Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144558.roa
File: AS144558.roa (raw, json)
Hash identifier: NZdkbFAG6Q6FO6vD8qjD3Na8bF4OmNH2A8SBF4BNhrs=
Subject key identifier: AA:9C:9A:9A:A7:A3:2F:B8:1D:97:ED:5E:0E:DB:53:7F:B0:F0:48:FD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4538117774F55690C43B614B52DCDABEEC777490
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144558.roa
Signing time: Tue 26 May 2026 02:35:05 +0000
ROA not before: Tue 26 May 2026 02:30:05 +0000
ROA not after: Tue 25 May 2027 02:35:05 +0000
asID: 144558
IP address blocks: 240a:a774::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:38:11:77:74:f5:56:90:c4:3b:61:4b:52:dc:da:be:ec:77:74:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:05 2026 GMT
Not After : May 25 02:35:05 2027 GMT
Subject: CN=AA9C9A9AA7A32FB81D97ED5E0EDB537FB0F048FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:5e:39:98:4f:39:3f:19:98:83:a0:9c:a5:
14:97:e6:a4:4d:fc:08:d0:08:d1:a8:3a:a0:7f:73:
dd:3e:90:70:9c:d5:ad:4d:65:71:06:a7:65:46:33:
bb:ed:19:38:19:6c:9f:de:09:44:a8:5d:7c:43:07:
3b:1c:dc:45:71:f0:ed:24:ac:12:13:0c:52:03:49:
b2:19:8b:96:94:0f:2c:52:67:18:f8:a8:19:6c:b4:
7c:63:a5:93:e4:41:ce:1e:e0:80:aa:da:a2:ea:49:
1e:41:f9:98:fc:81:df:1c:b1:a6:b0:9d:e2:ca:bf:
e7:89:6d:6b:20:b0:74:d2:f1:da:76:29:8a:dc:99:
b0:9a:11:49:d1:9f:25:c4:d5:c2:3c:c0:3d:c0:bd:
cb:f9:77:c8:4d:f4:b6:65:b2:a0:40:d8:e8:6f:58:
89:69:60:f1:b0:da:41:ec:0e:46:f2:b1:cb:e8:6e:
20:b7:ef:01:ed:7d:44:30:62:3a:db:c7:2e:d8:42:
96:50:b0:08:68:12:a2:10:b5:7d:9e:e7:15:00:89:
d9:5a:d0:d1:8f:93:1f:5b:88:8f:dd:e3:0f:2a:9b:
63:cf:e1:96:72:8f:c5:e5:b0:1f:54:87:d4:0b:a2:
47:f3:ec:04:54:f1:20:a1:74:0d:ab:b2:df:16:07:
00:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9C:9A:9A:A7:A3:2F:B8:1D:97:ED:5E:0E:DB:53:7F:B0:F0:48:FD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144558.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a774::/32
Signature Algorithm: sha256WithRSAEncryption
31:b4:c9:bd:99:36:a8:13:70:29:c2:e7:fd:29:3b:7b:4e:75:
11:3d:27:06:f7:dd:0f:1d:82:77:af:bb:0f:c2:99:d3:49:ab:
e0:20:3f:ac:5e:3b:d3:92:45:fb:4a:3a:12:2f:2e:13:df:f1:
e0:ee:76:e7:84:3c:c6:f7:7d:3d:47:fc:86:5c:19:58:3a:b7:
89:30:8f:4d:5a:72:a2:01:66:4d:9c:1d:ef:19:64:08:e4:ef:
44:ff:a3:b4:42:cc:c5:cd:1d:71:8c:0b:4b:a2:e3:af:f9:b1:
ed:a4:42:a8:5f:a6:38:90:e2:0b:38:84:9e:bd:e3:a7:d4:9c:
92:ba:bc:b0:2d:53:0c:91:86:d0:58:86:b4:fb:b2:61:3a:a6:
ea:ff:0d:0a:19:16:b0:f8:89:0c:50:d2:40:e7:bf:41:cf:c9:
0c:6d:bc:06:32:de:00:26:39:b6:fe:4a:a9:22:fb:61:d7:fa:
ea:9f:b3:9c:13:37:95:b3:28:d5:69:bc:64:04:91:ac:34:35:
53:23:af:06:ce:4b:16:cf:e1:1e:b4:40:e6:59:0d:38:8c:25:
c1:05:92:0f:3e:4d:3a:df:b0:54:63:1a:79:4c:ba:65:f0:94:
22:01:9c:ed:d4:e6:61:8c:8e:ef:ba:10:8b:5c:3c:b1:c3:c7:
89:00:bc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:22 2026 by rpki-client