Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144494.roa
File: AS144494.roa (raw, json)
Hash identifier: TPW34dxfAlRC5KPBUATZ+/hMlAP3QOaTAKC37pcr2ic=
Subject key identifier: 72:A1:D2:D0:8F:E8:00:AC:C2:38:D2:45:DB:4E:28:06:0C:D3:D4:1D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 580379940C1CE30461585BB042E6637B76843D2E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144494.roa
Signing time: Fri 22 May 2026 07:32:15 +0000
ROA not before: Fri 22 May 2026 07:27:15 +0000
ROA not after: Fri 21 May 2027 07:32:15 +0000
asID: 144494
IP address blocks: 240a:a734::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:03:79:94:0c:1c:e3:04:61:58:5b:b0:42:e6:63:7b:76:84:3d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:15 2026 GMT
Not After : May 21 07:32:15 2027 GMT
Subject: CN=72A1D2D08FE800ACC238D245DB4E28060CD3D41D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:16:e6:64:6c:d4:c7:8b:4b:c6:e6:21:cc:
b9:d9:2c:ea:8d:e8:d3:10:89:e0:d2:4f:67:fe:bf:
ba:d9:04:ea:fc:dd:35:35:fa:b0:32:96:22:9f:57:
72:1c:ad:02:15:56:a4:a8:38:d8:27:c4:2a:6a:6b:
94:0e:3f:74:75:a6:12:6c:81:8f:6f:f6:0e:2f:3a:
99:46:95:43:ed:69:07:40:c0:d2:1b:0c:b8:e2:3f:
f3:00:d4:92:21:93:b3:b9:f4:bf:b3:cf:c9:2a:fc:
80:e5:20:27:f8:40:ee:9a:93:9a:e5:4f:50:6b:7c:
9c:37:01:6d:b6:02:24:fd:0e:ae:04:fa:7e:b8:de:
36:7f:8e:92:2b:18:b3:0c:62:04:8d:bf:19:54:c2:
c0:b4:44:f4:77:12:d1:b0:3b:ed:04:55:39:9b:0f:
27:e6:95:30:87:4e:b1:77:52:90:0b:85:06:7e:ff:
98:76:7d:00:1f:b1:b1:45:b3:75:22:1d:72:25:aa:
29:3c:35:90:10:dd:5c:f9:83:4b:da:a7:08:ad:30:
d5:5b:f2:fe:fd:6a:78:6a:7b:ff:f0:ba:00:b3:ea:
5c:27:76:4b:2a:98:15:81:24:46:81:84:6c:44:f4:
8d:ab:ff:1e:25:ce:72:9d:32:a1:94:12:fb:36:e7:
c7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A1:D2:D0:8F:E8:00:AC:C2:38:D2:45:DB:4E:28:06:0C:D3:D4:1D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144494.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a734::/32
Signature Algorithm: sha256WithRSAEncryption
a8:12:cb:3e:0c:00:6c:4c:21:cb:df:06:20:98:7f:cc:34:27:
23:53:3b:06:80:4d:ff:c7:e3:ad:1f:b3:a9:10:14:67:fa:79:
d7:44:b3:b6:95:fb:26:36:62:90:c1:b0:d2:54:1b:07:05:8d:
70:ea:c9:e9:11:3f:c6:6e:e8:d5:95:37:d6:2f:8c:30:3d:5f:
c0:d1:bc:e5:49:06:9c:d6:27:94:fb:5e:46:a7:28:d2:4d:2d:
74:22:06:b0:78:06:8b:b3:d1:4f:a6:67:f5:26:16:8e:5f:b7:
ef:11:08:3b:e5:43:1b:92:67:0c:09:84:d0:af:5e:93:26:51:
77:cf:e2:d9:10:14:2a:49:80:30:7f:f3:e3:62:b5:2b:0f:fc:
da:07:99:e7:c5:c9:0b:bb:d7:77:fb:47:c1:75:2a:9c:41:64:
13:b1:00:8a:34:ff:fb:56:d9:80:20:84:6d:79:38:22:d0:10:
f9:cf:c5:96:e4:67:e2:98:d1:3e:4c:03:96:83:83:46:f0:ae:
2c:c0:69:9e:c0:69:cb:64:f7:19:85:9c:0b:15:77:ad:05:9d:
0d:5f:76:44:24:01:d7:68:da:4a:9a:65:95:d4:20:5c:d6:c9:
3a:97:f9:aa:f5:e5:d4:d1:6c:bb:7e:11:8a:16:bb:b2:0f:f4:
3e:f0:a8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:51 2026 by rpki-client