Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144509.roa
File: AS144509.roa (raw, json)
Hash identifier: ktBY7V2uqzXxRTuxqzYRzRbmwvDCaNDtlh42/kCSDGE=
Subject key identifier: 57:29:EE:FD:F7:FD:47:7A:F1:A3:10:33:54:4D:9C:B8:63:D4:B4:F8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1C27D8F0E02D69201DA4596705E0E0DFBB4CC293
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144509.roa
Signing time: Mon 25 May 2026 01:38:18 +0000
ROA not before: Mon 25 May 2026 01:33:18 +0000
ROA not after: Mon 24 May 2027 01:38:18 +0000
asID: 144509
IP address blocks: 240a:a743::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:27:d8:f0:e0:2d:69:20:1d:a4:59:67:05:e0:e0:df:bb:4c:c2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:18 2026 GMT
Not After : May 24 01:38:18 2027 GMT
Subject: CN=5729EEFDF7FD477AF1A31033544D9CB863D4B4F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4e:b4:c9:8f:45:bd:7c:5c:9a:fd:9e:b6:26:
a9:15:7c:6b:50:6a:d1:bd:5a:32:78:92:a3:ec:51:
8e:5a:39:dd:7f:c8:4d:05:19:e1:25:c4:e2:16:33:
4c:13:34:b9:ad:f7:3b:ab:49:94:3e:53:90:1a:ec:
77:f0:19:23:dc:14:3b:67:70:8c:5e:20:3e:80:bc:
cc:76:9e:fe:41:ec:ed:7f:b1:88:88:18:ea:14:ae:
7f:a6:41:59:24:06:0c:c8:b1:97:0d:1d:f9:5d:96:
f0:e3:2c:a5:4d:a9:cf:a0:34:eb:a3:1b:ed:64:ac:
e0:5a:84:2e:c0:04:55:5c:50:fe:c1:7c:6c:d3:f2:
26:11:48:56:80:50:b9:16:ce:46:d1:74:ef:74:bb:
ff:88:8a:1e:6c:b5:a6:63:a4:56:aa:43:b8:cc:cd:
79:66:9f:5f:d1:b0:24:0a:b9:b2:29:d0:34:3a:52:
7a:39:f5:85:e2:6a:d4:7f:9d:81:89:4b:53:3c:55:
f2:5d:2d:66:5e:93:99:04:f6:a4:08:df:e9:6f:37:
9f:f9:ee:96:d2:f2:67:d8:2f:80:a3:48:c7:1c:29:
47:98:4f:7c:1b:11:2e:e6:c1:92:e1:40:f1:88:20:
33:75:37:e6:8e:d7:fe:a3:f4:51:5d:b5:fe:dd:b8:
b3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:29:EE:FD:F7:FD:47:7A:F1:A3:10:33:54:4D:9C:B8:63:D4:B4:F8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a743::/32
Signature Algorithm: sha256WithRSAEncryption
26:4d:d0:39:47:7a:53:26:d6:85:fb:80:f0:60:c1:3f:b4:c4:
55:45:b6:a4:8a:b1:ec:25:ca:ae:2e:33:cd:06:01:61:c9:d4:
3d:d5:5b:a2:13:06:f7:13:fe:b3:79:85:8c:cf:d4:65:86:d4:
8f:bb:30:10:b0:5f:d8:4b:88:a8:0d:f9:37:33:8d:ef:fe:da:
d6:eb:58:00:68:ee:79:bb:64:0c:88:59:25:d7:68:8b:19:dc:
5d:51:fb:83:c3:9a:77:5b:0f:cb:4c:a5:cc:35:21:5e:52:92:
75:02:b2:f1:61:c7:47:ae:99:ba:c0:d2:33:a4:c4:8c:98:ac:
09:ab:65:99:0c:70:92:e0:c2:45:7a:a7:4a:c0:af:31:3a:73:
d1:d4:09:c4:f5:be:16:51:91:dd:cb:37:5c:5c:fd:c6:e4:c4:
cf:f1:9e:42:5a:d7:f2:3d:ae:ff:40:82:5d:3f:22:9b:02:f5:
4f:e6:0b:fb:b4:ca:46:0f:2d:a5:d8:d7:3b:49:2d:aa:a7:85:
f8:19:53:6f:7f:aa:55:e7:d6:25:e5:68:c8:38:4f:ce:ca:d1:
c4:e1:7e:9c:97:18:34:1a:19:9b:31:d6:10:2c:63:6e:70:a3:
c4:22:aa:df:46:ea:17:b3:dc:bf:0a:80:fb:a5:58:e8:e2:2a:
6a:b3:38:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:50:00 2026 by rpki-client