Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144596.roa
File: AS144596.roa (raw, json)
Hash identifier: Kz3ASygA7kuC8MjptmPGc2ulymlEfkSSyedr7HteTEA=
Subject key identifier: 21:E2:F8:84:B6:1E:41:53:D9:75:AF:E1:65:1D:85:86:5A:B9:50:69
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 42965F828CC34A63B6E97C170AB8F6E6F2EFE642
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144596.roa
Signing time: Mon 25 May 2026 06:28:36 +0000
ROA not before: Mon 25 May 2026 06:23:36 +0000
ROA not after: Mon 24 May 2027 06:28:36 +0000
asID: 144596
IP address blocks: 240a:a79a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:96:5f:82:8c:c3:4a:63:b6:e9:7c:17:0a:b8:f6:e6:f2:ef:e6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:36 2026 GMT
Not After : May 24 06:28:36 2027 GMT
Subject: CN=21E2F884B61E4153D975AFE1651D85865AB95069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fb:01:60:be:d7:be:9f:83:5c:12:d2:5f:30:
00:b0:c4:e0:28:3a:30:c3:6d:85:ba:73:27:bc:02:
5f:98:cc:e0:9b:4c:4c:38:f9:b4:c1:f2:6b:6d:e6:
cd:0f:a8:f5:a9:91:2b:d5:56:04:e7:dd:48:96:cd:
3c:78:21:0d:5e:80:63:ce:61:0c:76:c1:bf:7e:40:
56:f6:72:ee:77:ee:77:68:97:fb:cb:b2:ad:e6:ba:
41:47:93:c0:a0:be:8c:ca:8d:91:50:3d:0b:d2:b1:
bd:ae:62:6a:11:cd:4b:1e:a1:96:91:22:88:0f:94:
fd:48:e5:e2:1a:79:3b:51:5a:a0:09:d2:01:6e:56:
e8:37:4c:b6:50:5f:15:aa:56:e2:4e:f3:38:8e:78:
9b:03:fd:51:28:27:38:b1:d0:73:b5:16:a3:d5:f6:
6c:2c:71:b2:22:72:f2:09:2e:22:97:41:ae:ca:45:
d6:c3:24:c5:aa:40:4a:1e:8a:96:12:91:f6:54:f8:
bc:f5:f3:b0:30:41:61:eb:93:3f:c5:f0:f3:c6:08:
cc:72:43:45:31:0a:30:1e:cb:f8:83:0a:3e:c7:16:
55:a2:9c:8b:34:94:71:c0:99:3b:f0:57:be:8f:19:
39:01:59:70:90:55:b3:69:fe:6b:c4:7e:6c:ad:93:
be:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E2:F8:84:B6:1E:41:53:D9:75:AF:E1:65:1D:85:86:5A:B9:50:69
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144596.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a79a::/32
Signature Algorithm: sha256WithRSAEncryption
56:e6:ef:78:50:5e:c7:16:28:00:2c:9e:fb:d3:87:52:4d:95:
0c:ba:8d:68:0b:27:61:94:1a:8a:de:33:cf:f9:67:24:76:ae:
80:f4:53:3e:0b:70:97:41:49:91:68:b6:ef:f3:f7:ab:6b:53:
3d:19:bc:1a:fa:8d:cf:4b:94:4a:7d:6a:f5:bb:2a:63:68:86:
f0:ae:3a:c0:14:de:af:11:2e:23:8f:77:4f:0e:0a:39:6b:cc:
31:3f:3f:1e:55:26:6f:03:6b:a8:cb:13:36:49:e4:17:f4:52:
b3:6a:28:8b:e4:d2:58:6e:fa:08:66:f6:26:36:f5:52:f3:74:
4a:58:9b:70:12:06:49:3e:6b:ba:db:33:40:f2:c6:fa:cd:31:
86:43:3a:83:bf:c1:41:2f:ea:2d:87:ec:d6:2d:c6:6c:3f:24:
c7:5b:a7:a3:b6:8c:64:7a:be:d9:5f:16:b8:9f:95:0e:3b:6f:
68:39:ff:4c:b3:db:d6:18:88:6f:69:b8:1a:12:5d:ae:cc:24:
c1:2c:79:6a:e1:0d:cc:3a:78:72:cd:b3:62:7b:a9:6f:a3:e3:
38:db:0c:a5:ae:c3:94:41:33:d4:45:23:44:cc:cf:d9:e8:4d:
29:5f:82:c3:ab:e9:75:95:bc:14:14:03:58:99:b0:30:89:63:
59:14:c9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:18 2026 by rpki-client