Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144490.roa
File: AS144490.roa (raw, json)
Hash identifier: UE8hRnDXa0JuwgteF8ucPo7IXIXRZPUE7cL4711SAx0=
Subject key identifier: E4:75:EF:47:EB:FC:4E:9A:9E:CF:04:4F:A1:1B:8C:6A:D9:E6:47:5F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2DB61E59AA658B083AF898F91BEF2FF51B66B8F0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144490.roa
Signing time: Fri 22 May 2026 04:08:09 +0000
ROA not before: Fri 22 May 2026 04:03:09 +0000
ROA not after: Fri 21 May 2027 04:08:09 +0000
asID: 144490
IP address blocks: 240a:a730::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:b6:1e:59:aa:65:8b:08:3a:f8:98:f9:1b:ef:2f:f5:1b:66:b8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:09 2026 GMT
Not After : May 21 04:08:09 2027 GMT
Subject: CN=E475EF47EBFC4E9A9ECF044FA11B8C6AD9E6475F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:88:b8:96:55:9a:87:4c:77:77:e9:7f:ff:89:
1f:b0:44:22:8f:08:cf:4d:d5:01:33:c5:ef:0b:ba:
b8:e9:e8:4c:8d:ec:89:b2:45:7e:e3:5e:db:8e:8a:
49:8c:43:e6:09:8c:46:40:5c:ab:fc:cc:2e:c5:5a:
d6:4e:d2:81:53:b3:1a:23:c7:3f:17:b4:90:1d:3d:
36:dd:87:9c:9b:44:af:c0:1e:e2:15:28:b9:b0:c5:
73:b6:08:95:39:88:c2:6d:fb:1e:2e:3d:61:e9:d7:
e2:f9:29:be:06:1a:f0:58:78:13:4d:84:49:f7:a4:
a9:59:62:3e:2f:e5:de:92:73:c0:f9:51:92:5f:da:
86:58:fd:6d:3b:07:cc:02:f2:62:3a:83:86:49:38:
0a:ce:ef:01:ad:59:ed:f7:8e:97:be:ce:61:91:21:
03:90:72:39:de:c3:91:cc:92:31:c8:2a:6e:ac:5d:
ae:61:9f:b4:11:ae:c0:4c:9e:76:eb:bf:be:85:d4:
7e:ba:8a:2e:c6:40:cc:45:c3:dc:25:4f:e3:96:5b:
6e:14:e0:77:57:7b:49:c8:15:6a:58:a0:bb:c6:79:
b7:dd:ee:5b:f1:26:ac:4f:6c:fc:f8:45:47:9f:66:
13:62:32:e6:27:3c:e4:c6:e2:c7:79:4e:96:6a:12:
be:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:75:EF:47:EB:FC:4E:9A:9E:CF:04:4F:A1:1B:8C:6A:D9:E6:47:5F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144490.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a730::/32
Signature Algorithm: sha256WithRSAEncryption
39:26:c4:f2:fd:52:1d:48:7b:14:4f:9a:6b:aa:fd:81:e8:1e:
2a:57:0d:d8:22:34:13:f4:d9:79:cb:66:ab:5e:32:04:fd:88:
ae:46:78:90:68:a0:ab:f0:3c:f2:b0:42:ab:ad:2b:1e:66:75:
a5:b8:29:5c:7c:f6:1c:6e:35:7d:09:74:e7:3d:50:8f:c2:40:
46:4c:00:b1:2f:f0:f7:d5:81:45:6a:a6:5e:d2:13:ce:cc:b5:
8b:e5:d6:ee:e0:8e:d8:50:53:e2:02:4c:2d:c6:c8:4f:b4:6a:
57:66:43:cf:13:08:91:ec:07:70:0a:b4:f2:70:c9:a0:6b:c7:
57:39:46:6a:32:e2:12:35:e5:34:1a:29:c5:1f:50:1a:03:88:
f4:a1:34:22:4d:c3:cd:ea:71:29:66:f6:bd:ab:a7:b3:1b:00:
3e:75:2f:36:74:14:eb:a3:32:75:a5:f4:8f:e6:ef:4b:9c:fe:
13:e3:ac:f0:44:36:3b:b5:cc:87:86:34:89:85:ca:09:7e:20:
bf:0b:a7:64:dc:3f:b4:67:7b:fb:de:e0:36:25:9c:91:48:f7:
09:10:e6:c9:13:34:d9:d5:47:88:c2:a4:07:56:64:e8:18:c8:
fa:ab:0d:b3:a1:25:67:39:63:c6:2f:54:b0:30:f9:d6:bc:24:
4d:93:2b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:04 2026 by rpki-client