Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144499.roa
File: AS144499.roa (raw, json)
Hash identifier: Kz4DY7IA4tztUR4sRp20X/tYl0kBJrylp7LgThk98FA=
Subject key identifier: 2A:2D:54:66:FD:60:4C:3B:3A:06:AF:FC:04:B9:84:0D:4A:06:FD:13
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6C62003E180037738759BBBBA015081C081309B7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144499.roa
Signing time: Fri 22 May 2026 07:24:49 +0000
ROA not before: Fri 22 May 2026 07:19:49 +0000
ROA not after: Fri 21 May 2027 07:24:49 +0000
asID: 144499
IP address blocks: 240a:a739::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:62:00:3e:18:00:37:73:87:59:bb:bb:a0:15:08:1c:08:13:09:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:49 2026 GMT
Not After : May 21 07:24:49 2027 GMT
Subject: CN=2A2D5466FD604C3B3A06AFFC04B9840D4A06FD13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cb:af:ea:23:ad:aa:3e:27:2a:c3:1c:1d:0c:
8e:b0:e6:bc:1c:9e:1f:f0:88:ab:e5:f5:dd:28:b8:
cb:37:d5:3a:c3:57:3d:ee:b6:ea:bf:3f:06:f8:3a:
f4:e3:49:86:97:c3:fc:c5:7e:d6:a2:0c:17:80:b3:
b1:ca:50:29:96:f4:f8:da:fd:1c:a1:cf:ec:33:e4:
a2:a8:47:d5:f5:de:68:20:d2:aa:49:32:a3:01:a4:
72:f6:d7:29:7b:7d:3d:9a:2c:56:ab:5b:a5:63:c5:
27:71:10:b3:fa:45:a2:ac:21:4f:a5:17:9a:64:12:
1b:45:1c:e7:f4:2e:4c:a7:a7:8e:d1:3e:ed:81:ac:
77:ce:91:f6:b3:53:c0:4f:6e:51:db:f6:d4:d8:06:
56:a8:ff:43:08:da:29:9c:61:76:51:55:71:9b:5a:
c8:76:13:ac:7e:6b:c7:4f:90:23:a6:2b:73:4d:d3:
f9:b0:ba:f7:b4:e0:07:22:b6:13:ec:bf:8d:69:c5:
38:e7:6e:18:27:46:36:8e:45:81:d6:80:31:d1:f4:
89:0d:fa:99:66:78:93:ae:5c:a3:5a:c5:78:e5:3f:
ab:ed:2e:a8:83:5b:71:5b:d8:8c:44:68:c2:c2:0c:
5e:96:5f:5c:cf:0d:2c:93:68:3f:6e:ce:6c:c6:16:
c7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2D:54:66:FD:60:4C:3B:3A:06:AF:FC:04:B9:84:0D:4A:06:FD:13
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144499.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a739::/32
Signature Algorithm: sha256WithRSAEncryption
49:e8:1c:0e:fa:75:42:56:ca:c3:95:1c:d3:78:82:8a:43:9d:
f8:6b:31:67:2e:df:16:ed:0f:a1:20:5d:4b:3a:25:82:a2:af:
11:7e:52:c2:83:d9:18:9e:80:ab:8e:51:d3:1a:9c:05:db:9a:
20:b4:43:06:38:f0:75:f9:ae:75:a2:3f:28:c6:e7:0f:c1:7e:
5e:ce:89:99:af:e0:c9:26:92:ef:9e:58:7d:fc:89:3a:cd:8f:
50:35:d7:f2:11:92:2a:2d:ec:66:47:b4:90:2f:9f:85:43:94:
dd:27:bf:5f:86:7b:ba:dd:c9:8e:a9:62:46:99:54:31:b1:31:
0a:dd:a9:da:a3:59:99:97:ad:71:bd:e4:d5:07:4f:0d:35:dd:
db:c7:bf:7d:86:17:cc:c1:f3:ab:80:27:e5:7c:a2:cf:96:12:
fa:c8:03:2e:b8:93:df:c9:b9:1e:40:61:19:bf:8f:98:83:ce:
0a:b6:7d:99:6d:1d:fa:c3:9d:d5:4b:bc:0d:4c:ee:d7:f1:0a:
75:1c:4e:de:b3:58:ff:34:35:b4:04:c0:45:2f:e3:17:34:92:
1f:8d:16:78:42:cc:3b:6c:25:5e:de:da:9b:6f:85:b9:54:5f:
3b:2b:08:33:91:4d:b6:60:76:13:07:5f:ad:7e:08:89:e6:93:
7e:b0:4c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:35 2026 by rpki-client