Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144438.roa
File: AS144438.roa (raw, json)
Hash identifier: DO7s6xHLqf/3CScr7jjjodLruGrLgihbwK9tTUmK69Q=
Subject key identifier: 74:83:1D:84:CC:61:D7:B3:A7:CC:94:71:5D:A2:C9:60:B5:83:F7:79
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5280300D2E5A08B5F6CD05773F14A7B7CF144973
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144438.roa
Signing time: Mon 25 May 2026 01:38:23 +0000
ROA not before: Mon 25 May 2026 01:33:23 +0000
ROA not after: Mon 24 May 2027 01:38:23 +0000
asID: 144438
IP address blocks: 240a:a6fc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:80:30:0d:2e:5a:08:b5:f6:cd:05:77:3f:14:a7:b7:cf:14:49:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:23 2026 GMT
Not After : May 24 01:38:23 2027 GMT
Subject: CN=74831D84CC61D7B3A7CC94715DA2C960B583F779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:80:7a:8a:81:d2:fd:f1:40:ab:45:17:08:
25:e3:7f:a1:00:d3:b1:83:a7:0b:af:76:37:27:72:
cf:81:5a:3a:cb:e0:55:cc:eb:54:93:95:41:20:95:
5e:5c:12:ba:c7:55:fb:5f:e9:79:c5:82:fc:ec:55:
b8:ed:9b:48:27:86:80:78:71:8b:1e:18:d0:ea:d2:
59:f9:6d:d3:6c:da:9e:a6:88:ca:6f:6a:6a:04:95:
63:50:c0:f5:7f:d8:a5:99:6e:15:eb:d7:ad:37:92:
38:b6:95:3c:33:21:96:cb:53:9c:a8:22:d0:1d:0b:
d1:69:99:90:dd:3a:12:51:82:76:90:5e:6c:b9:58:
88:48:d4:7e:c3:13:b7:b1:67:f9:ef:e1:cb:76:51:
8a:39:53:61:6b:10:57:57:db:59:c2:c2:e5:c6:af:
1d:2e:d1:0e:05:2f:f1:4f:d1:7c:17:a3:bf:4c:da:
81:8a:cd:ae:36:71:70:ce:a5:cf:b3:46:10:0f:96:
10:3e:ac:7e:63:5a:fe:3f:87:9f:d5:2b:f8:66:63:
7f:ba:40:0d:03:24:db:c2:da:1b:ca:36:8b:ee:1c:
92:04:da:80:a3:6b:16:c7:48:61:56:a2:96:86:2f:
14:fb:63:fc:9b:6a:31:28:d6:b1:eb:3a:ac:ec:62:
86:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:83:1D:84:CC:61:D7:B3:A7:CC:94:71:5D:A2:C9:60:B5:83:F7:79
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6fc::/32
Signature Algorithm: sha256WithRSAEncryption
84:a2:32:e4:32:0f:8a:68:7d:16:79:1d:5a:12:4f:08:b5:f1:
33:32:bf:df:23:07:91:0f:17:cf:5d:5d:c1:ab:38:d9:04:ce:
ef:f8:80:5e:a4:63:fc:76:54:79:74:15:a3:5b:87:e4:ca:ed:
a1:06:9c:e6:10:d1:11:a7:b5:0e:db:df:7e:e2:df:dc:cc:07:
97:c3:3c:a4:7a:39:dd:b7:69:4a:54:2b:ed:4a:6b:72:7d:e2:
fc:20:53:86:68:70:03:e3:2b:dc:46:31:3e:72:36:32:ce:20:
65:a5:09:d0:31:41:34:8b:42:dd:6f:07:17:f3:f6:99:ee:4c:
56:1e:98:43:33:97:93:41:f1:a1:63:62:ba:58:1f:b4:39:14:
a8:e0:1e:18:2b:b5:a5:02:ed:31:82:66:e9:2f:a5:00:c0:ad:
3b:86:bc:1d:bd:07:a3:01:c2:46:d5:ef:a9:75:2b:ff:79:a9:
3b:88:17:ff:3c:3d:87:4e:56:12:8e:1f:65:ee:62:a1:65:a0:
45:d8:33:16:c5:ac:2c:46:e0:3e:9f:57:8c:67:a4:a8:34:59:
f6:95:a5:02:35:54:f1:a7:cd:df:16:92:bd:00:e3:65:e8:8e:
ae:59:5a:4e:fc:19:85:f3:62:e5:55:0d:02:24:66:5f:f5:88:
d1:c9:e7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:26 2026 by rpki-client