Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144538.roa
File: AS144538.roa (raw, json)
Hash identifier: Ei907kw9h7qzPm4qRJzG4sy2D/Ik6HKBgJAWNI8OYzI=
Subject key identifier: 86:D2:06:BB:30:7D:F6:74:DE:6A:F6:A9:CE:85:38:67:E7:86:EF:39
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6864090B6FE61E0A85EFB1BC7164BD2A521FC585
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144538.roa
Signing time: Mon 25 May 2026 01:51:07 +0000
ROA not before: Mon 25 May 2026 01:46:07 +0000
ROA not after: Mon 24 May 2027 01:51:07 +0000
asID: 144538
IP address blocks: 240a:a760::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:64:09:0b:6f:e6:1e:0a:85:ef:b1:bc:71:64:bd:2a:52:1f:c5:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:07 2026 GMT
Not After : May 24 01:51:07 2027 GMT
Subject: CN=86D206BB307DF674DE6AF6A9CE853867E786EF39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5c:0c:a0:09:f5:98:d3:8a:a5:6a:c2:05:5a:
dc:05:71:e7:1e:95:cd:69:10:84:6b:bf:44:c9:53:
b4:ba:94:16:b6:ef:20:cf:38:be:75:f6:4d:4e:17:
df:22:16:06:c4:e1:2d:ed:7e:9b:e1:e1:54:e7:b5:
ad:20:d2:b4:e2:48:ad:fb:6e:89:68:65:ad:27:e0:
ef:1b:24:1d:70:92:b6:0b:67:2f:2e:36:60:8c:10:
61:f4:23:19:3c:c7:86:64:f5:32:fb:80:e6:f1:16:
80:90:87:ea:45:d6:e4:90:6a:8b:6d:17:23:f0:52:
6b:3a:1b:4f:f4:16:a9:4b:de:9a:07:f8:5b:1f:27:
3c:b2:8e:ed:8b:23:8d:29:cd:14:37:14:d7:c4:d6:
5f:52:13:91:af:3e:9b:c6:a9:4a:6b:94:01:70:00:
73:09:3e:d0:dc:04:12:28:2b:80:80:91:8a:ba:df:
4b:f7:1a:91:6e:dd:77:e7:97:4b:e8:1c:77:53:c9:
2c:70:bc:23:0d:c0:bc:a0:28:c1:19:c1:5f:ef:a8:
6a:2d:3e:a9:24:ef:e6:d0:6c:f7:00:bd:9a:2d:d3:
ee:84:e1:31:63:aa:c3:75:2a:c3:69:74:67:98:aa:
2d:6c:1b:3a:96:0f:f4:de:62:6a:85:81:2a:1d:f7:
7b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D2:06:BB:30:7D:F6:74:DE:6A:F6:A9:CE:85:38:67:E7:86:EF:39
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a760::/32
Signature Algorithm: sha256WithRSAEncryption
87:73:ef:53:42:b9:df:af:2a:61:89:61:21:5f:a0:f8:96:ab:
0c:b6:97:36:42:e8:0b:75:23:a1:bb:09:d7:1a:ab:c0:69:b9:
2d:51:91:3b:ae:3f:76:f4:43:03:1e:7b:c8:91:89:1f:eb:17:
2b:41:fe:63:60:eb:19:4f:82:d6:b7:1e:b0:3b:f7:89:f5:41:
a7:8e:f7:24:ed:e7:e3:00:7d:03:08:74:aa:92:6b:64:1a:61:
a4:5e:9d:18:4b:42:df:1c:32:f3:3f:93:d2:34:79:56:a5:fb:
7d:8a:d4:44:08:a3:ef:61:55:ff:33:e6:40:7e:75:dd:9f:14:
d9:bb:45:cb:e1:66:15:77:ef:f1:4b:e0:d3:42:45:dc:01:a0:
64:fa:7e:0e:71:0f:fe:70:68:f6:d6:1e:05:86:2f:38:77:f5:
17:a7:d5:1d:1f:32:28:d1:c3:12:66:1c:13:37:0b:32:75:17:
a1:14:c1:a0:6a:36:b0:85:fe:9d:ea:7c:6a:36:dc:84:f9:9c:
42:9c:fb:1e:99:b0:3e:d8:0b:aa:0e:04:1f:db:db:35:47:8b:
c4:67:e7:d9:61:4d:5e:b3:ae:b1:b9:2b:ee:8d:c3:c3:66:4f:
fb:04:39:84:b4:9e:0f:d0:4b:35:4d:1a:c5:00:35:b5:aa:1f:
57:88:c6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:33 2026 by rpki-client