Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144503.roa
File: AS144503.roa (raw, json)
Hash identifier: PEscv+/bp9IbSAvyCVdmj41fD42t+DDGZ1arNUI93PA=
Subject key identifier: E7:AD:BE:80:1F:5C:D3:87:2F:02:96:EF:EF:03:11:CB:4D:2F:20:48
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0F2A91E3CB3F4FCD532C34D928CEFDE7930C778D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144503.roa
Signing time: Mon 25 May 2026 06:49:15 +0000
ROA not before: Mon 25 May 2026 06:44:15 +0000
ROA not after: Mon 24 May 2027 06:49:15 +0000
asID: 144503
IP address blocks: 240a:a73d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:2a:91:e3:cb:3f:4f:cd:53:2c:34:d9:28:ce:fd:e7:93:0c:77:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:15 2026 GMT
Not After : May 24 06:49:15 2027 GMT
Subject: CN=E7ADBE801F5CD3872F0296EFEF0311CB4D2F2048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6e:d1:88:7d:cc:cd:69:32:c6:6f:62:0f:4d:
b0:e7:98:71:96:cd:4f:2b:28:86:41:6f:28:14:74:
ee:67:c2:db:a2:b4:bc:48:7e:87:f4:c2:d2:ea:c3:
a9:db:0c:05:22:b8:67:32:a8:6a:27:72:c6:5c:59:
45:5e:d7:68:f6:91:af:95:be:19:ce:38:25:9f:85:
e6:f0:37:56:c0:97:d7:41:d2:94:c9:ae:5f:2f:32:
be:f4:27:6c:29:61:ab:e9:5b:3c:97:65:4f:e9:f7:
02:1b:d5:6d:5b:71:d4:64:06:5b:67:48:7e:08:24:
fb:cc:d1:80:c3:85:52:f3:0d:bc:c1:30:18:7b:c8:
86:47:7a:d1:6c:fb:60:f6:54:ef:0d:34:e2:f2:61:
73:31:66:83:70:fd:c5:0f:08:f4:bb:ab:be:72:90:
52:68:16:81:ca:df:fd:a6:a5:c5:15:ea:b7:0c:96:
12:17:d8:45:af:6e:08:89:ea:43:dd:2f:fb:7b:fa:
b0:e0:a3:5f:61:96:ac:ed:7c:06:fc:96:26:8a:da:
db:81:3c:f6:72:0d:6c:f1:6b:df:7d:d5:e4:6e:6a:
04:2d:27:0a:65:39:df:20:ef:e5:e1:bf:21:ca:1f:
8b:e3:c5:08:2f:f7:52:76:50:06:7a:0e:e4:85:6f:
93:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AD:BE:80:1F:5C:D3:87:2F:02:96:EF:EF:03:11:CB:4D:2F:20:48
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144503.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a73d::/32
Signature Algorithm: sha256WithRSAEncryption
63:eb:30:7e:86:29:1f:ce:7a:9d:52:2a:39:7b:80:72:e5:96:
db:d4:37:f9:a6:50:3a:8c:e7:7a:21:c8:7a:08:2e:e4:f6:b6:
9e:01:0b:b2:78:f2:6f:41:df:cb:06:a0:fa:8c:54:58:7e:57:
1b:95:15:21:f3:d0:fb:c9:5d:d2:f8:0c:69:d7:0a:bd:a6:f9:
28:77:71:c5:c5:7b:49:72:eb:30:dd:a0:87:a8:3d:3e:44:fd:
05:c3:b5:d5:97:95:27:e3:8d:67:ef:81:d1:11:2b:15:b3:91:
00:ab:49:1a:4f:6b:07:67:e6:27:68:d3:47:3c:d2:4a:ca:50:
89:a5:74:ff:c4:dc:83:b5:1b:b7:01:a1:95:c9:13:95:df:e7:
c4:cd:36:63:8f:d5:54:d7:1a:92:d8:e0:6d:73:3e:98:46:1e:
68:f0:2b:58:dc:b9:0c:84:6d:a2:b2:ef:9e:42:c2:f8:f1:9a:
f0:6b:7f:3d:69:35:40:f9:73:e6:4a:a0:43:02:72:82:70:bf:
8a:ee:95:c5:13:bc:aa:55:b3:c2:a7:41:54:40:7f:c3:cd:b7:
c2:72:f3:9f:16:4d:f9:da:8a:39:52:0c:66:d8:fe:f6:f1:6c:
cc:ef:1d:eb:2b:02:8c:34:d0:ec:3a:c0:c6:b5:76:d0:b3:54:
c8:9d:4a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:47 2026 by rpki-client