Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144545.roa
File: AS144545.roa (raw, json)
Hash identifier: 3O3eHmQf+74AVVTOuNQm0KNFcyjPIfQSRBZ5YorKd2U=
Subject key identifier: 6A:4E:A7:6F:80:2D:BF:DD:8C:3A:53:E5:3F:4C:1C:1A:7B:91:48:2D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 29D6CF7B1453FB17568AA07445A4EE13F3944C31
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144545.roa
Signing time: Fri 22 May 2026 07:24:45 +0000
ROA not before: Fri 22 May 2026 07:19:45 +0000
ROA not after: Fri 21 May 2027 07:24:45 +0000
asID: 144545
IP address blocks: 240a:a767::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:d6:cf:7b:14:53:fb:17:56:8a:a0:74:45:a4:ee:13:f3:94:4c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:45 2026 GMT
Not After : May 21 07:24:45 2027 GMT
Subject: CN=6A4EA76F802DBFDD8C3A53E53F4C1C1A7B91482D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9c:e4:6d:48:44:68:75:61:23:97:04:c6:ab:
e1:5b:57:f3:48:cd:71:49:14:85:6f:f2:98:8e:7b:
75:0e:94:97:29:51:10:c2:e3:e9:ba:21:72:05:18:
41:68:b8:f7:5e:10:7d:99:ee:69:a9:e6:40:33:c0:
58:66:9b:d4:db:c0:29:34:51:02:e9:38:5d:5c:f7:
2d:db:5d:b4:02:5d:7b:d9:6c:f2:e8:0f:d4:04:6d:
b8:57:04:65:50:71:c2:04:4a:48:c6:78:c7:0d:78:
20:cd:52:d5:d4:e4:32:da:09:7e:37:5f:4c:01:e0:
70:18:b9:39:49:d9:9a:90:b5:05:86:ea:1b:01:99:
82:d3:23:7e:ff:1e:78:95:22:96:6c:be:75:22:90:
20:a4:31:46:73:8a:5a:7a:a1:01:46:f5:46:0d:c1:
e0:f4:22:69:b0:98:58:64:65:a3:95:07:8b:d2:94:
d0:0c:d4:58:4b:e8:2e:15:ca:87:90:1d:e0:e9:74:
f2:e1:2d:0b:34:8c:fd:69:be:18:7a:d5:84:e8:69:
55:0d:27:c1:ae:61:38:90:1c:d1:8f:6e:35:80:60:
b0:e0:29:f5:30:fb:79:a9:19:76:e5:d8:18:be:cd:
45:2a:98:dd:47:aa:fb:a6:bb:ae:2f:95:a7:2c:58:
b3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4E:A7:6F:80:2D:BF:DD:8C:3A:53:E5:3F:4C:1C:1A:7B:91:48:2D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144545.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a767::/32
Signature Algorithm: sha256WithRSAEncryption
07:16:14:eb:47:14:26:00:29:97:14:75:05:41:73:f0:8b:01:
85:72:cb:da:2c:06:b0:13:f1:71:20:6e:05:d8:5f:79:fa:7f:
48:c6:62:e3:61:f9:92:7c:1a:06:91:a5:8e:5b:5a:e9:ca:76:
58:d4:9b:75:46:52:9c:8c:da:ed:73:2c:2d:d4:79:48:e9:60:
62:a3:9a:0f:8d:97:68:3a:75:39:2a:f0:1c:e0:2f:14:88:55:
da:6c:ca:2e:07:37:52:c3:b4:ce:78:6d:85:0f:90:d9:b6:4b:
a5:09:06:11:4b:95:f7:12:26:3a:0c:44:17:18:fc:fa:92:03:
18:85:02:30:b4:2c:a5:48:6c:65:de:f8:74:b2:d9:e9:e5:e4:
34:39:8b:61:95:87:7a:b7:11:f9:0d:9e:2b:da:7b:a1:6c:ca:
5f:0d:b4:b3:06:6a:87:82:93:bd:a0:71:5e:5e:5e:8e:a5:b7:
ff:06:e8:6f:24:47:1b:e3:71:7d:41:ad:13:7e:90:d0:d1:d4:
51:17:5e:fa:8d:1f:12:26:78:1f:ea:4e:9d:8f:95:c0:b0:a3:
15:c5:c6:e5:bd:8e:3f:88:7e:24:b8:2a:b0:9e:9c:69:be:cc:
bf:dc:88:67:2e:91:56:5f:12:02:99:4e:18:39:aa:48:86:f5:
6f:d6:ae:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:34 2026 by rpki-client