Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144487.roa
File: AS144487.roa (raw, json)
Hash identifier: N3Rq9XFauw+O8WS/4HOfmrHSeFqU+gG0i1z9olwbj0A=
Subject key identifier: CA:F0:53:53:31:99:9F:82:8F:F5:95:EB:2B:FE:81:EB:2C:81:44:9A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 50E0D8722830D5E6434B1D8DB79623786C7BC84C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144487.roa
Signing time: Mon 25 May 2026 01:51:04 +0000
ROA not before: Mon 25 May 2026 01:46:04 +0000
ROA not after: Mon 24 May 2027 01:51:04 +0000
asID: 144487
IP address blocks: 240a:a72d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:e0:d8:72:28:30:d5:e6:43:4b:1d:8d:b7:96:23:78:6c:7b:c8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:04 2026 GMT
Not After : May 24 01:51:04 2027 GMT
Subject: CN=CAF0535331999F828FF595EB2BFE81EB2C81449A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:e3:5a:c4:8a:5f:1b:9c:52:d0:de:bb:cd:
ba:89:c8:b5:e5:bb:a2:ad:1f:db:9f:e7:82:05:10:
ea:97:af:16:95:91:b3:f3:7a:41:90:fc:96:33:f1:
74:e1:89:51:62:7d:ba:47:2d:9a:30:8e:7d:bc:9d:
23:83:22:ae:31:39:19:43:7e:94:bc:ae:5e:f6:28:
fe:58:a6:5a:5c:6e:fd:00:fc:dc:98:70:5e:c4:d6:
47:d5:c6:fc:79:ea:bc:23:0b:29:20:30:80:7a:6a:
8c:ad:a9:68:b8:bb:cf:f4:80:bb:ee:2e:87:ab:f4:
28:7e:d5:cc:2d:79:1b:58:35:81:0d:80:fb:a6:a4:
c7:8c:32:13:fa:bf:78:a3:30:28:a7:db:f1:e1:b6:
a5:d4:47:73:c1:0d:a9:1e:38:38:4c:b8:19:4d:39:
30:58:3a:6e:84:1c:2a:f8:d3:49:e2:c0:7e:24:f7:
fd:43:db:d1:79:4b:b4:9a:db:b3:e3:15:2c:de:f3:
a3:74:74:4b:7c:c2:59:d6:5a:9b:57:f6:c7:eb:81:
f5:b0:06:66:2f:8c:f6:9b:49:39:c8:7d:bf:b1:e1:
15:ae:34:4c:d5:9c:63:c6:c5:70:c3:83:c0:76:c5:
f1:05:c0:ba:28:b9:a7:1e:50:d3:c5:93:dd:3d:53:
8a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F0:53:53:31:99:9F:82:8F:F5:95:EB:2B:FE:81:EB:2C:81:44:9A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144487.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a72d::/32
Signature Algorithm: sha256WithRSAEncryption
04:7b:48:e5:d2:e4:d7:2b:d0:24:eb:50:27:18:0e:63:02:84:
d0:c9:fd:53:de:f8:55:ed:b9:af:4e:92:27:78:e2:64:31:67:
14:93:b4:28:be:44:bf:3a:7c:b2:5d:df:ad:a9:53:89:ed:c8:
b0:90:34:6d:84:bf:1a:0c:48:45:9e:09:aa:25:cf:e5:e8:08:
c4:78:67:94:7c:39:97:fe:38:12:6a:0f:6f:f9:7e:1e:38:fe:
19:b8:ab:cc:0f:55:ad:00:a6:08:61:eb:d5:f7:9e:9e:a0:8b:
fb:d6:45:92:43:9e:4a:be:e8:87:6a:aa:c0:29:7b:69:cb:7b:
8b:e0:e0:a4:f8:7c:8b:e1:fc:7a:78:ae:4a:33:80:8f:a8:81:
bc:74:cb:d0:f9:4a:ed:ad:06:21:af:99:f1:84:54:c9:92:3a:
8d:d7:b9:be:7f:f7:69:09:dd:a6:65:5d:55:82:66:1e:32:f0:
eb:25:96:60:e0:05:ea:4a:c4:4c:2b:9d:37:69:69:bb:04:2f:
3d:ed:92:f9:b2:02:a9:d7:77:33:86:b4:c5:43:2b:d6:9a:c3:
a2:28:4b:c2:32:13:d4:f5:ea:32:b1:2e:9f:ec:ec:73:67:25:
80:0a:1f:ce:ce:5e:5d:a2:e7:5e:43:45:2a:02:ba:62:e6:af:
8f:6d:f6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:11 2026 by rpki-client