Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144594.roa
File: AS144594.roa (raw, json)
Hash identifier: rlHU+RK7mT4loIwjfjH3sGr2HBvQAulMJj02epmbF6o=
Subject key identifier: B1:C9:1B:D7:B2:64:48:90:CC:90:5D:4D:B7:EF:5B:70:9A:AB:01:4A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6687A3A1BE7F43160FEF442D06385B2B940A5052
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144594.roa
Signing time: Fri 22 May 2026 07:09:04 +0000
ROA not before: Fri 22 May 2026 07:04:04 +0000
ROA not after: Fri 21 May 2027 07:09:04 +0000
asID: 144594
IP address blocks: 240a:a798::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:87:a3:a1:be:7f:43:16:0f:ef:44:2d:06:38:5b:2b:94:0a:50:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:04 2026 GMT
Not After : May 21 07:09:04 2027 GMT
Subject: CN=B1C91BD7B2644890CC905D4DB7EF5B709AAB014A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:35:0b:44:a2:4a:6d:f1:f2:25:49:ad:d9:
fd:5d:86:73:b6:d5:75:9f:f4:d5:f0:45:ee:a8:6e:
ef:39:d6:e9:ed:0a:4b:3c:35:0d:f8:5c:85:f6:61:
9f:4d:b0:a7:78:3c:c9:5d:0f:e5:8e:c3:79:6e:18:
0d:21:f5:1d:8c:bd:df:f6:6c:24:9b:c9:43:d5:43:
6a:a6:d9:78:2b:18:ac:44:3f:36:47:da:31:97:1f:
42:81:c7:c8:b6:aa:b0:72:91:da:09:9e:6d:86:71:
ca:cb:16:b0:99:44:5a:35:14:2c:27:33:51:d6:b3:
07:72:1e:b4:94:e5:22:81:bf:af:db:ec:83:9b:ca:
36:74:b6:5d:c5:e9:82:31:8f:9a:a2:8b:28:17:9e:
d9:18:f2:38:69:0f:95:a2:6f:9f:87:db:39:5c:9a:
e3:b9:bc:5a:b3:de:72:f2:68:31:67:3a:a8:de:ab:
83:79:ae:53:d5:6f:ac:f0:5e:fe:d2:55:e4:71:49:
4c:53:7b:69:b9:a3:e7:f5:45:e5:d7:5c:fd:69:1a:
ac:4c:6c:25:77:4e:5c:d6:45:52:5f:93:ab:e2:2d:
e9:48:3f:f2:af:34:6e:dc:01:13:4d:e4:2b:7c:06:
de:91:b3:76:e2:11:a5:34:31:45:5c:85:c2:31:25:
d2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C9:1B:D7:B2:64:48:90:CC:90:5D:4D:B7:EF:5B:70:9A:AB:01:4A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144594.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a798::/32
Signature Algorithm: sha256WithRSAEncryption
56:bd:dd:d9:1f:13:d0:34:5a:26:ed:01:43:e4:66:9e:56:71:
8f:14:f0:b5:35:f2:8b:f1:c8:ce:3d:70:c8:ec:09:a4:44:f4:
9d:07:df:ad:e0:cf:92:b4:20:c1:62:31:e3:b0:17:e8:92:30:
19:76:ed:7d:4f:49:54:eb:16:ec:3d:42:cc:b1:9e:7b:79:ff:
a8:38:5e:90:64:34:87:b1:1e:95:62:a2:88:5f:60:6c:6a:d1:
f5:c7:38:ff:85:1b:7e:91:d0:46:b7:4b:50:04:62:d5:de:29:
b3:46:3c:1c:f3:6f:9b:29:13:61:ae:81:90:9c:3f:85:16:92:
b0:85:73:12:5f:c5:72:ae:c6:99:e4:f0:1a:0d:7d:74:47:7c:
21:2f:b6:18:43:be:81:af:5e:dd:a9:77:85:9f:86:f4:cb:d5:
42:70:82:35:47:12:a5:4a:15:32:13:87:6f:58:53:ef:9f:8d:
e3:42:88:1b:e2:02:d9:ec:85:7a:d5:f0:9a:6d:99:ef:13:69:
c0:9f:7b:71:a4:90:65:f2:b4:99:e6:bd:68:f1:3e:56:1d:b0:
07:c1:fe:82:7e:27:5a:3d:79:61:dd:c7:4f:3b:e5:c8:dd:d4:
44:4c:f2:d7:c9:de:72:3d:bb:98:72:d4:bc:1f:3d:d5:a2:41:
1c:e9:de:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:56 2026 by rpki-client