Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144516.roa
File: AS144516.roa (raw, json)
Hash identifier: ZlBwKSZlsEq+3kG/qIPOFHtg2vNeL5B5lM25igpacMI=
Subject key identifier: 94:C1:5C:E3:75:F6:11:82:BC:9E:BE:3A:68:BA:23:03:4C:74:16:A2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 668BC8031BED5E8B3406CDFDD6E04FC28A58A5A1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144516.roa
Signing time: Fri 22 May 2026 06:58:47 +0000
ROA not before: Fri 22 May 2026 06:53:47 +0000
ROA not after: Fri 21 May 2027 06:58:47 +0000
asID: 144516
IP address blocks: 240a:a74a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:8b:c8:03:1b:ed:5e:8b:34:06:cd:fd:d6:e0:4f:c2:8a:58:a5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:47 2026 GMT
Not After : May 21 06:58:47 2027 GMT
Subject: CN=94C15CE375F61182BC9EBE3A68BA23034C7416A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c2:d5:13:ea:6e:51:57:59:00:c8:b5:b8:53:
17:ab:eb:61:f3:ec:55:12:94:7b:fc:73:57:48:d5:
cf:7e:97:57:43:20:b5:06:07:e8:05:4e:dc:59:7f:
02:7f:f3:1d:ac:aa:9d:ac:4d:34:96:f2:f4:48:c3:
bb:59:0a:06:0d:11:ea:e8:f2:17:b1:a5:d0:41:8c:
5b:d2:67:42:0f:1d:23:0a:23:16:92:3a:69:42:3c:
4e:71:c4:bc:3f:30:51:ca:8a:23:e7:9d:be:6a:5d:
c2:b4:5e:ad:67:3e:fd:fc:28:9e:00:4d:7d:6b:08:
a4:38:4a:cd:21:28:a9:08:24:52:b4:10:e7:d1:f0:
7d:b2:b1:a5:c3:ee:72:7f:6b:31:7d:21:e6:fa:1d:
49:0f:fa:d2:e8:e9:24:45:55:71:7f:25:b8:c5:f2:
b9:07:b2:8a:ce:d0:66:22:a7:00:e6:ce:63:5a:2e:
c1:24:d2:d1:b4:21:7a:be:85:f1:0b:89:91:8f:df:
00:e0:43:5c:96:02:35:de:eb:eb:09:1b:0d:8b:b5:
18:30:01:f9:2c:6e:da:57:3e:6a:d2:41:83:93:9e:
bc:28:0a:62:85:74:75:9c:80:78:c4:f0:c9:b0:00:
06:ee:ff:aa:b7:cf:34:10:cc:75:23:7c:9b:65:fe:
b6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C1:5C:E3:75:F6:11:82:BC:9E:BE:3A:68:BA:23:03:4C:74:16:A2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144516.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a74a::/32
Signature Algorithm: sha256WithRSAEncryption
11:13:71:db:c7:61:05:13:25:db:ff:c0:a8:55:f7:38:56:72:
86:71:7c:f4:ff:e1:70:df:50:17:ac:32:3d:7f:4f:f5:af:60:
20:6b:7e:20:9c:a5:24:0c:ca:70:e6:32:f5:75:58:69:43:97:
aa:29:09:79:5e:bb:d7:83:35:24:d2:f9:3b:bb:88:90:35:59:
60:ed:9b:1e:32:af:28:d0:d3:af:35:b7:ec:21:8c:b2:be:58:
c5:77:ce:7a:fa:01:fd:c8:ae:57:8d:89:86:e8:86:b9:8c:ac:
cc:f4:3f:91:89:c4:55:d6:e8:20:21:7e:6b:91:6d:87:ad:74:
68:f0:9b:f6:ca:d9:e4:1b:34:e8:7d:ba:f2:ff:45:42:a4:0c:
53:68:72:58:85:c8:cb:6c:24:a1:bc:72:e8:e5:59:49:64:63:
df:68:b6:3c:a3:b2:6a:43:ee:34:04:44:a6:91:08:bd:db:5c:
3b:b4:16:ea:92:dd:7b:54:8e:3c:ae:23:be:c5:ed:24:61:15:
4b:5f:88:c3:1b:8b:da:00:13:65:27:4f:e2:9b:7e:29:85:64:
bd:60:43:b0:9a:a7:03:99:dd:13:04:39:97:f0:b1:9f:85:4f:
6c:af:54:c9:b9:2c:a4:84:05:07:d0:1c:26:a0:da:ae:35:6c:
2a:74:be:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:47 2026 by rpki-client