Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144597.roa
File: AS144597.roa (raw, json)
Hash identifier: XClK4G/qiqd7Q8jE+ZfV1W38uQ9rNblI2zby0dMvxBM=
Subject key identifier: 9A:9F:74:C9:DD:BF:B1:11:1C:D6:38:5F:32:0C:89:32:DE:8D:53:CD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 228A7A562876F8FBE6037F6154938082D8850F6D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144597.roa
Signing time: Fri 22 May 2026 06:27:48 +0000
ROA not before: Fri 22 May 2026 06:22:48 +0000
ROA not after: Fri 21 May 2027 06:27:48 +0000
asID: 144597
IP address blocks: 240a:a79b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:8a:7a:56:28:76:f8:fb:e6:03:7f:61:54:93:80:82:d8:85:0f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:48 2026 GMT
Not After : May 21 06:27:48 2027 GMT
Subject: CN=9A9F74C9DDBFB1111CD6385F320C8932DE8D53CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d2:16:b0:84:0c:9c:2c:c5:2f:ae:2b:d6:02:
dc:96:5e:0c:53:66:48:57:51:69:4d:c0:e9:0a:77:
1c:9d:31:25:fb:5d:b1:f8:47:25:cb:9c:7e:ba:5b:
57:78:67:6d:28:7c:27:c4:18:81:e3:11:43:63:48:
fb:b3:74:b9:1d:11:1a:6f:cf:59:3a:e6:7b:fb:18:
f1:c8:22:66:d5:ee:7e:fa:02:1c:fa:dd:30:cb:26:
4b:2e:f2:7f:54:73:8c:3d:d3:ac:a1:76:18:54:2d:
04:84:36:b3:95:e7:2d:65:8d:87:e2:16:7d:16:2e:
89:2c:b1:b8:46:3e:1e:13:16:7e:51:dc:85:7c:cd:
a7:6b:60:61:dc:8a:c1:c6:13:35:a5:16:ec:f6:ab:
ca:49:58:d1:99:bc:5f:f4:6d:75:d7:04:dc:75:a3:
5b:70:2e:d5:4a:8a:ba:af:1b:c1:9a:89:3b:03:2e:
a0:77:e6:7b:8f:11:00:16:bb:d7:dd:d1:de:d8:30:
c5:f1:2f:1b:73:9f:01:d0:0b:1d:d0:c7:d3:2c:47:
6e:d3:9b:8d:cd:0f:04:f3:8b:f3:91:51:d9:84:2d:
f0:e8:06:51:f1:69:a3:8d:71:66:4c:f8:51:63:57:
2b:fd:59:aa:0e:05:19:8f:79:39:bd:2f:af:42:26:
3a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9F:74:C9:DD:BF:B1:11:1C:D6:38:5F:32:0C:89:32:DE:8D:53:CD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144597.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a79b::/32
Signature Algorithm: sha256WithRSAEncryption
3e:96:b9:cb:43:b3:d6:05:34:da:52:da:b2:10:f1:b1:0b:6a:
64:fa:83:ed:bb:b1:ac:80:6e:f0:33:51:df:6a:18:d6:ae:fe:
72:23:97:9f:04:b0:b2:46:d9:38:10:32:7f:28:ab:77:b9:96:
a3:c3:13:bc:21:e1:ad:79:5f:3f:df:55:ce:b3:61:57:a0:9b:
ce:48:08:50:51:6e:27:a0:d0:f1:38:cc:a3:88:4e:a7:92:34:
5d:1c:f4:22:4b:f3:1a:9d:39:3b:47:a3:b0:c4:af:cb:e7:28:
7d:08:7d:04:c4:21:50:25:be:dc:0e:87:86:b1:a1:39:87:24:
4f:d5:b7:9f:17:55:df:82:44:81:82:25:f9:5e:c4:8e:ba:ca:
ae:96:db:78:58:a0:30:66:d9:87:08:05:58:57:83:82:34:8f:
a4:7a:23:83:69:92:97:eb:dd:4a:19:78:ef:62:fe:bf:69:ff:
49:01:58:d6:57:59:c6:aa:c8:9e:8f:7e:c5:26:4b:82:05:83:
e9:49:7f:d2:29:03:bb:a4:de:d3:6b:4a:ae:4e:ca:2d:4d:c7:
12:f3:c9:82:88:95:f2:08:04:aa:ef:b0:ae:14:c4:ed:b8:54:
58:a9:c3:ae:a3:e2:a4:11:58:10:e1:d8:82:09:b1:e1:4a:69:
33:48:28:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:33 2026 by rpki-client