Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144540.roa
File: AS144540.roa (raw, json)
Hash identifier: qSnDLLbVucZWSGdWnbFsgIevmUmTQvnOYADziqPfrfk=
Subject key identifier: A5:5A:9F:88:DD:A4:DA:66:B1:E2:23:26:C7:E9:30:A2:21:41:EC:D5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6D62032A16444C774BB2129A8521CC15F12B761A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144540.roa
Signing time: Tue 26 May 2026 03:17:13 +0000
ROA not before: Tue 26 May 2026 03:12:13 +0000
ROA not after: Tue 25 May 2027 03:17:13 +0000
asID: 144540
IP address blocks: 240a:a762::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:62:03:2a:16:44:4c:77:4b:b2:12:9a:85:21:cc:15:f1:2b:76:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:13 2026 GMT
Not After : May 25 03:17:13 2027 GMT
Subject: CN=A55A9F88DDA4DA66B1E22326C7E930A22141ECD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:f6:cd:d4:a3:ee:17:f6:1e:31:43:8f:5f:
8d:fd:83:64:0b:2f:81:20:83:ff:de:34:37:b0:ba:
34:f4:a9:95:23:08:a1:5c:3a:29:bd:25:d7:9c:39:
4b:ff:bd:04:26:10:eb:ff:f8:aa:44:5e:16:f9:6a:
7a:70:31:96:69:38:c1:54:49:2a:49:18:d5:56:ef:
ee:ef:b0:54:a2:5c:4b:3a:e8:c8:f2:5e:63:3b:fc:
80:a5:21:1f:5c:6b:b3:40:68:ce:5a:3f:9e:a0:12:
22:38:5a:ed:64:29:aa:cb:b9:ce:a3:94:bd:e7:ce:
11:fe:4a:f3:dc:a1:c6:58:22:9b:df:88:cc:98:e3:
25:41:e1:6b:b8:73:6e:6e:00:25:9c:43:a7:ac:17:
38:15:1a:8b:2d:97:56:4d:f4:1c:d5:03:ee:79:e5:
19:89:38:f1:95:25:f3:62:ff:95:14:30:e7:5b:9f:
6c:24:1d:e0:19:e5:9d:b7:00:88:0a:ca:58:df:42:
97:56:15:f0:25:fd:d7:6f:4d:7d:8b:6c:ae:e3:ab:
47:d4:f9:c2:bb:76:73:d4:a1:cd:3f:82:0e:13:4f:
79:82:5d:2e:ab:7c:13:38:3b:7a:19:70:15:1a:46:
19:23:bb:05:6f:6e:9e:52:a2:d4:dd:a1:94:27:57:
59:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5A:9F:88:DD:A4:DA:66:B1:E2:23:26:C7:E9:30:A2:21:41:EC:D5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144540.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a762::/32
Signature Algorithm: sha256WithRSAEncryption
7a:95:48:0c:b6:39:1c:61:a9:04:d2:12:c1:64:a5:3c:89:ef:
99:61:33:8f:7f:62:c1:7c:fe:85:09:23:b2:a8:c7:c5:85:7e:
74:d6:91:62:e9:7a:a0:fe:0a:03:90:55:b3:da:18:58:a0:4b:
04:d9:73:28:d2:85:3e:66:32:cc:e2:7d:eb:39:e3:cd:10:52:
e6:2e:f3:31:fa:35:16:f5:61:4a:73:b5:51:fc:d8:37:ac:f1:
db:e3:39:91:f5:19:b8:86:94:49:71:bf:b3:31:96:46:d1:bf:
e4:a2:6b:bd:fd:7d:a6:f0:f0:92:0c:22:7e:c9:36:ef:84:b5:
93:18:d1:0d:18:c3:cd:c2:bb:c7:f3:a6:5e:b7:01:9c:d2:f1:
2b:54:27:cb:2c:a2:4e:c5:d2:09:af:23:56:d6:e3:ac:4a:36:
84:d0:48:c6:b0:cf:04:59:91:9a:cb:08:16:a7:23:e6:d4:37:
4d:6c:1a:d3:86:3b:a1:2d:37:50:94:e6:d8:09:ef:87:33:8c:
53:cd:83:1e:47:1f:2c:fd:f6:a1:70:3b:f1:58:4e:39:6d:bd:
fa:60:43:29:f4:a1:66:c1:68:ae:21:c9:fb:fc:d0:5e:f5:f4:
be:a0:71:1e:10:22:b0:44:fa:7d:ed:d5:8e:e1:7d:c3:db:9c:
e1:c7:64:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:53 2026 by rpki-client