Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144520.roa
File: AS144520.roa (raw, json)
Hash identifier: s20MEt0rqnDLl7hwgSCESCZpZvsjt+2PAhzkYOl6YmY=
Subject key identifier: 45:7E:B4:BF:2C:1E:42:BF:85:0C:07:0D:67:62:ED:C1:5D:50:90:7B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1E02DDC658BF7F8A0D3E93CE6ACF5747646F4F82
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144520.roa
Signing time: Fri 22 May 2026 07:41:22 +0000
ROA not before: Fri 22 May 2026 07:36:22 +0000
ROA not after: Fri 21 May 2027 07:41:22 +0000
asID: 144520
IP address blocks: 240a:a74e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:02:dd:c6:58:bf:7f:8a:0d:3e:93:ce:6a:cf:57:47:64:6f:4f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:22 2026 GMT
Not After : May 21 07:41:22 2027 GMT
Subject: CN=457EB4BF2C1E42BF850C070D6762EDC15D50907B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:0f:65:1f:30:a1:79:8f:77:64:6d:b6:ff:
19:72:6f:3d:b0:90:60:3f:6c:e5:af:30:63:02:c4:
be:2e:da:a9:6f:88:13:b0:85:cf:9f:4b:e7:55:1d:
d3:91:12:2e:b5:b6:39:ac:27:5d:9a:da:e5:b8:87:
de:3d:45:92:48:c7:3e:23:e9:44:7e:82:31:48:36:
26:90:4c:17:2b:ed:d7:eb:09:2a:8f:85:94:db:85:
1a:cd:a9:59:f8:7a:73:2b:ad:42:76:4f:42:c4:86:
16:05:31:9b:b8:28:d4:96:fb:9b:45:f3:2e:4b:56:
72:24:10:7b:a1:5b:44:4a:17:09:27:89:e3:05:ba:
46:80:03:7c:7a:43:28:8f:4c:61:da:95:56:a8:c1:
ec:77:61:0c:4b:8a:77:8a:e8:87:2f:54:a6:d2:91:
7d:59:2c:9f:89:4e:83:09:c8:ba:d4:6b:71:1b:be:
cd:20:db:19:8b:e6:f9:ed:e9:11:11:78:eb:2b:b1:
d4:4c:2d:eb:9a:08:aa:f8:25:af:b4:65:3e:09:c0:
c6:3f:79:f5:a0:ea:03:c1:3c:74:2a:80:38:0f:1d:
86:c8:3e:04:09:0b:03:c5:2d:14:c6:1f:a3:4e:5c:
66:29:65:c4:06:b8:01:08:2c:60:24:07:2d:ed:54:
14:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7E:B4:BF:2C:1E:42:BF:85:0C:07:0D:67:62:ED:C1:5D:50:90:7B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144520.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a74e::/32
Signature Algorithm: sha256WithRSAEncryption
a8:92:2a:e5:65:59:e9:65:04:26:f6:26:6b:88:07:38:3a:a1:
ef:fa:6e:4b:6c:71:69:97:fc:4a:8e:54:e6:d3:be:d3:55:1c:
2a:59:77:66:97:33:1f:50:0f:8f:e0:d2:0c:02:95:0b:1f:d7:
08:66:5c:32:2e:b4:5e:62:57:49:01:87:ff:f5:0e:df:6b:a5:
b1:6a:0c:83:a4:24:e8:3d:b9:31:52:e4:92:de:f0:ea:2d:45:
06:16:4e:c3:cd:c9:d5:a9:bd:ee:ac:e8:ed:5e:db:73:b1:75:
7a:6d:21:c7:b7:35:96:5f:e2:98:62:8d:60:65:58:9a:3e:06:
00:a5:69:d3:f4:c7:43:12:5b:e2:c4:9e:58:3b:da:57:78:6a:
ec:1e:a9:5f:08:e9:03:77:d2:9d:bf:3d:54:d5:c6:8c:48:17:
17:e4:7b:4b:cd:a3:52:29:b7:e4:8a:06:84:e3:26:ee:f2:e8:
35:e4:2b:35:54:15:3c:09:0e:85:ff:1f:1c:bc:d9:e4:a8:97:
c0:96:95:d2:80:0b:58:3b:c0:06:97:76:cf:77:50:df:3a:92:
93:d4:f7:9c:82:42:09:81:c3:a9:8a:35:a3:1b:52:90:40:c2:
fd:32:65:21:e4:65:4b:96:e4:48:d2:23:bf:e7:6f:95:0d:47:
21:46:06:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:31 2026 by rpki-client