Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144589.roa
File: AS144589.roa (raw, json)
Hash identifier: Iq1MMI88Dst6Zx7Vr9zn014/3XPHAlVtrWWQ+gXYqsg=
Subject key identifier: E3:6B:DC:B6:75:D4:71:4A:7A:77:BE:A3:C0:DA:37:DA:F0:B1:69:19
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6A847150E0140B00BC2B9BA3EAB10BD34CC7D044
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144589.roa
Signing time: Fri 22 May 2026 07:40:43 +0000
ROA not before: Fri 22 May 2026 07:35:43 +0000
ROA not after: Fri 21 May 2027 07:40:43 +0000
asID: 144589
IP address blocks: 240a:a793::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:84:71:50:e0:14:0b:00:bc:2b:9b:a3:ea:b1:0b:d3:4c:c7:d0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:43 2026 GMT
Not After : May 21 07:40:43 2027 GMT
Subject: CN=E36BDCB675D4714A7A77BEA3C0DA37DAF0B16919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:1f:60:06:41:09:bb:53:27:8d:46:df:31:
3d:e1:ae:f2:4b:97:58:d5:aa:78:3e:0b:12:73:42:
18:9c:7c:76:67:36:9f:04:5a:68:72:10:29:9e:d2:
7b:c0:64:73:60:d9:2f:0a:25:88:ef:1b:3e:b1:6b:
00:fd:96:99:67:37:00:f1:f5:e3:15:25:20:22:86:
21:fb:8c:83:c2:05:44:35:37:38:bd:72:10:a0:e2:
7c:59:8e:fc:99:e4:17:48:62:ac:b5:71:5e:99:6b:
fc:79:c0:d0:36:e8:0d:81:e1:92:05:6d:21:b5:9f:
ab:e2:a9:bb:96:5d:78:1c:fb:08:95:97:17:2c:be:
d5:31:7a:c9:7e:7f:90:d7:a5:f7:19:80:b8:b6:08:
a7:5f:4a:31:36:34:b4:0c:58:6b:17:04:26:03:f2:
96:84:31:c4:1f:86:f5:dd:ef:40:d9:8f:fc:36:2c:
0a:6a:53:cb:3f:7a:b5:4f:50:0b:7e:53:6c:53:b8:
5d:65:1b:17:65:b1:ab:5b:0b:3f:ad:f9:a1:f8:cf:
d5:e2:87:1a:15:e4:f7:72:97:98:35:9d:47:2f:10:
40:59:0f:2c:2d:51:d0:e8:11:3c:17:62:dd:18:fa:
27:1e:59:41:fd:b9:5f:8f:c8:f7:da:06:88:2a:76:
49:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6B:DC:B6:75:D4:71:4A:7A:77:BE:A3:C0:DA:37:DA:F0:B1:69:19
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144589.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a793::/32
Signature Algorithm: sha256WithRSAEncryption
66:b8:69:b1:a1:31:c9:0f:b0:58:ed:19:a8:78:60:1f:5b:15:
ad:77:2f:cd:84:35:a4:bb:6d:48:76:26:53:52:ce:8e:75:fc:
82:31:8d:d5:b5:8b:5a:9e:63:6a:1f:6e:88:7d:c8:ad:17:ad:
73:d0:24:36:52:b4:ac:47:dd:4a:48:ed:8b:df:99:86:9b:6d:
e8:5d:8e:a8:86:ed:52:4d:08:ee:24:23:0a:f5:99:cc:81:e1:
61:ae:38:85:b6:77:d7:5a:5d:b4:8d:4a:fd:9f:d3:74:24:96:
bf:f4:f7:6f:9a:c7:1a:91:cf:d2:44:e3:44:a2:63:f4:8e:52:
c5:87:88:b3:eb:9d:c2:7d:85:d6:56:1c:a5:2c:81:d5:99:61:
e1:d1:2a:cf:73:0d:c1:e1:03:39:f3:f3:6c:8b:58:e0:f0:16:
dd:11:ae:23:ab:cb:14:ca:8d:cd:f0:c6:4e:14:e6:a3:8b:4a:
23:0b:00:4a:3e:72:29:c5:46:ae:14:bf:56:c0:a7:f5:7c:ac:
fc:4d:51:d7:7c:e2:d3:13:4f:77:6f:1c:f9:cb:be:18:8f:9f:
48:f1:f9:d3:b1:8e:0d:c6:5f:aa:60:b2:89:99:16:b1:d7:0a:
1d:3a:b3:31:a5:2c:57:9d:75:a8:c4:44:17:4b:8d:ea:29:6a:
90:61:e8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:11 2026 by rpki-client