Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144502.roa
File: AS144502.roa (raw, json)
Hash identifier: ibHXUgM3YS0p2LJz2lHQTK/gd9XMeMyZXVo+jt9cvGU=
Subject key identifier: 49:5D:23:5C:3B:3C:91:93:31:48:7A:79:B2:B0:AD:02:A4:80:47:C7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4E2D201774FD9BE11CA8C3BF3BE6E18DFC50127D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144502.roa
Signing time: Mon 25 May 2026 01:20:34 +0000
ROA not before: Mon 25 May 2026 01:15:34 +0000
ROA not after: Mon 24 May 2027 01:20:34 +0000
asID: 144502
IP address blocks: 240a:a73c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:2d:20:17:74:fd:9b:e1:1c:a8:c3:bf:3b:e6:e1:8d:fc:50:12:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:34 2026 GMT
Not After : May 24 01:20:34 2027 GMT
Subject: CN=495D235C3B3C919331487A79B2B0AD02A48047C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:65:0e:fa:63:ce:34:19:f1:ed:02:e5:4e:
2a:46:ed:4f:d3:58:06:24:f4:a6:c0:d2:1d:f3:13:
5c:8f:f4:86:cd:14:f9:54:9e:6c:7e:63:52:78:6f:
b7:d6:e5:55:ac:4f:24:ea:73:07:37:22:44:07:31:
86:1c:1a:20:51:4c:38:b5:e2:e1:81:64:e9:e8:70:
f3:d7:b2:83:21:c2:36:25:88:c8:be:97:37:3e:f9:
43:0d:c2:36:0e:2b:8c:34:36:52:24:ba:6d:89:15:
37:27:38:c8:29:4b:d9:3f:80:42:46:53:07:df:9d:
d1:83:36:ad:f9:8f:64:6b:86:2f:4c:3e:b3:b2:df:
39:92:95:0d:91:29:45:ed:c3:a9:de:29:00:af:42:
a0:1b:ea:ba:01:30:76:34:a9:7e:e4:b8:a0:ae:ed:
78:54:dc:55:2c:4f:bc:9c:3c:f7:4b:58:4e:57:96:
f8:f7:3d:e2:e8:6b:f3:7d:21:d3:f4:7b:19:a3:b6:
72:a3:7b:fe:2b:30:31:9f:da:d4:63:e3:76:49:bd:
ff:03:6c:fd:04:b0:01:7c:95:fd:e2:fd:0a:9c:69:
40:79:b0:1c:cb:5d:a7:c4:4a:c9:5a:3d:e0:ce:d9:
71:0d:04:7b:15:29:86:3e:2c:3d:97:41:6a:36:a6:
f7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5D:23:5C:3B:3C:91:93:31:48:7A:79:B2:B0:AD:02:A4:80:47:C7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144502.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a73c::/32
Signature Algorithm: sha256WithRSAEncryption
3b:c8:5b:f7:db:dc:43:3e:86:3b:fa:a6:cc:98:68:78:b5:44:
dd:5d:f4:be:18:5c:ce:bd:42:e6:a8:f6:e3:6b:ac:f5:d2:42:
a8:6f:a1:8c:90:bb:dc:da:2e:43:b8:e6:ae:56:6c:f5:c4:f2:
d5:e6:83:10:a1:e9:15:37:f2:10:02:7b:56:1d:c1:01:d5:a2:
63:d6:6b:84:04:d4:11:fd:d5:7d:f2:01:67:9d:23:31:3a:cb:
7c:8d:c4:0b:21:02:09:f8:48:c4:d2:8c:da:e5:70:b8:f7:00:
7a:f8:4d:1c:ca:5f:e4:c7:28:b9:3b:16:f7:9d:89:0b:0d:e3:
2d:eb:30:46:5c:d1:b9:f4:3f:50:bd:74:0b:a6:10:7f:9e:60:
d9:b6:ec:1c:fe:b2:1b:22:95:fb:30:a3:89:4a:c2:54:6a:89:
12:8e:87:09:05:34:4f:76:5c:27:50:f4:70:7a:91:ce:52:34:
94:be:30:a9:14:c5:c5:1b:7d:53:d7:f5:af:fd:70:a0:0f:5c:
bf:7e:fc:ea:ac:42:ec:a4:dd:c9:ee:29:cb:b7:f1:e4:9c:aa:
ea:9d:b3:9a:68:27:fb:42:0c:89:c6:08:73:16:d9:e8:4c:0d:
7a:46:06:58:85:ea:b9:95:16:9f:f4:f1:55:6f:b1:e3:d3:8a:
69:b5:94:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:27 2026 by rpki-client