Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144601.roa
File: AS144601.roa (raw, json)
Hash identifier: LQnld5J4zCYCazbmXR9RE5uDEuc2MHUlRmcoSfAj5cw=
Subject key identifier: 40:2D:79:F0:EC:0E:A2:A0:B9:E2:84:6B:C9:DD:FA:7E:F4:9E:01:F6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7DB8B1C18C30DDEAAC45E2DF183EAD4349E4572E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144601.roa
Signing time: Fri 22 May 2026 02:47:53 +0000
ROA not before: Fri 22 May 2026 02:42:53 +0000
ROA not after: Fri 21 May 2027 02:47:53 +0000
asID: 144601
IP address blocks: 240a:a79f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:b8:b1:c1:8c:30:dd:ea:ac:45:e2:df:18:3e:ad:43:49:e4:57:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:53 2026 GMT
Not After : May 21 02:47:53 2027 GMT
Subject: CN=402D79F0EC0EA2A0B9E2846BC9DDFA7EF49E01F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:72:e0:50:33:a3:11:52:42:8a:3c:94:98:
75:0c:0c:86:7a:42:7d:5f:69:e3:6b:e7:77:7e:d9:
c1:cc:d3:86:68:5e:d4:b9:4e:25:80:58:7a:fb:4a:
80:fc:85:3b:bc:36:4e:79:36:4a:c8:0c:47:5c:5d:
de:ed:1a:93:6c:a0:b6:3c:2e:95:31:3e:63:dd:8a:
95:91:c3:22:d4:ef:3e:57:71:2c:1d:94:dc:ce:fb:
26:49:3e:8a:0f:e7:2b:cf:3e:88:e1:15:ae:8a:9f:
8a:23:fd:5b:49:3f:f0:61:1c:6f:17:42:b4:6b:45:
d2:9d:20:3a:ee:91:61:80:be:b0:27:50:34:70:a9:
0d:72:46:fd:fd:d9:7b:ce:29:e5:15:93:75:50:79:
fd:40:9f:05:62:47:16:9c:f4:46:fd:53:d9:f0:f7:
2e:15:b0:8e:ee:5c:c1:1f:cb:72:a2:b0:fd:05:ef:
35:9b:cf:b2:53:85:b4:70:ac:f7:5d:ce:0b:7b:1e:
d5:4c:cf:f0:7f:9b:25:5b:f6:b8:36:89:33:fd:23:
c4:f5:2b:22:f2:fb:d0:3b:f7:09:86:f8:be:b4:42:
ce:88:df:4c:d7:98:ed:8e:2d:83:30:79:4f:88:a7:
d0:00:da:a8:16:58:5c:30:a0:7f:9a:9a:9e:0b:66:
72:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2D:79:F0:EC:0E:A2:A0:B9:E2:84:6B:C9:DD:FA:7E:F4:9E:01:F6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144601.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a79f::/32
Signature Algorithm: sha256WithRSAEncryption
b5:c8:60:13:ff:d9:0b:30:74:1d:c8:5b:09:4a:ad:22:b0:5e:
39:77:04:ab:92:6c:97:82:36:e0:d1:af:8d:31:41:0f:46:c7:
3f:8d:40:cd:b5:37:d7:ca:dc:aa:cb:25:c4:0f:52:2d:0c:09:
82:d4:35:e2:f1:bc:b1:af:cc:c6:c5:f0:75:80:5f:79:c4:77:
da:4c:d8:37:12:e8:15:a2:6f:9e:8f:f5:06:4e:5f:f5:81:d3:
43:5f:33:1c:5a:fb:74:17:30:d6:e2:ed:85:85:33:a2:aa:98:
b3:fc:0d:7b:b1:fa:3e:ec:6f:e0:4f:e9:11:a6:0d:b3:83:10:
26:96:68:e7:fe:c8:62:8d:80:e0:98:61:59:fc:ed:0e:0e:bf:
8e:04:e6:18:56:68:16:42:52:60:a5:43:5a:c4:c5:33:b8:e6:
d9:d1:99:b1:35:f2:4b:4a:6d:44:8f:1b:74:7c:4d:21:ca:f5:
df:b0:4b:e6:2f:98:25:cb:4c:19:fd:3c:74:01:ce:0e:78:ee:
44:ae:72:7f:a8:bd:ea:07:bd:e5:d4:4e:49:85:03:bc:ce:4c:
74:17:e1:bf:aa:42:31:8b:09:05:b6:c9:7c:07:03:6a:c7:8f:
1f:57:bc:4c:30:f6:45:9b:11:79:e6:1f:e7:e1:30:53:56:30:
67:e6:29:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:08 2026 by rpki-client