Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144513.roa
File: AS144513.roa (raw, json)
Hash identifier: 3vHjubBhhHzlOA8L2ztxZLnlTz+94RGV7XfXqJZkfoY=
Subject key identifier: CC:E0:97:E2:4F:55:60:E3:61:86:2E:42:94:A9:2C:22:7A:27:C7:86
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7FE944929F59542407D547AA05C6F71ED95D8E8D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144513.roa
Signing time: Fri 22 May 2026 01:50:37 +0000
ROA not before: Fri 22 May 2026 01:45:37 +0000
ROA not after: Fri 21 May 2027 01:50:37 +0000
asID: 144513
IP address blocks: 240a:a747::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:e9:44:92:9f:59:54:24:07:d5:47:aa:05:c6:f7:1e:d9:5d:8e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:37 2026 GMT
Not After : May 21 01:50:37 2027 GMT
Subject: CN=CCE097E24F5560E361862E4294A92C227A27C786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:4a:ff:fe:34:f2:ff:0b:04:e7:a3:8a:ca:
1e:05:2c:93:9f:9e:7e:a6:a9:59:a0:59:0e:5e:4d:
8d:58:de:16:fc:83:49:8f:65:47:60:18:25:d9:d2:
88:de:ce:9c:81:82:ce:8f:d0:3e:3f:05:c2:ac:6d:
c4:9f:16:f2:a0:06:42:63:b1:e0:eb:33:ff:6d:d5:
32:90:38:45:9b:47:2e:f6:14:7e:5f:38:47:cb:9d:
bf:88:8d:76:6a:5f:e3:f0:ad:59:50:20:8b:ef:23:
0c:71:01:23:a5:7a:e6:7a:0d:fa:6e:21:1e:1d:24:
e0:44:af:09:2a:97:d2:e9:65:6a:70:9d:28:21:68:
f4:3a:8a:4f:f3:32:e5:53:a2:23:22:e1:f1:f4:c0:
93:27:35:ba:27:76:83:0c:46:fd:22:69:7c:b2:00:
72:93:9f:02:68:09:b9:fe:2d:a6:f0:90:c8:08:b7:
12:34:9d:84:03:aa:8d:ca:99:13:36:06:ab:57:87:
b8:dd:5a:94:83:c8:5b:b9:c5:e3:49:ae:aa:af:ba:
ae:f2:d8:e8:0c:b9:aa:ed:53:5e:f8:e0:e1:32:0e:
8e:98:f3:9e:21:2f:95:3d:08:9e:7b:67:8f:a7:eb:
0d:3b:1d:09:ac:f8:e8:9a:ea:94:ad:68:33:1d:6f:
04:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E0:97:E2:4F:55:60:E3:61:86:2E:42:94:A9:2C:22:7A:27:C7:86
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144513.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a747::/32
Signature Algorithm: sha256WithRSAEncryption
93:82:b3:e8:84:b4:cc:e0:02:c7:7a:09:57:79:d2:1b:b4:81:
38:ae:c7:6c:b8:5a:63:d1:93:dd:c6:31:30:ef:4a:aa:d0:1e:
c4:a8:f7:99:93:c6:bc:8b:95:63:ed:bc:a1:b7:70:54:37:77:
de:ff:20:c4:a2:04:08:dd:bb:3e:2d:85:29:9f:ea:6a:51:67:
cb:a4:eb:f1:24:62:7e:d7:6f:c9:24:b1:07:c4:f6:93:3c:5a:
b5:d5:bc:53:11:fe:ae:a8:cf:1f:45:b2:c0:ea:c9:49:c0:45:
11:64:13:11:e1:69:d3:fa:38:cc:2b:25:9a:5a:98:e4:19:f1:
23:15:23:62:d6:ae:59:8d:1f:42:fd:d2:9c:86:44:ca:e5:05:
31:90:cb:75:62:46:c0:fa:cb:89:33:4b:85:14:62:69:ec:76:
1c:d8:2e:ee:08:b2:6d:8e:a2:ba:fd:b6:14:8f:ef:24:d1:36:
c3:56:87:f3:a6:b1:18:43:1b:35:79:53:7f:dc:8b:52:a4:91:
91:f6:22:7a:34:65:36:ba:9c:db:fd:d2:7e:7e:4e:f5:26:b0:
2d:6b:4e:af:17:18:b0:bb:ee:f4:8f:b3:22:0d:c5:20:a2:62:
e3:97:ca:2c:66:f9:3d:fa:39:45:7c:05:39:30:54:e7:76:85:
72:9d:0e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:26 2026 by rpki-client