Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144474.roa
File: AS144474.roa (raw, json)
Hash identifier: gEKh8Bl3FrmWwTYdtSoUGvHb4b1GESKMjQRccvZcC6o=
Subject key identifier: 06:48:33:AB:9F:B3:47:D0:F0:08:58:77:9E:06:FF:DE:74:79:C8:63
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 42769A9E08E98C38F586F5010BFC94AAC8B24BF1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144474.roa
Signing time: Fri 22 May 2026 06:05:24 +0000
ROA not before: Fri 22 May 2026 06:00:24 +0000
ROA not after: Fri 21 May 2027 06:05:24 +0000
asID: 144474
IP address blocks: 240a:a720::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:76:9a:9e:08:e9:8c:38:f5:86:f5:01:0b:fc:94:aa:c8:b2:4b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:24 2026 GMT
Not After : May 21 06:05:24 2027 GMT
Subject: CN=064833AB9FB347D0F00858779E06FFDE7479C863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:37:e5:a8:7d:d4:f3:dd:c0:55:ed:7f:20:15:
01:7c:e6:85:e9:e1:ff:5b:27:a8:f4:f6:91:14:c7:
6e:26:2f:b7:18:79:64:a1:7a:ce:81:a7:0f:da:3d:
f5:c1:67:54:ed:94:81:30:85:ba:92:e0:c3:ed:eb:
84:f7:1e:38:a4:92:a0:64:33:d7:ab:45:eb:f1:1f:
d0:e5:01:f3:f5:b5:25:8f:b0:00:a0:cd:ef:7b:be:
e7:54:3f:ed:59:ab:90:dc:11:6c:c5:c9:cb:fa:58:
22:a9:5b:fc:a2:a0:eb:48:68:3f:9a:6e:ba:cd:48:
f4:ab:e6:1f:de:10:29:7f:e6:dd:67:cd:77:30:df:
d3:e3:17:0a:63:27:d5:86:44:bf:3e:ac:eb:0a:15:
38:1c:bf:60:3f:39:49:8b:42:6d:c6:75:43:e9:05:
50:49:2c:f9:db:64:0f:b1:1d:45:e2:87:a0:94:d6:
be:06:b7:d9:34:c9:6f:90:88:20:4b:19:51:f7:b8:
dc:19:22:13:80:bf:ea:7b:2f:3a:3b:3f:1b:9b:0a:
48:fd:08:cd:bc:ef:75:d1:6a:ed:22:24:92:12:3d:
db:a9:28:3f:29:93:33:03:5f:8f:68:86:66:58:da:
e7:db:c1:cc:6b:15:c9:91:02:20:e2:45:e5:7c:79:
a0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:48:33:AB:9F:B3:47:D0:F0:08:58:77:9E:06:FF:DE:74:79:C8:63
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144474.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a720::/32
Signature Algorithm: sha256WithRSAEncryption
1e:bc:82:e0:a8:bd:8f:ae:2c:2c:28:81:83:9e:ae:bc:48:f4:
6c:ba:f2:6d:2c:b1:33:c4:3b:57:71:3f:92:7d:15:4c:b3:1d:
17:a4:6b:64:3a:71:a1:9d:05:0d:b7:d7:30:70:86:80:f8:e3:
76:85:7d:62:86:94:8c:18:fe:2d:ec:25:93:b9:29:d8:2b:64:
69:a7:5b:2d:c5:11:f4:29:18:47:e6:66:63:f4:64:70:86:8e:
37:8b:39:fb:23:95:34:d7:f5:92:0f:ee:98:6b:a4:f1:3a:3b:
ea:70:e0:31:6e:1c:3a:50:b4:52:b7:f5:6b:b8:fc:da:0a:a5:
c1:86:a0:b7:56:23:d8:5f:3d:ef:4e:0b:94:14:f7:30:9c:3a:
8b:36:76:dc:7c:6f:43:35:e3:b0:04:38:00:62:97:9e:72:c9:
e8:f1:8f:8c:a5:2f:b7:32:ec:84:64:4f:43:40:de:73:72:d7:
f2:e1:8d:d0:50:2b:f2:98:e7:ed:9e:72:22:24:06:34:6d:cc:
ca:dc:52:f6:02:fa:41:c4:2f:d1:3f:9d:71:db:3e:b6:10:6d:
08:70:eb:86:05:0d:fd:b7:ea:3f:1f:a4:22:9b:ec:c7:87:d5:
14:d6:7a:a5:d9:dd:54:ee:3b:4f:e5:08:af:a1:08:08:cd:83:
cb:2b:4a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:23 2026 by rpki-client