Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144479.roa
File: AS144479.roa (raw, json)
Hash identifier: ljf+jmmevy5WxQ1Up7raekzlPA2LcFTj1qquJhR0vhc=
Subject key identifier: 04:45:F3:1C:48:E4:6B:27:A1:E4:D8:08:F0:E9:D1:6F:1E:C1:18:C8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 671FD5134923F608D07D3075D49387E44DA6B7F4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144479.roa
Signing time: Fri 22 May 2026 07:41:13 +0000
ROA not before: Fri 22 May 2026 07:36:13 +0000
ROA not after: Fri 21 May 2027 07:41:13 +0000
asID: 144479
IP address blocks: 240a:a725::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:1f:d5:13:49:23:f6:08:d0:7d:30:75:d4:93:87:e4:4d:a6:b7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:13 2026 GMT
Not After : May 21 07:41:13 2027 GMT
Subject: CN=0445F31C48E46B27A1E4D808F0E9D16F1EC118C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:a5:c4:b0:91:0d:00:62:be:b8:6b:24:fb:
8b:b4:f2:a3:05:b7:39:be:44:83:45:d3:90:8e:9e:
b1:b7:5b:34:a6:32:31:b0:3b:d7:43:6c:39:65:a4:
ee:91:08:59:39:ca:8d:61:b2:69:89:a3:a4:53:d8:
e3:f4:88:22:d8:04:37:04:40:19:0f:6e:c0:14:19:
2c:a6:cf:c4:bf:95:2c:ba:74:e9:19:df:96:72:24:
ac:cb:c0:78:48:c7:79:c8:40:3b:c6:5d:31:33:97:
f7:0c:64:0d:e2:cc:79:4c:0f:05:11:03:b8:fe:a9:
c6:b8:43:08:d8:31:51:7c:0b:33:d0:4e:92:d5:57:
c9:a4:ad:12:c6:3e:24:cb:17:3b:a4:48:4a:b2:22:
12:a2:10:aa:e4:90:a7:59:84:e7:af:77:29:f7:5f:
45:04:f3:8a:f1:e2:ac:ff:85:8f:b1:4e:e9:4f:9b:
ac:82:af:bd:26:3b:42:f3:1e:74:9f:35:2c:89:95:
3c:a6:91:f6:e1:df:76:4d:aa:35:7c:28:05:6e:4a:
54:51:91:1d:13:59:bd:ca:fe:7c:83:98:90:7e:23:
6a:47:0d:d0:8c:c1:47:a8:32:12:35:de:c5:1d:f3:
d3:c3:37:d8:d1:db:19:30:0f:49:76:6f:da:6a:5d:
dc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:45:F3:1C:48:E4:6B:27:A1:E4:D8:08:F0:E9:D1:6F:1E:C1:18:C8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144479.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a725::/32
Signature Algorithm: sha256WithRSAEncryption
13:4e:69:f8:8d:4e:d9:32:94:5a:00:7f:2b:18:48:b8:9d:fc:
31:5d:5a:58:c7:bb:d7:fe:45:97:65:50:d3:39:22:e2:8a:1b:
02:bd:a3:70:22:b2:9b:cc:ff:2e:d9:5c:e2:70:01:5c:5a:a6:
f7:82:5e:35:83:4f:1c:c4:e3:8c:63:bc:90:05:25:68:1d:ab:
6f:9c:84:89:c7:d5:c9:9e:4e:3b:f8:0e:16:c1:e7:93:4d:cb:
c5:ba:b5:26:6e:cb:ca:d3:5c:4c:2e:43:94:db:25:4a:8a:e8:
62:10:3a:c2:3d:f7:40:b5:e6:4d:1c:b0:f3:9f:78:af:f9:e6:
eb:4c:60:df:ee:6d:9c:97:f3:38:fd:84:17:8c:8b:db:58:3b:
e1:1d:a2:f1:ea:b9:08:b5:ff:d6:8c:98:1d:58:7b:e1:ba:a7:
b0:5b:a8:73:09:42:92:c7:02:7a:7e:58:b4:1f:00:7d:5e:26:
e8:61:67:0f:cb:36:8b:a7:3d:54:b8:01:58:ba:fd:6c:0f:46:
fd:03:e6:e0:b3:81:1a:29:dc:24:09:5d:d9:00:fe:2f:c2:07:
18:9f:cd:e3:bb:bd:36:9f:b2:d7:71:f0:55:cf:dd:6a:b1:a5:
5c:23:bc:36:e6:0c:5b:96:5f:e8:93:79:56:90:38:54:39:9f:
1b:3d:6c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:41 2026 by rpki-client