Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144571.roa
File: AS144571.roa (raw, json)
Hash identifier: 76i205Dmi+zxKoxSZIfYnxyZELI3ckzNf5zkSFbY6dU=
Subject key identifier: 30:36:9F:41:CF:A9:35:4C:48:20:16:AC:AB:3A:41:1E:8A:16:0E:B9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5E7C99F4EAEB3528FCB20C3DD6B49B9C1B1695C2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144571.roa
Signing time: Tue 26 May 2026 02:34:55 +0000
ROA not before: Tue 26 May 2026 02:29:55 +0000
ROA not after: Tue 25 May 2027 02:34:55 +0000
asID: 144571
IP address blocks: 240a:a781::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:7c:99:f4:ea:eb:35:28:fc:b2:0c:3d:d6:b4:9b:9c:1b:16:95:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:55 2026 GMT
Not After : May 25 02:34:55 2027 GMT
Subject: CN=30369F41CFA9354C482016ACAB3A411E8A160EB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d4:0b:dd:fa:33:7c:c6:48:d8:47:e9:04:4c:
47:f1:d5:9c:27:9e:58:cb:0b:30:bb:35:63:6a:54:
9c:0f:b2:41:e1:0e:a9:c0:7b:18:66:84:90:5b:4c:
88:69:28:9f:72:b5:61:99:af:f6:38:dd:7c:9d:73:
f9:25:06:27:77:3a:74:91:11:0f:73:3d:14:2f:5e:
c7:67:58:c7:19:ca:3c:c2:23:cd:77:6e:ec:da:a8:
be:17:0c:b4:e5:5d:0e:18:a6:f6:15:2e:50:5d:3b:
f2:c6:07:93:28:80:04:a5:14:18:02:59:c4:79:aa:
50:42:f8:b4:b6:9d:8e:74:ac:34:c5:a1:45:0a:61:
60:37:c5:2e:68:67:3c:fa:4c:2f:23:77:d7:81:04:
a7:9e:4d:08:45:e5:66:7e:70:37:d1:c4:ed:a6:6d:
0d:8d:d9:e4:06:53:29:f7:25:cd:44:bb:aa:aa:7b:
83:59:94:dc:cc:e0:77:5c:8d:6c:86:bb:45:fa:7c:
3e:86:51:d8:6f:5c:06:61:75:3b:95:4b:ca:cf:47:
e1:4a:94:e1:1d:77:1e:0f:89:ed:53:80:25:47:68:
4b:db:09:ef:29:ab:6d:4d:6b:c3:c6:b5:42:b2:71:
36:c6:8d:0b:2f:5f:5b:a6:78:36:97:af:40:c7:87:
18:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:36:9F:41:CF:A9:35:4C:48:20:16:AC:AB:3A:41:1E:8A:16:0E:B9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144571.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a781::/32
Signature Algorithm: sha256WithRSAEncryption
3f:74:0f:3c:b9:6c:98:be:c8:2a:fa:5f:3a:1f:9f:6d:b7:40:
6e:b9:27:8f:6e:7b:ac:2b:15:73:f5:5d:26:19:1b:ab:2d:b3:
95:bf:19:79:20:cb:78:cc:6b:58:34:e2:00:51:4b:30:4f:02:
cc:44:d0:d0:6f:30:6f:8b:20:0b:41:ab:5f:17:2c:27:83:4f:
f3:cf:24:23:e3:f3:50:7c:73:e8:d2:1a:f3:6a:5e:53:e5:60:
d6:52:5b:b6:7e:04:3e:b7:67:d3:c3:9a:f0:c1:11:3b:ac:27:
9d:10:90:de:73:e8:f2:af:82:3d:a9:94:aa:91:0d:d2:30:e4:
b0:29:5a:bd:44:10:e0:72:be:6e:8a:33:5f:02:c4:bb:6a:a5:
2d:4d:21:a8:96:ab:5d:ad:e1:20:e0:52:5e:97:96:80:46:9d:
18:8b:92:9d:9c:1d:c1:65:e7:ed:f6:88:da:e4:08:27:9a:4c:
7b:e6:d4:0e:4b:39:36:c8:55:6d:17:a6:20:73:32:3f:cf:a2:
0b:7e:26:67:e3:3a:cd:f9:0b:e5:04:66:a3:25:21:c5:1d:99:
56:0e:4c:4a:c7:77:02:34:fd:90:43:81:c4:76:b0:6a:a9:21:
38:6d:26:13:8e:87:96:4b:10:72:bf:a5:5f:1e:3f:39:9a:40:
d4:c9:75:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:42 2026 by rpki-client