Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144532.roa
File: AS144532.roa (raw, json)
Hash identifier: yp6pMgyok8ozqssAkK6kOhG/mKnO8A0gvotJwXlXdKY=
Subject key identifier: E2:2C:4E:39:90:1A:3F:EA:27:FF:17:61:B2:5E:9B:DF:16:60:DE:D8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 586EE46E4FE510CDAA33526487D21059A1533649
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144532.roa
Signing time: Mon 25 May 2026 06:48:54 +0000
ROA not before: Mon 25 May 2026 06:43:54 +0000
ROA not after: Mon 24 May 2027 06:48:54 +0000
asID: 144532
IP address blocks: 240a:a75a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:6e:e4:6e:4f:e5:10:cd:aa:33:52:64:87:d2:10:59:a1:53:36:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:54 2026 GMT
Not After : May 24 06:48:54 2027 GMT
Subject: CN=E22C4E39901A3FEA27FF1761B25E9BDF1660DED8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:fd:40:9e:c2:31:73:06:79:c7:bb:7f:13:
9f:8c:38:13:6b:ae:89:29:81:b8:c6:e7:15:c5:f3:
43:24:75:5f:fa:7b:b6:b6:79:a8:75:03:ec:c0:b8:
76:75:51:9e:4e:a2:bc:1a:96:bb:25:05:a6:45:3c:
c7:7c:56:7b:0b:53:1b:c7:36:80:85:00:a9:0f:98:
18:69:35:c1:cc:b8:4b:cd:e2:b1:2d:e4:26:e8:6c:
d8:70:d2:74:8e:c9:ea:12:38:ea:5d:a3:ee:98:7f:
32:6e:90:3a:b8:60:2a:86:c8:3a:96:97:94:96:fd:
0d:93:75:6d:ee:27:7a:a0:7c:ba:fa:60:66:a0:55:
a8:39:44:ee:62:0c:31:cf:32:fc:fb:b7:3f:6d:e0:
78:b7:45:9a:dd:dc:e9:5b:2a:9b:38:be:8f:d8:be:
ef:d8:92:61:ef:d8:5f:09:1c:1f:f7:3b:aa:b4:97:
f5:46:f8:75:14:11:da:23:4d:4b:3a:cd:61:b1:f7:
57:a2:0b:6f:53:a4:d8:92:3d:3e:88:40:82:68:6b:
09:63:1e:a0:d1:dc:fc:95:0a:07:bc:ea:c4:1d:b6:
20:d4:a5:7d:a6:80:90:ab:c8:94:ac:6d:c4:b8:2b:
29:37:bb:0e:af:8a:e2:c9:b9:e2:d9:5f:20:43:dd:
43:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2C:4E:39:90:1A:3F:EA:27:FF:17:61:B2:5E:9B:DF:16:60:DE:D8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a75a::/32
Signature Algorithm: sha256WithRSAEncryption
a2:f8:2c:b9:41:79:5f:6b:a2:e8:af:1d:24:87:17:94:17:a7:
37:64:70:04:ce:d5:55:7f:ba:30:33:1c:f4:67:24:85:cc:c5:
bc:1c:3b:46:48:37:53:ac:a9:f4:64:50:e3:9b:47:e8:48:ed:
cb:f7:9c:11:17:40:f5:dd:f4:af:25:30:77:5b:9b:5d:62:64:
2d:40:1c:90:98:60:dc:d9:cd:22:ed:39:fe:1e:c1:fa:35:2b:
53:ec:2d:13:07:d1:08:7c:5d:2a:90:2d:de:12:80:60:fd:20:
be:46:ed:21:a8:0e:84:8e:1d:1a:6f:76:dc:9c:f1:18:b5:16:
47:2a:28:f2:05:71:38:f7:6a:a2:ff:5c:d5:e8:82:47:d7:80:
d7:60:4a:e6:e4:61:b2:09:68:79:e7:74:fe:06:ff:2f:91:f7:
90:d3:1b:a1:6f:68:be:16:4b:47:ec:d1:5c:3c:cd:e2:cf:9e:
ec:21:61:7e:f1:7e:eb:0b:20:78:4e:6d:a8:5e:0b:be:9f:0d:
3e:d6:73:81:0f:ee:0d:15:3c:de:a0:a5:50:70:6a:2b:d8:ad:
a4:d8:02:b9:8d:a8:6c:1d:ef:cf:11:d7:d1:89:63:f4:1b:ec:
82:e2:c9:e8:22:33:12:c4:15:d9:e8:f7:7b:18:9f:b1:80:cd:
03:6d:81:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:08 2026 by rpki-client