Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144535.roa
File: AS144535.roa (raw, json)
Hash identifier: sbNFMTWMHEO70KI03tqyzXkpeHtPDLe29NiHXIBXNe4=
Subject key identifier: 9D:F0:90:E7:86:27:C4:EC:EF:9B:82:3D:EB:1D:A3:77:81:3B:1E:FA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 519911661DBA3376B2A73BAE2CC261AA6ECA0CBD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144535.roa
Signing time: Fri 22 May 2026 06:27:59 +0000
ROA not before: Fri 22 May 2026 06:22:59 +0000
ROA not after: Fri 21 May 2027 06:27:59 +0000
asID: 144535
IP address blocks: 240a:a75d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:99:11:66:1d:ba:33:76:b2:a7:3b:ae:2c:c2:61:aa:6e:ca:0c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:59 2026 GMT
Not After : May 21 06:27:59 2027 GMT
Subject: CN=9DF090E78627C4ECEF9B823DEB1DA377813B1EFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:96:58:7f:f8:65:72:63:03:29:f4:19:92:14:
aa:13:62:20:6e:d3:ae:05:63:49:17:36:a9:ba:00:
ad:ec:11:14:d3:9c:78:e6:8a:73:10:67:06:14:d6:
db:3c:7c:16:3e:b6:50:cd:4a:f3:59:f5:8b:eb:60:
22:e2:73:12:88:4d:d4:b8:30:a5:b8:89:8d:83:a5:
ab:6f:5c:64:82:76:ff:5a:a9:72:ee:20:99:55:28:
17:bc:39:7d:1e:59:80:ac:41:22:f2:b5:50:74:ff:
33:42:5d:6d:d2:24:ba:89:5b:30:da:2c:cf:2b:0e:
85:32:30:d3:19:80:18:43:16:54:be:54:c4:29:2c:
d2:ac:ef:a8:71:d3:ef:22:be:f5:bf:a2:6e:9f:6b:
e1:e2:1f:6b:6b:22:b3:4c:23:9b:a6:ba:f8:c6:de:
11:05:7d:6f:27:34:71:4c:2e:48:80:b8:fc:9d:f2:
a1:18:e9:be:0f:b6:48:cd:48:ef:00:3f:d4:82:48:
f2:25:cd:fa:1a:0f:98:56:d7:5d:e8:c6:25:1c:9e:
77:7e:ef:99:16:e3:8b:ba:50:ba:63:ff:f3:1a:89:
53:fc:80:20:ed:1e:35:75:18:15:2e:f3:9b:0b:8a:
5b:e3:fa:3f:8e:61:db:54:af:6a:07:a2:4e:1e:5f:
90:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F0:90:E7:86:27:C4:EC:EF:9B:82:3D:EB:1D:A3:77:81:3B:1E:FA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a75d::/32
Signature Algorithm: sha256WithRSAEncryption
68:b9:30:a1:7c:25:19:06:71:a9:9c:3c:20:fd:c0:8a:f1:ac:
81:8b:7b:a0:8e:8a:6c:8f:ef:b2:2f:f1:7d:db:e0:66:1d:cc:
a5:4a:b9:fe:53:07:c6:05:e2:8a:60:96:95:19:7c:ec:77:7b:
82:f8:a1:71:51:4f:62:9e:78:44:56:ca:4a:b5:0c:a3:e3:66:
41:73:03:de:1f:7b:c2:12:5f:20:4f:49:a2:4e:6d:cd:1c:38:
6b:65:14:25:55:8a:09:dc:a7:93:8c:2f:cb:e1:62:c9:b2:f8:
96:78:5a:f1:f9:b7:3a:52:d6:56:68:c7:a1:e4:b6:77:be:46:
49:06:78:39:70:aa:83:aa:75:96:d0:68:72:a9:9d:55:8f:6e:
a2:35:e6:4c:32:25:b1:01:ef:8a:ac:5e:45:50:0d:37:c5:fb:
75:7e:4e:06:70:7f:17:12:33:ce:59:85:e2:a0:73:bb:7b:48:
27:50:bb:60:01:cf:ee:00:38:79:6a:d2:be:5a:e2:43:2a:f0:
fb:28:23:13:e7:6e:cd:5a:e0:41:4f:b2:c0:4a:9f:94:da:f0:
a5:a9:bd:06:9a:5c:cc:f5:3f:3b:38:48:fe:2d:bc:2a:09:8c:
6a:2a:a8:60:5c:44:24:94:23:37:6f:32:1f:c7:45:8d:95:22:
36:8d:dd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:05 2026 by rpki-client