Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144575.roa
File: AS144575.roa (raw, json)
Hash identifier: 1OYf/noyqSlHK3kHx/7bEZkAj+ukIcoxhmKdwLYCgTU=
Subject key identifier: 64:FD:AF:AD:00:6E:EB:A0:61:E0:E2:5F:E2:C4:24:FD:FB:D3:94:2D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 60DCA3A9FE50D40C0D8FD5065A19CB8E59F33C65
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144575.roa
Signing time: Mon 25 May 2026 06:49:13 +0000
ROA not before: Mon 25 May 2026 06:44:13 +0000
ROA not after: Mon 24 May 2027 06:49:13 +0000
asID: 144575
IP address blocks: 240a:a785::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:dc:a3:a9:fe:50:d4:0c:0d:8f:d5:06:5a:19:cb:8e:59:f3:3c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:13 2026 GMT
Not After : May 24 06:49:13 2027 GMT
Subject: CN=64FDAFAD006EEBA061E0E25FE2C424FDFBD3942D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:66:c4:83:23:0b:77:2e:91:a8:09:fb:5b:
3d:60:f1:b7:60:c1:a8:53:c2:7b:2a:ff:66:2f:ac:
c6:6a:be:79:ca:d0:73:05:61:6f:af:a7:d6:fe:1a:
a6:3a:b8:e1:df:91:e1:ab:e3:f2:ea:9a:4f:56:b2:
25:6b:29:df:1d:3d:fa:6b:48:e4:34:40:7f:e6:cd:
94:e8:d8:b8:f3:6b:d1:28:13:a1:a1:d6:f4:f6:26:
44:75:2d:46:86:12:ad:f2:8f:2e:8c:6b:f0:18:ec:
0d:49:d1:78:fa:f6:5c:ae:79:db:bf:ee:4c:d8:a7:
fb:63:75:9c:97:03:59:bb:ff:21:1e:f3:b2:bf:4e:
08:10:b5:ce:6a:dc:df:6a:a6:c3:11:76:c0:e2:2a:
0b:16:c2:89:f4:e4:66:f3:ed:69:bc:6a:6b:6b:5a:
82:55:1d:86:d4:96:e0:8d:4a:b3:87:93:07:45:7e:
6a:78:db:b9:d4:d8:25:bf:96:b1:93:db:27:15:62:
ce:10:61:d4:c0:26:d1:0b:9e:c3:62:2c:af:b0:7d:
49:70:d3:4f:24:40:d3:01:bf:47:73:7a:07:ec:d0:
f2:5d:63:3d:b8:5a:35:53:4e:9d:83:36:9f:64:a3:
c9:71:26:56:af:02:a2:72:64:60:62:02:c2:a5:1f:
34:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FD:AF:AD:00:6E:EB:A0:61:E0:E2:5F:E2:C4:24:FD:FB:D3:94:2D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144575.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a785::/32
Signature Algorithm: sha256WithRSAEncryption
85:27:5d:6e:99:5c:33:80:f1:c7:b9:b9:3d:ee:6a:71:96:f4:
1c:07:da:cf:41:a1:9b:05:a9:bb:46:7a:51:29:d6:07:d0:4d:
bb:71:b4:dc:75:62:e7:a6:97:a3:b7:e3:79:d9:42:69:aa:1a:
5a:94:8b:89:7e:c0:6f:12:99:2e:f5:5c:c4:ea:9c:36:9e:32:
8b:ea:1a:e3:27:32:cd:b0:7b:ca:04:26:73:87:d8:ac:62:60:
4c:35:4a:e3:58:7b:38:b9:45:29:14:6f:82:e5:d3:09:d3:06:
9e:ce:9d:72:74:83:e7:4f:6d:2a:fe:b7:6c:be:d4:2a:54:5e:
51:2d:a7:fa:4b:14:77:e0:72:fa:aa:a2:28:11:26:f4:03:50:
91:ec:37:87:f5:f5:a8:c4:3f:b2:c0:94:de:9d:ca:da:c5:37:
09:c1:6f:b7:27:5b:63:7d:d1:0e:e1:47:3c:54:44:07:81:9b:
ad:f5:33:1d:40:2e:bd:4a:8d:b4:39:81:32:fe:47:b8:ff:ff:
5b:74:96:f8:25:65:6b:4f:72:8f:7f:ee:99:57:68:e1:a3:ca:
c1:92:94:bd:e1:1b:9a:b4:91:f8:f9:bc:b0:88:b5:4b:0a:af:
1d:86:37:4f:eb:58:ae:11:ae:bc:62:a8:45:61:ba:67:84:f1:
b7:d8:d3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:29 2026 by rpki-client