Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144500.roa
File: AS144500.roa (raw, json)
Hash identifier: 27w72EZdP6/+9CWrzvFqMFK/nUsQ1KAShecSFflRI4E=
Subject key identifier: AC:F1:D9:0A:4B:3F:C7:0D:D3:7F:76:3B:0D:7A:4B:30:8E:2E:76:4F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 42A9C1C7EB7855BC1D1D9FB342DEBF853C5E9EDE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144500.roa
Signing time: Fri 22 May 2026 06:05:27 +0000
ROA not before: Fri 22 May 2026 06:00:27 +0000
ROA not after: Fri 21 May 2027 06:05:27 +0000
asID: 144500
IP address blocks: 240a:a73a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:a9:c1:c7:eb:78:55:bc:1d:1d:9f:b3:42:de:bf:85:3c:5e:9e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:27 2026 GMT
Not After : May 21 06:05:27 2027 GMT
Subject: CN=ACF1D90A4B3FC70DD37F763B0D7A4B308E2E764F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:f4:21:a3:53:5e:ce:25:78:ae:07:17:29:
a8:a7:7f:67:6c:b7:af:86:18:18:a3:19:e5:e5:1f:
8b:a7:79:d2:5c:f2:a5:92:bf:7e:ce:82:55:de:a9:
d9:95:6f:ff:42:a5:4b:c8:32:f8:d0:2c:6b:97:d2:
8c:9d:d0:45:e2:5c:6d:7e:d3:2f:e3:a9:84:df:e0:
de:ea:e1:4c:86:55:2b:a0:6c:74:8c:88:68:12:30:
42:98:fb:ee:59:11:af:71:fc:53:77:9e:49:e2:7c:
ab:c7:da:5d:ba:ff:d4:79:d4:bf:3f:f1:87:cf:1f:
6e:7c:66:5e:16:31:a0:17:5f:7b:3c:06:18:63:3e:
aa:93:6a:53:ff:08:c8:0b:03:97:74:2e:4e:4c:08:
e4:00:52:46:3a:ee:b0:65:a6:05:97:64:65:84:e1:
2e:1e:f2:31:1b:00:d2:9c:d3:df:24:23:25:c2:25:
69:40:49:3c:86:a2:50:4b:e4:c4:05:2f:d8:1f:40:
d9:6a:9c:6b:24:6b:d7:57:96:e8:08:16:de:2b:04:
5c:28:68:ee:e4:cf:39:d5:4c:c6:5a:04:dc:29:79:
72:d5:8e:92:f2:0b:ec:42:a9:6c:64:5e:58:78:15:
51:4b:b9:b5:27:2c:9e:d5:8d:d7:88:3c:03:17:9e:
98:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F1:D9:0A:4B:3F:C7:0D:D3:7F:76:3B:0D:7A:4B:30:8E:2E:76:4F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144500.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a73a::/32
Signature Algorithm: sha256WithRSAEncryption
12:1e:ab:25:72:87:c0:17:2f:fd:fb:f8:9d:9c:fc:73:f5:c3:
a9:f6:ee:27:11:91:82:9b:17:ee:c6:e2:9a:8a:f3:fc:b7:40:
cc:04:6b:6e:8f:17:2e:88:8f:3d:03:b5:0c:8c:a5:79:52:3a:
35:67:0d:72:cc:50:a4:c7:bd:a9:2e:d4:68:8c:5c:51:60:ce:
d8:45:ab:50:e9:13:fe:87:09:c4:32:b8:be:88:11:c3:f0:cc:
9b:f9:88:45:4d:4a:b1:0a:d1:44:07:eb:51:46:20:4c:1b:0c:
9d:ba:bc:6a:b0:f3:94:02:60:2f:a6:36:dd:25:9e:af:e2:21:
c0:74:da:c3:90:d7:99:d8:57:91:15:56:85:3b:dc:de:ce:31:
1e:d1:a4:67:72:21:dd:24:b0:7e:f5:35:ff:6f:d7:97:37:05:
21:9c:59:69:d0:f2:d4:06:bc:fb:87:c3:88:66:d2:88:8f:53:
ab:1e:d3:3e:6d:cf:0f:27:6b:8e:2f:1b:2d:a7:c9:5a:94:95:
be:8e:fb:bd:ee:b0:7a:85:bb:fd:11:46:8c:f1:58:db:ec:2a:
ff:6b:6e:bb:83:29:ac:df:0d:da:d4:53:db:87:9a:49:c1:73:
42:e4:75:d7:c1:0e:b2:1d:ba:8f:09:11:ec:4a:ca:cd:df:ef:
3e:de:bc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:49 2026 by rpki-client