Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144585.roa
File: AS144585.roa (raw, json)
Hash identifier: qXlnTFETlOARyKLmXapHtRQ8PfsgC/KzmlGMeCI5rkg=
Subject key identifier: 51:ED:29:9C:F5:1D:3D:8D:47:BD:E6:6B:CC:6F:5B:C5:0D:A6:58:3B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2800A2AF877B28B54C79DF96EBAD3E6EAB8F788D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144585.roa
Signing time: Tue 26 May 2026 01:13:21 +0000
ROA not before: Tue 26 May 2026 01:08:21 +0000
ROA not after: Tue 25 May 2027 01:13:21 +0000
asID: 144585
IP address blocks: 240a:a78f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:00:a2:af:87:7b:28:b5:4c:79:df:96:eb:ad:3e:6e:ab:8f:78:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:21 2026 GMT
Not After : May 25 01:13:21 2027 GMT
Subject: CN=51ED299CF51D3D8D47BDE66BCC6F5BC50DA6583B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:97:a2:d3:9f:8f:f1:79:09:1e:fe:79:fa:8f:
4c:d3:e1:2a:b5:de:ed:2b:33:2a:97:a7:2a:15:30:
b1:9c:ad:53:a0:ef:88:51:50:57:c5:e2:67:0b:99:
c8:0a:71:4a:63:5b:83:e2:92:2f:89:01:84:f8:fe:
1f:fd:41:6a:76:2d:19:db:01:dc:84:62:4c:76:23:
b8:ad:44:cd:bf:d2:62:df:50:38:2b:73:cf:e6:eb:
4c:33:06:ed:b4:c2:1d:09:86:ec:e9:e5:b6:1d:a2:
bf:4e:62:9e:d8:ef:70:99:a5:12:47:fc:35:c5:62:
f8:39:20:67:10:c1:7c:af:45:d7:fc:05:6b:f1:1d:
81:ed:bc:4c:4d:01:f9:1b:b7:c9:d2:24:df:01:8c:
8b:dc:53:ea:9c:90:42:ea:fd:ec:c4:ec:6f:21:3d:
ca:65:85:2c:59:0a:8b:ed:ab:fd:dc:2c:17:9c:8e:
37:c8:2e:98:b5:51:41:56:d7:92:87:ea:32:e0:79:
08:00:8b:a4:84:1f:b3:ce:4e:3a:f3:63:6f:e1:cd:
5e:15:1c:ec:ca:e8:cf:a2:b9:13:02:a9:32:a3:7d:
89:f6:f2:a4:5d:6c:23:f4:37:6f:b3:c0:a7:bc:be:
ec:df:9c:65:15:92:34:46:d0:dd:8c:76:70:a4:24:
84:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:ED:29:9C:F5:1D:3D:8D:47:BD:E6:6B:CC:6F:5B:C5:0D:A6:58:3B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144585.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a78f::/32
Signature Algorithm: sha256WithRSAEncryption
5e:b5:54:51:22:ae:14:6c:8d:fb:30:16:65:e3:f2:44:0f:07:
f0:13:7b:f4:88:03:81:41:15:ef:c8:34:d8:01:30:99:d1:f4:
6d:2f:3d:05:b6:b0:d1:b3:d4:96:75:e1:ce:08:a9:7a:3f:12:
2f:33:4f:e5:88:72:29:24:77:a5:c8:10:cb:69:30:33:e2:97:
f1:a8:a1:26:60:a2:36:14:57:70:09:68:2c:ac:71:d0:95:bf:
8c:9a:48:cc:c7:b3:5f:9a:54:4e:a9:1c:7e:a8:a2:4f:29:85:
e9:c4:20:58:0c:72:bf:8c:69:70:ef:eb:53:08:26:9b:07:dc:
46:f0:ea:90:5b:8d:1c:0e:c1:c4:ba:71:92:d7:7f:76:31:dd:
28:1e:41:24:54:2f:02:e0:01:d3:88:c2:94:5b:7d:7e:2d:91:
2a:56:f4:8a:25:4e:cf:9e:66:12:69:6f:e9:cf:ed:ae:e5:2b:
8a:f2:1a:9f:00:13:d8:61:e1:0a:84:f2:19:33:b9:93:c6:0b:
09:83:e8:19:90:01:73:df:42:87:75:fc:a4:38:fa:ff:e7:1f:
fe:a8:94:0d:75:f6:7f:9f:11:f9:2f:34:03:05:14:86:4e:54:
28:ec:53:46:bd:7e:d7:cd:8a:d9:6f:62:e3:4b:5a:34:67:a3:
02:b7:73:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:28 2026 by rpki-client