Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144528.roa
File: AS144528.roa (raw, json)
Hash identifier: K8WAWdHdzodU/uRv9nCwRgxq05fmOaYA+AmCGEhSP3E=
Subject key identifier: 0C:87:5E:11:F0:50:D6:8A:84:3E:E9:9E:5D:C7:72:2D:B0:B0:0F:24
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2951CC3695C41E1C2F977A144D2D604EE084D565
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144528.roa
Signing time: Fri 22 May 2026 02:47:53 +0000
ROA not before: Fri 22 May 2026 02:42:53 +0000
ROA not after: Fri 21 May 2027 02:47:53 +0000
asID: 144528
IP address blocks: 240a:a756::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:51:cc:36:95:c4:1e:1c:2f:97:7a:14:4d:2d:60:4e:e0:84:d5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:53 2026 GMT
Not After : May 21 02:47:53 2027 GMT
Subject: CN=0C875E11F050D68A843EE99E5DC7722DB0B00F24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c1:83:37:25:f7:98:e1:34:44:ba:95:f4:c3:
f4:b7:96:5f:dd:bb:21:82:e4:c4:88:4c:4a:01:9f:
b1:b7:ad:54:55:59:d6:0f:25:e9:13:b1:18:f7:3c:
64:8a:09:14:4e:fd:31:a0:ac:c5:da:6f:72:1b:b1:
18:21:7b:c1:f4:fd:28:71:39:d7:eb:3f:91:cf:09:
e9:b9:fe:4e:0a:ff:93:9c:53:10:c1:cf:ca:96:fa:
fb:7e:b1:cd:c7:d7:31:85:5d:97:68:54:40:b8:10:
5c:d7:d2:d8:13:97:03:7a:df:91:13:06:50:70:e8:
a7:e3:12:62:6f:af:1b:11:a3:7e:4c:2d:ca:95:3d:
cd:d7:82:c5:69:5d:ab:b5:42:2c:bc:51:b7:44:7b:
87:c4:fa:6f:ae:37:e5:23:fb:29:5b:be:75:6e:13:
be:f0:6a:e8:8b:f1:00:3b:0e:26:dd:8d:d9:1c:c6:
6c:ff:d2:ca:bc:f4:09:47:ff:a7:5b:e2:fc:f7:2f:
a0:dc:e8:34:93:3c:9c:c3:95:31:df:7f:df:84:79:
fe:99:5c:24:4f:0e:3b:16:12:39:30:03:80:20:8b:
15:e6:1e:21:e1:ae:6c:5c:91:2b:05:69:6e:e5:e1:
84:93:e6:7f:5e:b2:be:c1:b5:6d:fb:0a:44:bf:b1:
d1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:87:5E:11:F0:50:D6:8A:84:3E:E9:9E:5D:C7:72:2D:B0:B0:0F:24
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144528.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a756::/32
Signature Algorithm: sha256WithRSAEncryption
74:a4:f7:3f:e9:84:d4:b8:8a:6a:02:5a:90:10:6d:79:ae:17:
27:73:4b:e3:e1:e9:26:f3:85:2b:e2:3b:8c:bd:79:40:b4:e3:
47:cf:31:84:70:f9:c4:52:85:a2:ff:0b:e0:a9:ce:4d:73:a2:
3c:8d:1c:e9:d2:9e:ad:3b:ee:29:8a:83:8e:af:36:b3:79:09:
e0:76:50:6f:7b:b1:67:0b:c1:39:0d:17:d2:bd:2a:f5:de:8e:
7e:64:3a:ee:04:15:bd:90:61:4d:21:3d:7e:ad:f8:96:f5:21:
19:67:43:df:d1:3f:a4:c0:ab:85:54:84:c6:d8:21:86:26:e6:
ad:05:66:9c:3d:62:12:27:47:d4:73:fa:49:25:01:93:c2:ad:
cf:65:28:59:cc:99:10:67:ca:a9:3d:7d:4e:a6:e2:7d:35:10:
5f:c1:c9:b8:c3:a5:e0:aa:ae:03:5d:e6:80:29:81:65:85:77:
ae:6d:72:47:c0:1c:92:0a:8b:f4:6c:6e:03:fe:83:e1:04:20:
91:a3:97:07:4e:f6:8f:d4:a7:2a:e0:fa:5f:f2:0d:7e:e7:0a:
a4:66:74:f9:df:1b:89:d7:bc:4c:a9:88:5e:81:95:bf:2c:f0:
30:bc:d5:14:7e:c2:29:c3:98:8e:f7:2c:1a:00:9b:28:83:85:
03:7d:c6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:24 2026 by rpki-client