Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144478.roa
File: AS144478.roa (raw, json)
Hash identifier: IHpmWY55BDSnutCQNXPqnzHoyYqgJOxdv734/dLReww=
Subject key identifier: A3:5E:A3:F2:7D:52:8A:B1:CE:25:31:E1:BF:1D:98:BA:5C:EC:B4:C2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2BAE692EAA820EAF0925915712BA8231DD24CCEC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144478.roa
Signing time: Mon 25 May 2026 02:22:22 +0000
ROA not before: Mon 25 May 2026 02:17:22 +0000
ROA not after: Mon 24 May 2027 02:22:22 +0000
asID: 144478
IP address blocks: 240a:a724::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:ae:69:2e:aa:82:0e:af:09:25:91:57:12:ba:82:31:dd:24:cc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:22 2026 GMT
Not After : May 24 02:22:22 2027 GMT
Subject: CN=A35EA3F27D528AB1CE2531E1BF1D98BA5CECB4C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0e:dd:1d:8b:bc:c1:81:b7:82:4f:13:40:a9:
ca:66:f3:be:79:55:21:8e:97:64:f5:eb:fe:4e:8d:
7d:64:28:a2:a3:ab:a1:6b:5d:78:5b:42:27:a6:06:
b5:27:48:ab:d4:17:c2:e1:7a:cc:d6:df:5a:0e:f7:
9b:9e:d3:dd:a1:54:72:3a:1b:b1:ec:0f:f0:10:70:
6f:05:99:ea:20:65:ef:18:74:ec:f2:16:8b:4d:3c:
82:d8:8e:e8:d7:cb:3f:22:b0:75:fc:70:40:41:8d:
7d:05:fc:0a:ff:2e:82:37:02:a6:95:e5:cf:d5:c6:
5b:a4:34:7c:50:9a:2e:9b:97:4e:07:5d:7f:74:10:
66:95:c9:b8:46:0c:13:31:88:8a:a9:72:bf:93:52:
47:76:48:26:60:54:b7:be:5f:ed:11:10:f5:3d:b1:
36:5c:90:e2:c0:d3:63:3c:6c:03:b7:9f:6f:70:58:
e4:e4:4e:87:d8:14:50:cb:c2:01:83:d0:f2:0d:de:
c2:3e:a5:32:7b:68:48:38:ea:7f:cf:a4:76:b7:1a:
2a:04:27:24:cd:4c:73:5d:f0:81:4b:58:4e:f6:21:
7e:eb:03:79:ed:d6:2d:cb:a3:66:01:48:a8:15:8b:
c1:cd:d7:30:db:55:20:cf:f4:38:bc:28:a2:d5:52:
01:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5E:A3:F2:7D:52:8A:B1:CE:25:31:E1:BF:1D:98:BA:5C:EC:B4:C2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144478.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a724::/32
Signature Algorithm: sha256WithRSAEncryption
29:1e:83:37:f1:e1:7f:76:e3:0e:64:93:d9:ec:e8:ef:9b:52:
11:54:89:61:0b:9e:80:27:fd:b8:4e:28:be:5e:73:db:b7:21:
1f:24:bc:c4:22:76:fc:15:7b:e8:53:96:f3:db:ce:47:38:de:
e3:44:62:1f:c1:a1:b5:89:5a:cd:c2:98:9c:0a:76:38:c1:16:
8b:88:f4:5e:30:9c:19:f3:53:ad:d7:b9:e5:b3:00:2a:b1:f4:
69:0b:23:02:fc:a1:9a:6e:59:7a:0c:ca:66:7d:76:4a:f5:c6:
d1:89:52:24:2d:2e:13:41:78:f4:ae:ef:e5:7c:a1:c2:a8:f7:
51:87:e0:b8:61:a0:ce:f0:a9:43:9b:d3:60:18:c4:f9:b4:f9:
c0:7d:75:8c:e6:ee:93:35:92:5b:02:6b:04:b8:73:eb:91:63:
ed:99:7b:5a:b1:ba:e5:9c:e4:06:90:35:e6:ce:d4:58:a1:81:
27:0d:1f:4a:54:2f:5c:90:59:91:db:82:bb:e4:7d:b9:37:4e:
4f:24:13:7e:9e:eb:aa:36:39:3a:2b:5b:07:59:ab:1b:7c:bc:
51:dd:6f:21:39:f3:62:f9:d8:38:ed:5c:f5:72:c0:1a:48:34:
7c:96:8e:e6:b2:94:d0:14:32:76:5b:3b:ed:d0:f7:53:63:1d:
68:7f:ce:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:13 2026 by rpki-client