Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144560.roa
File: AS144560.roa (raw, json)
Hash identifier: EIg0TKol3bAs69tFaGHp+Mcv5ip1X9cx2DmGGsxEHso=
Subject key identifier: AD:07:F5:FA:79:64:81:92:DA:DC:53:10:FA:D7:2A:79:8C:4A:10:CC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 02ABBAFA52C2E9D2AF623539DE1126ECF597E029
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144560.roa
Signing time: Fri 22 May 2026 07:08:39 +0000
ROA not before: Fri 22 May 2026 07:03:39 +0000
ROA not after: Fri 21 May 2027 07:08:39 +0000
asID: 144560
IP address blocks: 240a:a776::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:ab:ba:fa:52:c2:e9:d2:af:62:35:39:de:11:26:ec:f5:97:e0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:39 2026 GMT
Not After : May 21 07:08:39 2027 GMT
Subject: CN=AD07F5FA79648192DADC5310FAD72A798C4A10CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:42:66:e5:8e:cc:50:7d:cb:b0:b7:63:11:ff:
1f:60:31:88:1c:d8:33:a5:49:56:8e:13:d4:aa:c4:
2f:7c:94:96:8f:b2:e2:52:e6:39:48:42:60:c9:41:
65:8f:50:b0:2e:8e:79:c7:26:79:7b:32:7a:dd:a4:
5d:90:54:83:be:46:0a:67:e8:c4:d3:e4:b2:83:43:
28:39:5e:68:d1:10:0f:d5:39:13:99:67:93:b1:2a:
e6:5e:a7:13:77:c1:cf:42:ae:ce:bc:4b:c0:d8:83:
62:82:7b:a8:29:90:ec:8b:ab:d0:dd:92:7f:ff:8e:
c0:fa:f5:51:8d:e7:bc:6b:b1:40:0f:eb:ee:8f:dc:
c6:60:5c:50:f1:6f:0d:1f:06:f1:2d:5e:b3:e1:bf:
e4:f7:2a:5f:e8:3e:3c:88:4d:32:3b:2c:87:11:86:
7b:ed:91:8c:f4:a7:8f:70:1a:bf:ca:d8:bd:41:11:
b3:27:1e:81:c0:83:25:1c:e6:21:80:64:e0:ee:c9:
90:2c:8b:c5:a3:ce:ab:02:d8:a8:e3:2e:b0:cd:ad:
b3:f9:22:be:28:18:ce:04:26:4a:b4:45:f4:84:cc:
08:9c:24:80:97:50:6a:34:50:26:4e:c4:30:28:e4:
71:47:03:82:d7:b1:26:d7:31:1d:62:09:9c:27:50:
5c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:07:F5:FA:79:64:81:92:DA:DC:53:10:FA:D7:2A:79:8C:4A:10:CC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144560.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a776::/32
Signature Algorithm: sha256WithRSAEncryption
15:e2:51:d4:33:72:d2:c1:5c:16:6d:6d:4e:52:66:64:b6:0d:
61:e2:39:a6:2b:7d:05:ab:f0:8b:1b:b7:8f:6c:66:aa:e7:6a:
85:c4:1a:3e:d3:50:f1:8a:04:23:8a:4b:9b:24:fb:b8:1b:89:
96:cc:84:7b:96:74:19:8e:62:aa:af:33:a8:32:6e:e1:3f:45:
ea:2d:bd:04:05:2e:17:24:38:a8:1f:3f:ef:9b:9c:5b:2c:f9:
94:a2:2b:4e:00:f0:ad:07:aa:00:20:e5:d5:d9:b5:15:d2:29:
70:2e:4d:c4:ad:57:b0:cf:0a:ef:97:b8:00:ac:82:c7:a3:5f:
00:18:00:70:3a:d4:63:c0:b2:a1:3a:98:a9:eb:1a:4d:90:80:
d6:5f:ef:11:a2:eb:f4:c8:c9:e7:0b:a1:3d:9d:e1:46:0c:b5:
ec:ff:4b:dc:9c:e7:fe:08:a1:86:39:c1:6a:19:d1:1d:40:aa:
fe:a6:67:b9:16:84:1c:c1:b2:6e:f8:02:d4:eb:d6:5e:3b:16:
a5:79:07:da:fb:84:b4:24:80:10:27:6f:ba:96:b2:5e:68:21:
2c:9b:23:06:34:98:c7:a9:f6:70:65:71:40:40:5f:61:34:2a:
06:7a:bd:ec:59:10:f1:81:4a:a2:39:a7:e1:d4:87:80:41:28:
16:85:47:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:39 2026 by rpki-client