Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144437.roa
File: AS144437.roa (raw, json)
Hash identifier: 8kH5mns5VxM0hYzwrDJOtnpG7do6G2P76zORO3L8JRY=
Subject key identifier: 32:0F:CC:50:EE:76:AE:E1:76:EE:46:C8:58:BC:AF:83:9A:29:5B:B3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6F91AB53405AC84CB20E8BFD7EFE1FD86EF549B2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144437.roa
Signing time: Mon 25 May 2026 01:20:27 +0000
ROA not before: Mon 25 May 2026 01:15:27 +0000
ROA not after: Mon 24 May 2027 01:20:27 +0000
asID: 144437
IP address blocks: 240a:a6fb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:91:ab:53:40:5a:c8:4c:b2:0e:8b:fd:7e:fe:1f:d8:6e:f5:49:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:27 2026 GMT
Not After : May 24 01:20:27 2027 GMT
Subject: CN=320FCC50EE76AEE176EE46C858BCAF839A295BB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:26:ef:33:c6:60:ba:36:2f:4a:b3:2e:33:d1:
01:e0:1e:1c:3b:be:c7:60:2f:1e:48:e8:ad:46:c4:
c3:3d:f9:26:5a:fc:29:89:81:d2:33:5a:ce:17:ce:
c5:0e:35:42:f9:78:4e:19:01:15:e0:af:d6:40:0c:
34:08:1d:dc:b6:85:03:cb:8e:7b:d1:a5:f8:e2:27:
81:00:ca:17:1e:82:01:16:a7:de:41:e9:fc:96:fe:
07:1e:f6:1d:56:e6:a4:85:ee:97:dd:42:4c:09:81:
23:68:e8:88:02:85:9f:84:fc:fa:f5:5b:44:06:a4:
a7:2d:b7:d5:0a:33:a7:88:b1:69:06:a0:22:ac:3b:
a2:fb:47:6a:f5:dc:39:9b:9e:6e:f4:d6:e2:f0:45:
1e:63:01:89:26:97:08:5b:f7:33:fc:b5:1c:96:a5:
1b:42:dd:6d:f5:68:a8:80:9c:42:7d:fa:8a:39:34:
4d:ed:84:50:d8:83:f9:7a:09:ce:ef:ca:f0:9d:8b:
93:91:5d:12:fb:48:f4:54:88:94:83:0c:40:94:ab:
a1:eb:4b:e0:e6:f0:7d:62:a8:c1:e7:b5:c7:20:7d:
ad:92:96:df:ce:6f:ab:7c:7f:a3:c7:88:fe:6f:5b:
02:0e:6a:68:9e:11:03:14:d1:80:25:53:c2:45:15:
2d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0F:CC:50:EE:76:AE:E1:76:EE:46:C8:58:BC:AF:83:9A:29:5B:B3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6fb::/32
Signature Algorithm: sha256WithRSAEncryption
73:ab:8d:f9:c4:ab:44:f2:2c:3a:a3:04:49:90:ed:1b:66:5d:
bb:36:0d:30:f3:03:35:85:2c:56:3c:09:0b:a9:a1:6d:99:1a:
54:1b:eb:a8:61:49:c8:73:35:c8:a4:5f:38:17:98:25:20:aa:
93:48:b6:7f:a6:c1:f6:d1:22:e7:cf:ef:8e:8c:28:21:4d:4c:
73:61:e1:39:00:a5:34:d1:7c:15:10:a9:f7:a3:28:5d:87:9c:
d6:a8:8f:f8:bd:10:46:de:38:a1:04:a9:f5:b9:f2:b9:c3:d1:
bb:59:f5:fd:90:88:cd:7b:52:1a:96:f2:e5:2d:1e:a8:ff:98:
34:8d:0f:e3:c7:d8:79:12:73:7d:40:9c:31:57:dc:ac:25:15:
a4:96:5b:5e:59:57:36:d6:af:a4:c2:53:95:f7:92:dd:ce:0e:
ba:24:ad:0d:1c:4f:23:f8:88:b0:fa:1c:3f:af:5a:80:58:51:
ba:04:d0:98:b8:6b:15:14:c7:13:f2:a4:8b:e7:c4:99:e6:dd:
ae:b3:60:5c:32:9d:86:91:da:a7:49:77:49:2e:c5:7e:93:7a:
78:78:7e:b2:1a:37:e1:e6:56:53:82:00:31:19:f8:a7:4d:cd:
3f:9a:fd:76:ee:7b:b1:fa:49:4a:c5:b0:98:51:cb:7d:a5:d7:
02:bd:e3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:37 2026 by rpki-client