Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144470.roa
File: AS144470.roa (raw, json)
Hash identifier: HPZd84+6UQEOWVcHA5Amyd6JfhPUf6j/q3wfqgM+UYU=
Subject key identifier: 11:93:1A:FD:92:6A:70:C4:2F:B6:87:F5:10:BA:C8:83:62:C7:70:D4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4F7914E9CF55CE2F452B60390CF16416F41C22EB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144470.roa
Signing time: Mon 25 May 2026 06:48:55 +0000
ROA not before: Mon 25 May 2026 06:43:55 +0000
ROA not after: Mon 24 May 2027 06:48:55 +0000
asID: 144470
IP address blocks: 240a:a71c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:79:14:e9:cf:55:ce:2f:45:2b:60:39:0c:f1:64:16:f4:1c:22:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:55 2026 GMT
Not After : May 24 06:48:55 2027 GMT
Subject: CN=11931AFD926A70C42FB687F510BAC88362C770D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7b:31:19:a4:ba:0e:5c:02:16:83:02:db:ef:
47:ed:bc:80:72:1d:47:65:14:d4:77:dd:d5:05:c2:
1b:80:77:65:63:83:5d:aa:b2:20:ec:7e:6e:96:da:
ca:5c:e2:fc:3f:26:bb:c8:8b:76:2e:6b:eb:86:25:
ae:a3:7b:75:0d:a1:43:71:7f:39:7a:fa:1f:69:44:
fe:e0:c4:eb:10:c9:ea:38:f3:a4:03:d7:80:89:a9:
7f:53:4b:c3:21:d5:6d:9e:f3:3f:33:a3:fa:d7:67:
4e:15:20:95:52:2c:e4:c1:41:96:fd:ae:da:22:18:
e9:c3:47:8c:2d:d5:b4:5a:f8:29:1f:df:70:47:0b:
75:09:5a:32:e4:17:22:ac:b0:86:d6:35:b0:69:f4:
83:05:ce:1f:eb:fc:9c:b6:66:47:cd:b8:35:34:fc:
38:6e:9c:b0:e9:97:ea:14:10:a5:0f:fe:d7:9b:a6:
0f:33:53:34:1d:7d:2b:20:2f:14:67:d6:32:6a:31:
03:6b:ec:96:eb:c5:72:d0:ae:64:f7:b7:e3:cd:6f:
71:b6:b0:1b:87:18:2c:04:d3:58:e1:6a:c7:63:4d:
1a:55:40:a3:0c:85:1a:3d:9a:d6:00:f2:7d:d2:6c:
30:be:b0:6b:ff:b4:ae:01:98:63:32:42:12:f7:f6:
46:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:93:1A:FD:92:6A:70:C4:2F:B6:87:F5:10:BA:C8:83:62:C7:70:D4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144470.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a71c::/32
Signature Algorithm: sha256WithRSAEncryption
2d:e1:83:41:06:82:5e:35:b5:ff:bc:8b:f7:52:68:3e:ce:65:
4e:ec:e7:47:df:4a:fc:6d:7d:be:05:33:e4:79:a2:05:a7:e7:
dc:63:57:6b:90:11:fc:08:df:8d:c1:b4:09:a4:74:60:4a:e5:
a3:77:76:92:f8:05:3c:c8:7a:40:46:ed:19:42:d8:2b:76:14:
5c:cb:a5:18:fe:68:ff:79:27:dd:e2:59:0e:48:69:70:e8:65:
93:4f:b0:f6:10:df:1b:43:c3:87:7c:aa:cb:a7:be:04:ff:eb:
99:50:7a:8f:ad:ec:c6:97:3f:f3:3b:6f:58:b6:7d:2b:61:2d:
6e:a5:0a:dc:4d:62:79:1f:a7:7f:0e:d0:cf:e0:3d:d3:9e:7b:
ee:31:ac:14:f6:27:b1:2c:a0:0a:ba:cd:2e:1c:ad:21:a0:5d:
ea:2f:f3:fd:cb:7c:90:b6:f9:6e:37:1a:02:a2:88:e1:4c:bd:
74:71:cd:f2:6b:c9:3d:50:2d:90:43:c9:3a:4c:74:05:0b:6e:
e3:36:1a:2d:91:96:f8:37:eb:ea:ba:5c:52:09:83:a4:e5:0c:
14:07:dd:8e:51:7e:46:24:55:86:94:b6:24:75:02:55:ba:61:
e4:a1:fc:b9:4e:d4:36:93:7e:5f:85:c0:78:59:8c:ed:98:7b:
e8:30:dc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:11 2026 by rpki-client