b4:bc:6b:4b:3c:93:29:f1:25:9b:0a:
d9:19:9f:4e:e9:e9:b5:c7:69:cf:1f:77:05:2d:d6:
9d:f4:7c:b4:80:21:5d:3e:ae:84:59:e9:3f:5a:f7:
30:04:55:54:61:2f:72:6e:3b:27:ad:d8:de:f1:26:
7c:c3:b0:e5:a3:f2:10:8d:9e:30:c9:c6:14:86:8c:
18:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:ED:AB:B6:9C:94:DA:65:02:21:74:FF:6F:F7:0C:E3:55:57:E6:01
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6fa::/32
Signature Algorithm: sha256WithRSAEncryption
b2:ee:63:b4:56:be:a6:81:fd:88:5a:6c:a7:3a:94:67:e8:f1:
e3:6e:c6:d9:86:c1:c6:71:01:d7:b4:47:31:d3:30:51:39:b4:
b8:24:96:52:86:03:3d:49:fe:ec:3f:93:e2:f9:25:9c:0f:5b:
b0:f4:1d:ab:67:2b:32:63:01:bb:ea:41:ba:7e:10:53:bf:74:
31:44:7d:ed:14:b1:6a:00:4a:71:c2:9d:f1:74:5d:a9:ad:1a:
55:cf:6b:3e:cb:33:8d:f8:53:b7:e2:f9:bc:7c:d8:bc:68:48:
1c:e4:cb:a0:cb:53:f8:bd:b0:a5:e2:d5:26:19:eb:88:fa:b0:
67:14:ca:08:96:31:5f:50:d9:7a:77:e9:bf:c0:63:ae:7f:2c:
a8:9d:19:89:b3:c2:6a:cb:40:4a:47:17:53:44:a2:af:3c:88:
c6:84:45:30:d8:16:91:af:81:60:e7:87:89:53:16:e9:49:6e:
d8:cd:f6:81:d9:a5:3c:7e:53:a8:ef:0a:b0:10:8b:03:0d:20:
7b:cc:50:01:ae:b9:7f:89:63:e0:da:97:38:79:78:9d:41:c6:
0d:e0:15:b2:6f:7c:86:1d:7d:4a:11:84:3b:d3:b7:9a:e7:4d:
3e:0b:50:1b:e3:bc:4a:eb:b7:26:44:7c:7b:e6:0a:2f:66:03:
5d:cf:e8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:51 2026 by rpki-client