Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144449.roa
File: AS144449.roa (raw, json)
Hash identifier: M1k2fcMhg19QxkZ0Ik5zGs2+Q69q9ZbkohiW74Eyyok=
Subject key identifier: 8C:55:EA:C0:45:80:C7:40:DF:C4:18:37:E9:9F:16:48:33:90:A7:73
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 64D4DCD066FE4370959061F69F5AA133269E6FF8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144449.roa
Signing time: Fri 22 May 2026 07:32:38 +0000
ROA not before: Fri 22 May 2026 07:27:38 +0000
ROA not after: Fri 21 May 2027 07:32:38 +0000
asID: 144449
IP address blocks: 240a:a707::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:d4:dc:d0:66:fe:43:70:95:90:61:f6:9f:5a:a1:33:26:9e:6f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:38 2026 GMT
Not After : May 21 07:32:38 2027 GMT
Subject: CN=8C55EAC04580C740DFC41837E99F16483390A773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8e:af:c5:52:9e:c2:4f:95:44:c0:23:a6:33:
15:36:b0:b4:77:e5:3b:64:e2:82:d4:d8:56:c4:cc:
68:4a:19:72:72:e9:db:25:51:3b:43:ed:b2:be:cf:
19:86:ea:63:7d:df:29:ad:f3:9c:e8:25:8e:87:7d:
3b:23:31:92:69:6a:06:77:fd:b9:aa:62:85:45:c0:
5f:3a:7a:78:b6:a0:de:90:2e:1b:82:11:36:b3:da:
ed:77:d2:5d:a7:ba:b6:59:63:bb:b6:41:2f:1a:cf:
de:af:29:03:5f:1e:97:99:ec:d4:6e:ff:f0:b7:b0:
a2:ea:cc:a7:9c:d6:61:34:f7:ce:b3:97:e0:9f:c7:
c7:c9:e4:10:99:de:7b:ce:f0:04:19:10:a5:28:84:
b6:51:fd:2f:0b:42:a4:11:31:02:b6:03:99:22:f4:
80:82:93:0d:ea:4d:2a:12:cb:35:9e:dd:ba:da:39:
b7:29:fc:be:83:04:a1:7d:e0:49:4d:4b:05:46:b2:
f4:23:f0:fd:3c:45:1c:01:e2:69:8a:c2:ae:c9:c4:
6a:d5:07:58:30:e4:b1:07:35:35:d7:58:fc:4b:cd:
2c:89:25:aa:0f:34:80:8e:a3:bd:f4:05:9e:51:49:
9a:99:95:95:7a:44:d8:52:87:1e:1c:bb:ca:6c:c5:
d5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:55:EA:C0:45:80:C7:40:DF:C4:18:37:E9:9F:16:48:33:90:A7:73
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144449.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a707::/32
Signature Algorithm: sha256WithRSAEncryption
1e:40:08:a7:26:ba:7b:df:91:fa:38:b4:8c:9c:08:5c:28:52:
e9:49:43:37:6d:5d:29:a6:30:ce:1e:cc:42:af:ac:6a:7a:20:
89:4d:e5:e8:12:ad:1f:9d:e7:36:68:ac:bb:87:d6:d5:3a:74:
f9:35:54:6f:cf:65:12:6d:89:8f:ad:60:73:90:17:e2:7b:af:
45:10:79:1e:a2:50:dc:69:86:c5:12:1e:50:9a:ed:ae:84:bc:
83:99:02:0a:86:0f:bc:a5:c9:e8:dc:61:25:25:18:3c:1e:a1:
0d:79:06:98:d0:67:f3:76:e9:b2:1b:2e:a6:4d:11:2c:75:61:
bc:5a:9f:61:b4:a8:ee:57:0a:33:b8:50:90:09:1d:fe:cc:c3:
62:70:d8:ff:12:81:c4:51:ae:8b:8f:fd:96:80:64:67:7e:39:
c8:a0:10:af:24:b0:b3:71:a7:3e:ad:7d:9b:ca:6e:39:70:64:
e2:16:e2:0f:1a:d3:4c:d1:d5:99:1b:59:8d:48:ef:9b:e3:dc:
62:66:3b:fe:57:fe:2b:82:31:6f:e7:ca:60:8e:b3:54:5a:7c:
df:96:32:97:b6:60:b0:ae:28:65:ed:ca:7a:88:88:e0:09:71:
81:c7:78:ea:4a:27:20:de:51:86:b1:c6:36:8a:03:71:db:78:
85:b5:24:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:57 2026 by rpki-client