Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144443.roa
File: AS144443.roa (raw, json)
Hash identifier: VIz7HxMfpmhGPFWqudAL4fEbYbLuY+bjs/k5dKxmmns=
Subject key identifier: F2:2F:F9:7C:B6:5A:52:49:1E:56:35:57:BC:13:01:38:83:D8:3A:41
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7A7EAE7AE3BE713782512AEEA10568DC95DE83E0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144443.roa
Signing time: Fri 22 May 2026 06:58:45 +0000
ROA not before: Fri 22 May 2026 06:53:45 +0000
ROA not after: Fri 21 May 2027 06:58:45 +0000
asID: 144443
IP address blocks: 240a:a701::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:7e:ae:7a:e3:be:71:37:82:51:2a:ee:a1:05:68:dc:95:de:83:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:45 2026 GMT
Not After : May 21 06:58:45 2027 GMT
Subject: CN=F22FF97CB65A52491E563557BC13013883D83A41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:c3:13:a8:56:fc:32:86:92:6c:34:2e:1e:
a2:84:24:8d:f9:bc:ba:f5:4c:6a:22:19:0f:9d:ff:
3d:9e:e0:65:e2:93:15:e9:97:f4:3f:94:d5:46:3c:
06:a8:0f:a5:a1:43:b4:00:b3:ad:ae:92:62:6d:40:
02:96:16:f4:bf:37:c8:b1:52:84:aa:70:f6:c2:dd:
c6:42:1e:4a:a1:33:7f:92:4b:65:06:6a:a6:08:ea:
03:1b:b6:db:e9:e1:eb:40:6a:d9:f6:83:c1:bc:9b:
69:9a:17:7c:a5:34:d8:7d:f6:23:c2:3e:f6:38:cd:
4f:3b:7d:28:b4:3d:ea:57:d3:46:e9:3e:88:39:b0:
74:35:e5:1b:3a:e7:4c:a7:20:92:f7:18:8a:e1:c9:
e1:71:69:50:1f:6a:c0:35:9b:1e:7f:7f:cd:83:22:
ef:3d:22:c3:0d:5c:ce:3a:8a:7b:22:30:d8:ce:c0:
ae:48:83:74:04:15:7c:90:96:b5:a3:d5:24:24:1f:
4f:e0:6b:a5:6a:74:b2:55:1b:fb:3f:49:05:20:e7:
3e:af:90:3e:8c:cd:cc:0e:41:db:0a:66:9a:18:84:
40:a8:96:bf:86:59:a8:be:b4:b7:e8:93:ed:0f:04:
2c:d9:86:f1:78:43:02:f1:67:d3:f3:47:10:17:e5:
c7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2F:F9:7C:B6:5A:52:49:1E:56:35:57:BC:13:01:38:83:D8:3A:41
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144443.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a701::/32
Signature Algorithm: sha256WithRSAEncryption
2b:15:5a:5f:4d:12:3b:c3:8b:32:e4:2c:29:3e:a1:f7:f6:40:
34:ca:f2:43:d9:0f:4f:25:a6:67:0b:c2:0d:83:b4:92:5c:9b:
bc:49:ff:95:cf:8f:06:09:3c:84:77:23:2c:ad:86:e2:f1:38:
f2:87:af:07:62:7e:29:e2:12:1a:35:9f:fa:75:10:9b:36:6d:
e7:47:52:d7:a8:37:20:53:25:e6:1c:86:2e:1d:a8:d3:d7:f6:
3a:99:b2:b1:6b:a0:01:a1:9a:0c:75:45:c2:6b:b8:43:d7:cb:
e6:b7:c3:b4:d2:3a:b6:c8:84:7b:11:1a:81:47:11:b6:1b:d7:
bb:ec:e5:7e:5b:b3:49:2e:1b:a9:35:76:6f:b7:f4:11:db:49:
4a:2e:31:b8:ea:6c:c8:f5:50:f1:92:40:da:76:4a:87:0e:de:
ba:5d:a8:5b:6f:22:14:78:7c:a6:9a:fa:30:08:64:9f:04:ff:
f0:bc:b4:24:03:5e:76:ae:37:28:70:9f:22:44:d7:37:90:d9:
5a:b5:99:f5:78:f2:d5:ba:6b:24:2d:77:09:aa:be:40:1f:2b:
f2:54:c6:fd:76:2d:3b:04:16:b4:4a:85:71:b3:83:68:30:82:
2d:16:b2:e9:88:d7:9e:8a:12:0b:12:bb:a7:43:19:a3:cc:69:
00:2a:eb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:17 2026 by rpki-client