Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144467.roa
File: AS144467.roa (raw, json)
Hash identifier: CfKj4b76aYNyIrMZ1skX1jhSQypEg4LCvtbgfozEAgY=
Subject key identifier: 7C:DC:87:52:05:CE:65:C0:C7:C0:28:06:9C:67:E0:60:88:7A:46:14
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5B714BC8C9FB2466B1ACE60BFD39642B10E16C6C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144467.roa
Signing time: Fri 22 May 2026 06:46:03 +0000
ROA not before: Fri 22 May 2026 06:41:03 +0000
ROA not after: Fri 21 May 2027 06:46:03 +0000
asID: 144467
IP address blocks: 240a:a719::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:71:4b:c8:c9:fb:24:66:b1:ac:e6:0b:fd:39:64:2b:10:e1:6c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:03 2026 GMT
Not After : May 21 06:46:03 2027 GMT
Subject: CN=7CDC875205CE65C0C7C028069C67E060887A4614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:c0:19:16:d0:dd:b3:84:fb:61:b5:ec:a2:
bd:64:b4:04:50:64:1e:a4:b6:e2:23:9e:0b:93:3c:
6d:02:e6:3d:c3:71:5c:31:3d:1c:6e:9c:96:2e:66:
13:50:d6:4d:97:a0:98:69:23:df:e2:8d:80:fd:c2:
70:2f:04:46:9b:a8:9d:22:b1:28:dc:f0:69:55:54:
d4:5d:76:98:33:87:90:95:b6:79:64:bb:d1:12:88:
d8:ec:c8:b8:b4:5a:cb:e3:ba:51:69:a5:28:e0:60:
b5:71:aa:b6:79:7c:9a:d5:8b:88:2b:a6:24:99:ee:
65:48:62:04:06:e0:19:c8:f7:7c:91:85:6b:70:62:
22:c4:eb:2a:1e:be:5d:71:41:7a:f1:be:ba:bd:32:
27:e7:79:3e:5e:c8:aa:06:8c:f7:68:dd:97:12:0b:
66:1b:22:19:13:ec:50:82:71:ef:48:1d:ea:6a:ae:
7f:bc:ba:99:09:8d:66:f4:f4:2a:d1:6e:60:bc:5c:
1c:e2:e8:8a:c7:99:ed:e0:3e:36:f0:04:e1:8d:f0:
b5:e3:1e:64:13:b2:1e:1c:8b:f2:94:91:6f:2f:3f:
72:32:c3:2f:ea:14:26:fe:89:91:74:a9:35:e3:bf:
8a:4a:b8:64:9e:fb:2e:7e:55:ce:c9:68:20:06:bb:
4e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DC:87:52:05:CE:65:C0:C7:C0:28:06:9C:67:E0:60:88:7A:46:14
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144467.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a719::/32
Signature Algorithm: sha256WithRSAEncryption
4a:d1:4d:88:44:09:37:6c:40:6c:3a:05:6f:4e:24:29:0a:77:
55:82:c2:cd:bb:88:39:37:08:a8:54:08:52:c1:13:fc:1a:1e:
08:33:a4:0b:32:c7:4d:c5:77:9b:da:0d:50:c6:d1:e0:0e:1b:
ea:1c:ec:f7:b0:54:28:d2:96:a6:69:6c:67:4e:7e:55:d7:df:
7f:35:ee:86:68:d2:3f:c3:56:f3:10:0f:63:e4:55:b3:1d:68:
ec:60:ae:49:70:40:b4:c1:43:92:89:c1:38:de:c0:0c:0f:48:
23:6b:2c:ad:4d:56:bd:ec:1c:04:6b:54:f5:42:96:c9:0b:dd:
21:da:af:f1:1c:ad:fc:c2:01:62:a8:7c:b6:9d:6f:64:ab:60:
04:67:d1:32:50:9d:0c:4a:3b:d4:b9:b1:d6:da:6e:80:c0:3c:
25:a1:18:3a:55:a0:ed:42:9f:95:ed:d7:50:95:7d:cf:3e:bc:
bf:35:af:8e:48:d8:1f:59:cc:b6:77:cd:d2:f5:22:7c:f8:7c:
d5:75:57:e7:20:85:a9:69:e1:13:5e:cd:ec:be:59:44:c5:b4:
2d:ba:59:01:3b:69:c5:dc:07:39:79:54:d0:6d:22:2a:80:48:
0c:f1:81:41:89:d6:fe:15:9d:62:5f:56:91:4e:e5:e5:1d:3d:
96:8d:62:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:51 2026 by rpki-client