Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144491.roa
File: AS144491.roa (raw, json)
Hash identifier: 4N+h/TU7DZreG5H2ktK6cQ2TgypudNT8lNvqtvL2UQ8=
Subject key identifier: FC:9E:45:47:96:DC:E3:62:19:A0:40:45:B8:DE:3E:90:23:11:83:60
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 51B7B26B8C39DDC37098E472BD8D9A0365FFC454
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144491.roa
Signing time: Mon 25 May 2026 01:38:20 +0000
ROA not before: Mon 25 May 2026 01:33:20 +0000
ROA not after: Mon 24 May 2027 01:38:20 +0000
asID: 144491
IP address blocks: 240a:a731::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:b7:b2:6b:8c:39:dd:c3:70:98:e4:72:bd:8d:9a:03:65:ff:c4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:20 2026 GMT
Not After : May 24 01:38:20 2027 GMT
Subject: CN=FC9E454796DCE36219A04045B8DE3E9023118360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:57:c0:d1:14:30:8e:5d:64:e3:96:7b:2c:99:
c0:9b:07:ba:cb:5a:6d:47:f3:ed:c8:dc:20:0a:26:
e0:37:70:3f:e3:64:98:c7:3f:a3:6d:71:ad:a9:72:
e1:94:3c:f3:84:6f:ed:eb:d7:9d:0e:80:bd:7b:89:
bb:92:17:f3:03:ef:1a:d7:a6:ef:85:83:38:6a:af:
c5:61:04:88:63:9c:10:f1:3e:4b:d0:23:f5:2f:5e:
2b:2e:aa:ca:b1:e4:c6:cb:24:61:80:3a:5a:92:72:
d5:18:ec:3f:5b:00:f2:ee:dd:72:b3:8d:c2:47:95:
ce:5f:5e:a0:b1:26:94:c6:bd:87:c4:eb:c4:c3:1b:
86:67:30:c7:ee:c6:0b:38:bb:94:16:ad:5b:85:0c:
52:29:0a:e8:08:36:e6:09:cb:7c:2e:89:d4:06:2e:
a9:6d:31:6f:95:85:04:be:02:3a:97:89:77:7f:fa:
cb:88:dc:7b:24:e5:76:ab:5e:07:ba:2d:92:e6:89:
21:c5:3f:bb:52:34:1d:0d:5d:e1:a9:58:72:cd:cd:
ae:d2:06:40:f8:65:ca:5c:91:64:b1:67:03:2c:81:
fa:54:b6:1d:ea:dd:a1:e1:b9:1f:f5:5e:f5:bf:85:
fc:26:6d:b2:dc:ec:b9:70:34:99:34:97:e2:b8:3c:
d4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9E:45:47:96:DC:E3:62:19:A0:40:45:B8:DE:3E:90:23:11:83:60
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144491.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a731::/32
Signature Algorithm: sha256WithRSAEncryption
57:81:3d:d5:45:1c:82:af:e6:40:db:32:53:a8:58:89:eb:3c:
c1:8d:d4:65:41:f1:11:39:bf:3a:40:30:37:44:cf:65:e7:83:
fc:91:73:99:21:7e:5e:79:2b:e3:6f:e8:cd:c2:e3:a9:0a:a2:
a0:42:f6:8e:25:06:ea:16:57:c4:7c:45:2a:b4:a7:7b:69:c9:
d3:4d:b0:e9:a6:5d:23:78:72:c5:8d:c6:7c:ef:93:84:32:18:
76:b5:fd:4b:b3:42:bb:e3:23:f8:52:da:85:55:69:4d:38:f7:
8e:a8:56:42:fd:45:96:65:f9:b6:93:f3:d8:a6:8f:f4:a1:74:
ec:b2:bc:89:bc:c7:2c:2a:d7:ed:28:3d:e0:51:b5:f6:88:5f:
90:9e:66:5e:4b:cd:2f:be:24:1d:9e:5f:ed:30:d1:3f:88:17:
92:60:40:8a:56:b6:4c:fa:c0:78:1c:7b:61:1e:49:7f:09:b0:
9c:71:40:92:47:2c:7a:11:0e:1d:8b:ec:82:37:4d:23:b5:26:
2d:b9:b1:87:9a:f4:58:5d:12:24:7d:47:10:7d:06:e0:16:b4:
d0:c2:2f:65:ab:03:62:49:bf:f1:ed:54:0a:bf:84:a2:f9:8a:
ae:38:44:80:0c:83:40:9d:fe:54:bf:70:1c:7d:dd:ad:3c:48:
c0:ef:e8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:07 2026 by rpki-client