Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144471.roa
File: AS144471.roa (raw, json)
Hash identifier: zsZ6xAycCCBpYdE3IXg4Nj1sGqq+Hr9eNAiCql8HU80=
Subject key identifier: E0:A3:5F:86:2C:1E:0B:F8:A2:0E:AF:A5:2C:25:C3:BA:17:44:71:90
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5BA8D5132443CC5C3A97B10E2763545E4E9F5144
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144471.roa
Signing time: Fri 22 May 2026 01:50:39 +0000
ROA not before: Fri 22 May 2026 01:45:39 +0000
ROA not after: Fri 21 May 2027 01:50:39 +0000
asID: 144471
IP address blocks: 240a:a71d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:a8:d5:13:24:43:cc:5c:3a:97:b1:0e:27:63:54:5e:4e:9f:51:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:39 2026 GMT
Not After : May 21 01:50:39 2027 GMT
Subject: CN=E0A35F862C1E0BF8A20EAFA52C25C3BA17447190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:bd:59:2a:93:ec:4a:f0:1c:dc:90:85:b8:
75:fb:10:23:f3:cc:c8:0b:8c:a7:44:60:8b:05:e5:
a1:0b:a9:95:e6:db:62:bb:a2:6b:45:d4:0e:2e:20:
db:17:73:8b:7f:62:3e:ae:71:e2:f5:0d:d9:c9:e3:
73:9b:ce:d7:70:e6:0c:cb:84:ee:c9:56:76:27:53:
40:c9:c3:01:ea:9e:07:86:da:50:01:3c:e0:b5:64:
4b:02:d7:a4:0f:bf:4b:9e:50:fd:5e:9b:d6:8c:9d:
d2:1b:54:27:36:8c:42:5d:dc:e1:ef:da:0b:fe:3d:
e8:f1:45:a5:a3:c9:cd:41:4c:6d:a6:72:67:e3:8d:
41:03:cd:10:37:53:04:62:58:f5:68:6d:3e:fb:20:
af:5d:43:a4:4b:d0:87:5c:e2:18:4e:ce:a2:19:98:
99:9c:8b:4e:f8:35:f1:2a:7b:e3:1f:24:fa:81:27:
84:26:f0:a5:a3:41:48:69:68:63:62:36:85:8b:0a:
de:c1:0b:49:82:a2:47:1a:1b:a9:a0:fb:f8:eb:e0:
f6:33:29:d7:55:3c:02:a1:de:91:09:a2:6f:28:d9:
44:f2:47:c1:80:3e:88:9a:45:c1:c9:7a:8f:81:b2:
fa:91:bf:62:6d:7c:d4:2a:6d:32:f1:66:01:06:dc:
62:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A3:5F:86:2C:1E:0B:F8:A2:0E:AF:A5:2C:25:C3:BA:17:44:71:90
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144471.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a71d::/32
Signature Algorithm: sha256WithRSAEncryption
03:54:51:ee:13:f8:48:dd:71:75:50:a7:05:7f:5d:bb:35:a6:
d4:8c:75:72:ad:7f:af:b4:7c:73:83:1d:ce:92:a1:31:5a:7d:
13:f3:03:cc:39:1c:b7:81:64:92:17:b8:3b:ac:a5:f8:f4:52:
ab:cb:e7:b4:7d:e3:4f:1f:25:9f:c0:1f:cc:ab:74:21:bc:07:
31:a9:24:2e:d8:82:d9:57:95:ca:6e:76:f6:f7:a4:78:32:8d:
b5:58:f3:85:a4:a8:b0:ba:b2:0b:ed:d8:5f:5d:14:97:22:03:
30:c7:3c:06:0a:7a:bf:e5:a4:fd:0b:65:92:bc:fe:f6:b5:6b:
ce:26:01:b5:dc:4e:5d:28:db:ec:4b:62:34:4e:1b:b1:fe:da:
e9:b1:d5:4f:f3:0d:6c:6e:45:0b:17:88:69:a2:82:11:6f:51:
4e:67:d5:5b:95:e9:36:fc:62:ad:71:4e:cb:8e:d2:24:c4:21:
56:39:98:8c:31:b1:11:6a:db:ab:8b:06:7c:7a:ec:dd:0f:66:
ec:b5:c7:db:0e:49:d2:90:e1:6c:0d:7e:c5:4b:f1:d8:51:b9:
f3:c1:89:27:42:4e:f2:2c:97:0c:c6:84:b2:04:c4:ee:f1:f3:
28:c1:c3:ef:9a:7f:a1:af:2d:b5:f8:0c:ae:e7:9d:5f:53:ac:
9d:b6:5d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:36 2026 by rpki-client