Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144496.roa
File: AS144496.roa (raw, json)
Hash identifier: y5FbbF0p6AaKNBzN6FPJCOk7KWVQPSCMKvptf8gIChk=
Subject key identifier: 48:9C:A8:E0:03:03:12:78:AA:96:14:FD:59:D1:D5:3C:53:40:06:BB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7CBA8F4A104161F138EE8EB88087AAC0BA1ADDA0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144496.roa
Signing time: Fri 22 May 2026 02:47:58 +0000
ROA not before: Fri 22 May 2026 02:42:58 +0000
ROA not after: Fri 21 May 2027 02:47:58 +0000
asID: 144496
IP address blocks: 240a:a736::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:ba:8f:4a:10:41:61:f1:38:ee:8e:b8:80:87:aa:c0:ba:1a:dd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:58 2026 GMT
Not After : May 21 02:47:58 2027 GMT
Subject: CN=489CA8E003031278AA9614FD59D1D53C534006BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c9:d0:a0:41:90:7d:41:1d:4c:78:87:d3:cd:
7a:0a:ef:6a:22:91:39:bd:c5:45:9c:88:93:96:e5:
1b:f5:db:73:5c:fb:6c:00:4c:e0:5c:50:ec:5f:cf:
38:a9:e6:36:f6:98:83:53:41:e3:b2:d4:04:f5:f0:
77:f1:f9:65:0e:06:63:6a:13:78:80:47:e0:c4:9c:
e1:c5:e6:d9:39:85:20:d4:ba:d4:1a:d3:3a:6c:e8:
3d:7f:5f:dc:59:f0:9d:80:84:b0:d7:9c:82:09:aa:
09:e7:ac:6d:51:4f:8c:82:12:f5:60:f0:df:0d:67:
af:48:8f:4f:a6:84:f7:a1:42:31:86:9a:8f:c7:a3:
0c:77:5f:a8:20:9d:14:2d:76:bf:fa:b1:08:98:98:
3e:0c:c4:a8:55:ca:f7:f1:2e:3a:ec:b4:7b:cd:e4:
f1:43:35:92:ed:02:0e:da:21:4b:33:89:0c:2b:cd:
e5:27:70:24:a4:8f:98:34:8b:d6:7a:4c:2a:11:a7:
b3:09:5a:90:0a:5a:87:3c:2d:25:e1:94:39:b0:67:
41:87:4f:29:b7:6b:5d:a2:be:32:3c:74:a2:35:af:
f0:a1:60:45:20:7a:61:6a:b4:d0:5f:4f:6e:59:ec:
a4:aa:c3:b8:50:e6:aa:bd:ff:2b:1e:83:a6:85:86:
22:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9C:A8:E0:03:03:12:78:AA:96:14:FD:59:D1:D5:3C:53:40:06:BB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144496.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a736::/32
Signature Algorithm: sha256WithRSAEncryption
49:ed:81:91:7a:c8:f5:2d:d3:82:e1:da:a3:3a:19:19:a5:f9:
78:09:bf:85:b8:b2:95:72:f7:c6:5c:13:41:9b:7d:ac:7b:76:
1f:73:be:98:e1:76:e8:9d:06:e2:94:2c:f6:19:a5:6c:9b:f2:
64:10:1f:eb:75:4b:86:35:66:ee:cf:9b:bf:fb:12:39:03:06:
fa:a1:cb:08:47:df:cd:89:6b:ed:f5:f9:f1:a9:be:b6:46:56:
09:9b:c1:e4:73:d9:46:e9:7d:11:c1:93:d3:59:00:46:ab:91:
26:af:b8:4b:97:ac:29:d4:ea:fc:eb:55:af:64:66:ff:6d:ff:
98:9b:52:29:21:41:2c:fa:a8:5b:1e:0e:69:b4:2e:6b:38:e1:
c3:0a:30:e7:53:5f:e4:b5:20:f2:be:8b:c9:b9:92:df:3d:1a:
bf:27:b5:5b:83:70:2d:25:c0:21:be:3d:e8:20:90:a7:ec:a6:
1a:c7:65:29:ca:03:11:e3:89:97:c8:c2:1b:7d:78:ed:13:77:
4d:05:71:ce:81:92:a1:53:9a:ba:d5:64:aa:2f:68:cd:e1:40:
04:df:9e:1a:98:75:3a:d9:a4:eb:7a:2c:fb:09:4f:ac:fb:00:
86:b6:39:16:fb:15:c8:1c:d2:fb:e8:87:e1:83:e1:e8:31:9e:
42:c3:e2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:06 2026 by rpki-client