Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144600.roa
File: AS144600.roa (raw, json)
Hash identifier: 7/lWrKKED0jC+F69E0zuJxEKisJjFyMpAgYzo6KoHNc=
Subject key identifier: 09:AA:49:8C:C6:5B:9C:56:7E:02:AE:6B:2C:2D:86:09:F5:02:FA:28
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: FA33C25476C103AE1010FEEA1AB80F4C697AE3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144600.roa
Signing time: Fri 22 May 2026 07:08:37 +0000
ROA not before: Fri 22 May 2026 07:03:37 +0000
ROA not after: Fri 21 May 2027 07:08:37 +0000
asID: 144600
IP address blocks: 240a:a79e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
fa:33:c2:54:76:c1:03:ae:10:10:fe:ea:1a:b8:0f:4c:69:7a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:37 2026 GMT
Not After : May 21 07:08:37 2027 GMT
Subject: CN=09AA498CC65B9C567E02AE6B2C2D8609F502FA28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:10:ef:14:4d:b3:9b:96:d2:76:87:db:c8:8b:
51:9a:ba:17:fb:a6:78:17:47:24:8a:bc:0c:88:6f:
04:30:e0:11:6d:17:64:be:cf:c9:07:7b:99:3c:b1:
7f:94:d6:0b:a3:1c:af:1f:7a:70:15:15:e0:d0:15:
63:af:20:66:23:5d:0f:fe:fa:0f:54:88:19:b1:ab:
83:45:0c:10:a3:66:ab:b8:84:a6:d6:f7:ec:2b:c7:
c1:3d:93:cd:00:95:0e:29:a1:51:6a:a4:da:a1:1c:
39:a2:00:89:85:6d:be:25:f8:c2:cf:ee:8d:77:a0:
f2:c5:ed:43:e2:03:96:02:73:17:2b:1f:72:76:7a:
26:56:77:02:a2:db:09:3d:7a:4b:48:4e:4e:67:07:
d6:fa:08:61:34:f1:41:99:df:cf:4e:10:16:bf:18:
ef:21:48:dd:dd:9d:23:56:a8:8d:ae:40:c1:dc:d8:
83:c0:b8:18:1d:38:b0:86:d3:fc:92:75:40:98:0a:
11:c3:82:c0:bc:58:d7:2d:8c:80:f9:e6:c1:e9:da:
3f:e3:58:a2:d5:0e:04:70:d9:73:22:fd:03:c4:a1:
75:72:a3:35:67:c8:71:b5:8d:87:74:c4:29:7f:f2:
ab:54:cf:ad:99:1a:82:8f:25:e0:82:e1:9a:4a:54:
2a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AA:49:8C:C6:5B:9C:56:7E:02:AE:6B:2C:2D:86:09:F5:02:FA:28
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144600.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a79e::/32
Signature Algorithm: sha256WithRSAEncryption
57:b1:59:eb:2c:5d:47:3a:98:3a:2c:54:e6:05:4c:fd:b8:00:
c9:31:5a:72:c9:60:49:38:c0:4f:b5:55:64:b8:c8:1f:91:82:
47:4d:9d:d3:84:63:58:0f:27:9f:20:40:bb:be:0b:9b:f3:14:
a8:ee:b9:14:c0:4a:88:3b:1e:a1:c7:20:2d:f9:88:21:54:af:
04:5e:bc:0e:f1:18:c7:c0:5e:21:34:95:4b:98:c4:5f:a5:c4:
5d:a6:36:66:88:89:09:6c:95:f4:a0:15:b4:56:16:98:5d:7f:
15:8a:be:05:db:8f:da:0c:fe:7e:c2:7e:79:19:99:7d:1f:6e:
a4:07:a5:56:ad:24:39:a7:31:39:e9:d4:1a:d5:f8:ea:64:12:
e9:fb:23:8f:49:90:02:e7:3f:a9:73:ab:87:f9:94:90:41:1a:
60:e2:17:02:fa:86:ad:5c:25:15:17:c1:94:7e:91:fb:fc:dd:
10:4a:6e:50:ac:fe:a6:bb:09:3b:5e:80:08:4e:02:1b:c9:7d:
73:a4:bc:70:41:7c:94:8f:ad:e7:06:29:9e:c7:d4:f9:e5:ed:
18:2e:e2:5b:df:e6:db:b1:73:ba:b5:37:14:e2:d2:20:4b:ce:
46:bb:57:6c:54:25:92:14:d5:67:53:66:77:eb:fd:92:f7:d9:
8a:9c:21:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:45 2026 by rpki-client