Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144586.roa
File: AS144586.roa (raw, json)
Hash identifier: RWFidaK3BOPcdcS/Dmy2lLsxjqv1zr8mIcfr2/LWPP0=
Subject key identifier: 28:DD:98:62:4A:83:5E:7A:17:1F:1C:29:EB:2C:DC:81:10:B6:E3:D5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6E24AEC6B5F5F4F023B4AB4A5BDBCE7027B04F2C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144586.roa
Signing time: Fri 22 May 2026 04:08:31 +0000
ROA not before: Fri 22 May 2026 04:03:31 +0000
ROA not after: Fri 21 May 2027 04:08:31 +0000
asID: 144586
IP address blocks: 240a:a790::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:24:ae:c6:b5:f5:f4:f0:23:b4:ab:4a:5b:db:ce:70:27:b0:4f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:31 2026 GMT
Not After : May 21 04:08:31 2027 GMT
Subject: CN=28DD98624A835E7A171F1C29EB2CDC8110B6E3D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:14:92:1f:62:2b:96:23:f9:b3:80:32:90:
e9:58:1d:cd:43:11:33:52:b7:3f:d3:73:5b:14:c6:
7d:d3:7a:ff:13:37:b5:ee:d0:5f:0e:47:d3:d5:73:
55:81:80:2f:c6:cb:2e:0c:f5:22:6c:7b:7f:67:3e:
a9:46:35:2d:2a:28:21:fd:ae:0f:ab:22:d1:1c:51:
7c:4e:92:db:8f:cd:f3:5c:f2:3c:76:03:a5:7d:40:
70:70:8e:61:c9:96:4a:3e:76:2b:95:27:01:df:8c:
70:81:33:d8:46:19:46:40:5c:88:18:c9:9c:ae:44:
7a:c9:f1:dd:6a:0c:19:74:9a:26:04:cc:21:fa:84:
47:8e:42:dd:89:60:73:20:78:ff:7d:38:7d:39:0a:
34:af:8f:2a:f7:9a:61:26:4c:bf:08:7b:d9:d3:64:
cf:fb:a7:b1:1c:e8:14:4f:ec:0b:09:21:b6:25:18:
83:54:42:08:de:fb:e3:04:17:2b:b4:fa:9a:e0:c0:
34:a5:4c:6f:0e:ea:78:89:eb:7d:1f:43:7f:4f:8a:
1f:0b:b6:11:5e:0d:e9:82:c4:11:b5:88:bd:19:69:
61:53:44:a0:04:c7:9f:25:15:8b:50:bc:92:49:57:
4e:e6:ad:fc:2d:1c:e9:89:9a:4f:d6:a7:a1:75:de:
82:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DD:98:62:4A:83:5E:7A:17:1F:1C:29:EB:2C:DC:81:10:B6:E3:D5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144586.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a790::/32
Signature Algorithm: sha256WithRSAEncryption
7e:f6:46:66:f0:0e:a9:09:d3:ae:49:ee:ab:56:35:e9:dc:d7:
47:fb:d5:50:81:c0:90:d3:72:e4:d8:97:3c:c8:fa:25:8e:ff:
74:3c:7f:da:f3:d2:2f:e9:46:63:c0:38:d4:a5:1c:d1:0b:06:
8a:8e:5e:8e:3e:c7:c4:f9:6b:c9:72:5e:16:0a:57:5a:fd:e8:
eb:dc:eb:d2:ed:e3:2b:a5:84:e8:43:c3:af:6f:5f:a2:78:63:
f8:d8:6a:2f:ee:d3:af:c9:9a:08:28:66:67:dd:55:6d:b3:c0:
a3:3d:b9:40:8b:5e:6b:f6:ce:10:4b:d2:a7:2b:1c:40:e5:0b:
de:b4:b1:6f:a9:07:6e:b8:2b:52:38:69:81:f2:10:aa:2e:5b:
d4:ab:2f:84:e9:19:b0:dc:5b:f2:ca:f3:56:ad:94:25:50:d9:
3b:a1:65:0f:d9:d2:fe:2b:6d:a1:ea:e9:35:d6:62:75:73:ce:
be:6d:77:66:87:15:52:3e:a6:80:8f:22:bb:e1:ab:b3:ca:58:
df:38:bc:6c:99:12:ec:a9:bb:85:77:68:76:f6:2c:20:dc:2e:
14:37:1e:66:f9:88:a2:02:2d:f3:1e:b8:23:02:c8:d7:5c:6b:
6f:34:6b:3e:a0:68:21:ee:23:79:88:de:43:0e:51:5a:f6:82:
8a:05:67:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:50 2026 by rpki-client