Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144574.roa
File: AS144574.roa (raw, json)
Hash identifier: 3E2K2TOQICDep55fxdmCi/kqKcnCa35DcrFLv8W55oQ=
Subject key identifier: 0E:1E:DD:D2:38:4B:10:33:0E:27:FD:A9:94:42:D7:8C:67:AE:CB:57
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3E4012341CD4E737F414878779B3231B7D4B7188
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144574.roa
Signing time: Tue 26 May 2026 02:35:01 +0000
ROA not before: Tue 26 May 2026 02:30:01 +0000
ROA not after: Tue 25 May 2027 02:35:01 +0000
asID: 144574
IP address blocks: 240a:a784::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:40:12:34:1c:d4:e7:37:f4:14:87:87:79:b3:23:1b:7d:4b:71:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:01 2026 GMT
Not After : May 25 02:35:01 2027 GMT
Subject: CN=0E1EDDD2384B10330E27FDA99442D78C67AECB57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5f:45:22:72:69:38:0e:5c:59:3d:a6:90:de:
88:5c:82:7a:d2:0d:50:53:34:f7:9c:10:e8:3c:a3:
66:ff:b3:4f:71:bd:a7:53:72:00:8e:65:2a:33:46:
70:12:41:fb:b8:f5:90:7a:00:42:84:c8:91:a9:cf:
d0:e1:85:01:17:4c:11:50:19:8e:57:06:eb:b7:e1:
13:28:3e:70:15:2f:31:10:34:9c:e8:28:04:30:de:
7a:75:d5:22:27:d6:82:c7:ce:a9:ed:ef:e8:55:b2:
0e:3b:a1:8c:35:bf:35:cc:6c:97:94:b1:4b:73:19:
d4:fd:c2:38:6c:80:32:46:09:9e:8b:5a:49:b4:b4:
83:fc:e5:85:07:2e:83:58:23:1e:17:7d:67:92:07:
34:f4:b2:8b:ae:16:9a:96:b7:8d:9e:fa:46:ce:2f:
4d:db:c8:99:7a:9a:53:57:be:c0:f0:6b:04:06:1f:
db:95:26:c6:76:22:dd:2a:cd:92:51:6d:90:de:91:
bd:9d:1b:29:d6:71:06:b4:1e:82:68:2e:ff:9b:40:
74:ca:8a:de:62:18:e6:5b:99:c4:88:b0:dd:23:49:
6a:5c:7c:43:91:b6:f2:9c:1b:d0:e1:1f:4d:3c:39:
9c:09:0f:3a:2b:a8:66:f0:01:76:34:95:7c:7e:b2:
52:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1E:DD:D2:38:4B:10:33:0E:27:FD:A9:94:42:D7:8C:67:AE:CB:57
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144574.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a784::/32
Signature Algorithm: sha256WithRSAEncryption
bb:71:09:59:68:0a:90:da:ff:a4:e3:96:44:fa:b8:35:70:dc:
a6:18:21:15:a7:77:31:90:35:42:52:fc:b6:08:a7:f6:a4:9a:
1c:b4:b0:4c:72:46:a7:8e:31:a5:af:1f:01:10:84:a9:c8:2a:
c0:58:4a:df:ef:ff:83:04:d7:55:6d:1a:30:87:ea:2a:7f:f1:
8a:da:01:d8:d8:05:ce:f2:bc:31:53:63:09:b8:a3:4f:8e:06:
29:eb:60:6f:b0:21:c0:bf:61:1f:c1:63:40:56:53:57:9e:07:
c1:33:6a:4f:f0:c1:b8:6c:d5:18:8f:90:52:da:8c:31:e7:fd:
d9:4f:2f:a4:d1:2c:3e:da:0b:19:59:70:26:5f:7a:ef:5d:ff:
f6:b8:ee:c3:aa:ea:36:d8:93:64:04:67:5a:65:b9:dd:6f:0f:
9b:20:9d:f7:b9:a6:6b:d8:d5:30:b1:d2:fe:30:f7:b4:6e:d1:
21:0b:21:7d:07:5d:10:33:10:49:dd:f9:1d:db:3c:c9:00:1a:
2b:cb:32:ed:87:fe:54:c8:56:2d:df:42:5e:68:b3:eb:2b:0e:
49:d4:3a:06:87:35:5b:f6:b8:35:63:ad:62:bc:9a:37:fe:fb:
50:27:12:01:5f:04:80:cd:10:46:b3:15:2b:0f:ed:e2:86:4d:
3e:10:96:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:26 2026 by rpki-client