Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144450.roa
File: AS144450.roa (raw, json)
Hash identifier: ls5aYSlx+Hk8iJP6jItKS9Zz4NQe8lMJQ6FZ9mD9aKU=
Subject key identifier: 44:88:57:CD:72:42:2B:FA:DB:2D:1C:79:C3:60:66:9A:BB:33:B3:2A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2FF08384D25A69D3EEC8A392120E9510738DEF83
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144450.roa
Signing time: Mon 25 May 2026 06:28:40 +0000
ROA not before: Mon 25 May 2026 06:23:40 +0000
ROA not after: Mon 24 May 2027 06:28:40 +0000
asID: 144450
IP address blocks: 240a:a708::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:f0:83:84:d2:5a:69:d3:ee:c8:a3:92:12:0e:95:10:73:8d:ef:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:40 2026 GMT
Not After : May 24 06:28:40 2027 GMT
Subject: CN=448857CD72422BFADB2D1C79C360669ABB33B32A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:68:db:4f:51:f1:91:a1:d6:9b:87:0b:f3:
ae:64:c1:64:5c:b0:6d:0a:3e:55:2d:f4:ec:8c:e7:
c6:d9:47:ff:f7:83:eb:6b:7c:d8:91:bd:3a:e9:f1:
ef:90:22:ca:e4:72:c5:30:15:52:c2:7f:50:b2:f1:
77:c6:d9:e0:56:b5:09:eb:43:57:77:4c:47:17:ff:
99:5e:6a:22:f7:4c:72:42:79:55:ef:8d:59:dd:4a:
fc:29:cd:e0:bd:c8:3b:e0:c1:e8:d4:47:e8:af:fb:
92:dc:86:64:b8:fa:0d:d1:66:cd:fe:1a:f4:e3:b2:
89:7c:6e:5b:5f:fb:5a:e4:b0:43:72:b0:a2:f0:73:
f8:d9:54:16:2c:28:21:c4:01:3b:bd:40:0f:65:34:
3d:26:d6:5b:70:a1:7d:ab:4f:9f:2b:2d:2d:68:65:
05:38:07:49:1f:a1:54:c9:45:fa:2a:ca:40:40:d8:
f3:69:15:2d:2b:68:f6:b5:c5:8b:1e:cb:1d:79:48:
c0:13:c9:e9:e1:e8:05:d8:eb:f6:23:a7:3e:d1:b8:
e2:9b:d9:bd:8f:73:9e:72:51:67:c4:11:6e:80:69:
d0:3b:4d:d4:45:30:ab:c0:90:0e:a6:82:93:3c:ac:
94:93:f2:9c:79:38:54:f7:4e:6d:e5:90:65:a5:5a:
c1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:88:57:CD:72:42:2B:FA:DB:2D:1C:79:C3:60:66:9A:BB:33:B3:2A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144450.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a708::/32
Signature Algorithm: sha256WithRSAEncryption
40:8a:bd:99:ed:4a:82:4e:d2:a4:86:d1:6a:cf:03:73:2a:8a:
58:55:59:6c:c0:6f:de:b1:e0:a5:6e:53:07:e0:f5:02:a6:5d:
de:02:98:e3:d2:e5:7c:10:a9:13:b5:0a:2b:c5:00:ea:29:1c:
f4:f4:36:7e:fc:12:91:57:3b:9f:c6:d1:ed:14:9e:e1:88:a5:
73:61:2a:55:a3:fb:71:d0:22:2b:9e:af:20:54:b4:75:34:4d:
ea:5e:0d:d9:e1:20:50:b2:40:c0:e6:7c:68:f5:80:22:f5:9d:
3d:97:2a:7d:76:af:df:a0:31:d7:74:66:3f:c5:33:c3:95:8c:
51:28:93:b8:7b:e0:b8:7a:fc:48:4f:fc:28:f5:ab:2c:79:44:
4e:eb:f2:4b:f8:46:33:92:ef:11:33:5c:83:98:5b:54:2c:59:
df:7d:13:f8:14:01:32:f3:f9:06:ba:ca:00:cf:43:55:72:60:
c9:98:6e:68:b6:9e:aa:98:6e:82:67:12:76:2b:9a:aa:11:47:
1d:e6:02:4f:1d:b8:3b:d6:7c:88:43:00:6f:e8:f0:23:62:6a:
ce:fd:9b:b0:24:4e:c9:30:8c:86:ce:3b:8e:c5:64:9c:70:b5:
eb:5a:1d:9c:f9:29:29:aa:1d:d0:ad:81:64:e5:43:b6:2c:02:
ff:3b:77:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:20 2026 by rpki-client