Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144497.roa
File: AS144497.roa (raw, json)
Hash identifier: VA2C52JkPVPsX9wntUouoleN1c0jxcLr8Hn844jFq8E=
Subject key identifier: FD:8B:EB:F2:09:BC:38:4F:8D:F3:B5:0A:10:07:4E:22:F9:75:EE:3F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 614B23AC8F4C38DD9776E4D16A79093EE8236F4C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144497.roa
Signing time: Fri 22 May 2026 07:24:57 +0000
ROA not before: Fri 22 May 2026 07:19:57 +0000
ROA not after: Fri 21 May 2027 07:24:57 +0000
asID: 144497
IP address blocks: 240a:a737::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:4b:23:ac:8f:4c:38:dd:97:76:e4:d1:6a:79:09:3e:e8:23:6f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:57 2026 GMT
Not After : May 21 07:24:57 2027 GMT
Subject: CN=FD8BEBF209BC384F8DF3B50A10074E22F975EE3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:51:52:17:4c:8c:f7:e2:ae:ee:d2:53:94:
bf:65:e9:2d:d6:47:42:e9:73:0f:f4:b0:09:6d:e9:
fc:65:96:74:ab:81:ab:95:5b:da:f6:00:30:0e:95:
ed:01:ae:af:e1:57:27:c4:82:84:97:c8:d3:04:5a:
82:5a:a9:a1:17:92:d4:ba:d4:e2:a2:8c:7e:e7:5e:
e2:d2:b4:bb:9c:64:a4:b4:3f:e3:17:46:ac:b2:f0:
3b:54:4e:f5:84:b9:df:49:a0:fe:8d:da:1f:63:fb:
d9:d7:a9:ce:58:8d:e8:f0:82:76:eb:cc:f0:72:26:
53:1e:49:ad:ab:08:51:59:e9:91:da:e0:88:ec:d2:
7f:62:c9:2f:1f:25:6e:a2:80:ce:4f:7d:6f:91:91:
51:63:b9:c4:37:1a:b5:98:ad:2b:a2:65:bf:ea:de:
78:5d:00:03:ea:96:cf:00:8e:8d:53:1e:aa:66:46:
e3:a3:93:c2:f4:93:f6:06:08:16:76:28:a2:cb:ae:
b6:1b:ce:95:b2:91:92:4a:1d:e8:ff:97:4b:9a:f7:
76:3c:e4:f9:51:6a:0d:40:ef:0d:0a:ca:f4:14:37:
8b:91:86:bb:68:5e:ca:40:72:61:29:00:6d:15:9d:
fe:45:3a:98:86:bc:fa:56:67:b1:ef:81:bc:42:2e:
81:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8B:EB:F2:09:BC:38:4F:8D:F3:B5:0A:10:07:4E:22:F9:75:EE:3F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144497.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a737::/32
Signature Algorithm: sha256WithRSAEncryption
5f:21:a3:82:9f:08:92:1d:4a:e3:4a:f7:dc:60:16:d9:3f:93:
51:76:f4:d0:dc:33:dc:81:f9:2c:b7:60:9b:fe:4a:77:47:eb:
dc:a1:05:fa:b9:5c:ac:a3:1c:8f:b1:d5:1c:53:5d:c6:df:fb:
89:82:cf:78:24:af:3c:5b:66:d0:cb:d7:35:e0:d5:30:b5:f0:
32:14:f6:5d:38:27:71:4a:a7:43:bd:e4:01:2a:b1:e5:23:5a:
af:12:a9:42:8e:33:f8:d8:a6:aa:91:c1:bd:d8:f4:34:d1:e9:
2c:b3:c5:56:a6:98:97:87:10:74:1d:b1:8f:de:6e:53:08:28:
dc:39:f9:7d:44:f9:05:a8:ac:18:b8:06:06:b6:3f:bd:e9:72:
bd:67:94:54:90:f7:cb:1e:cd:4e:c8:89:49:c5:eb:ae:8c:d1:
28:0b:a6:3f:2d:44:1e:d5:c7:7c:b1:83:16:dc:72:a6:f4:54:
9b:77:31:8c:88:aa:7f:4a:f6:03:f7:29:1f:f6:f0:6f:c7:6f:
5a:29:47:e0:8d:2a:d0:92:30:37:ce:ec:4a:b2:90:08:2b:7e:
ef:dd:77:5f:a1:2a:5d:02:1e:e2:c4:64:89:cd:92:b8:d5:74:
e2:7e:e3:7a:f0:e6:91:d9:18:5d:21:9f:69:1b:88:70:a4:ca:
45:d9:0e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:43 2026 by rpki-client