Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144603.roa
File: AS144603.roa (raw, json)
Hash identifier: kvZk/gKoyMX8nzHrJS60PxzfVXQ2//+646ZOELn3uME=
Subject key identifier: 56:A8:48:7F:38:93:C7:D5:EF:CF:86:21:94:43:76:91:0E:E5:38:62
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1A970B9290E544594E6F31B8C9477A775E6953E8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144603.roa
Signing time: Mon 25 May 2026 02:22:50 +0000
ROA not before: Mon 25 May 2026 02:17:50 +0000
ROA not after: Mon 24 May 2027 02:22:50 +0000
asID: 144603
IP address blocks: 240a:a7a1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:97:0b:92:90:e5:44:59:4e:6f:31:b8:c9:47:7a:77:5e:69:53:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:50 2026 GMT
Not After : May 24 02:22:50 2027 GMT
Subject: CN=56A8487F3893C7D5EFCF8621944376910EE53862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:b3:bc:12:57:e5:60:c8:dd:e7:22:c2:00:
6e:d8:00:0b:f2:6a:e0:70:5e:87:a5:a1:8c:b1:ee:
29:3d:7e:d6:5b:90:71:1d:d9:a4:a6:61:e3:db:9c:
f1:e7:1d:6a:cb:14:af:0d:b0:5b:12:e6:c2:6a:56:
68:0f:da:71:b9:f0:19:5c:de:54:c0:91:d3:55:91:
37:aa:19:22:1b:53:a4:3e:d7:dd:8b:19:60:f3:5b:
5e:f2:ea:b7:79:f1:a1:53:41:e4:4a:43:69:20:61:
2d:44:20:a9:29:e5:d7:96:c0:64:dc:bf:93:ca:43:
93:7f:da:ff:ea:b9:e0:1b:15:29:eb:b7:74:3d:02:
c6:07:f3:be:e9:31:25:4c:5c:81:f6:26:4f:68:25:
a3:aa:a8:94:bb:f1:96:f5:83:9d:11:ec:61:22:a3:
4e:39:04:76:86:b6:9a:a5:3d:ef:2d:a5:52:87:24:
77:40:a8:1e:d6:00:5c:57:61:da:f0:b0:fe:41:ac:
7c:28:38:aa:f8:8f:74:46:79:82:8f:c8:c3:88:1e:
fa:42:38:b7:34:4e:63:53:f8:cb:3b:b9:ec:13:85:
68:4c:f6:d8:08:74:c1:91:71:e8:13:dd:dd:96:f9:
56:4e:2a:86:b7:09:9a:32:f5:37:bf:26:69:0f:40:
12:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A8:48:7F:38:93:C7:D5:EF:CF:86:21:94:43:76:91:0E:E5:38:62
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144603.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7a1::/32
Signature Algorithm: sha256WithRSAEncryption
a5:59:51:23:87:24:e4:64:2d:a6:76:cc:e4:0d:43:d9:1c:7d:
8f:ea:aa:92:b2:d5:05:89:84:31:51:85:34:3a:39:09:f7:b5:
2a:d0:3f:d7:9f:9d:83:76:9a:26:11:bc:78:1c:49:10:17:39:
dd:9e:da:3c:63:28:37:cf:88:37:99:0b:1a:39:6c:fe:6c:5f:
8c:f4:32:da:fe:91:b1:2d:6d:6b:6d:7c:84:8c:ff:b5:ca:e2:
95:14:e1:a7:47:40:dc:cf:ac:40:0d:9f:c9:8a:0a:48:f4:2e:
30:f4:8e:65:26:5a:31:2d:21:3e:b1:03:61:0f:8f:73:d7:0b:
42:b6:26:8a:e4:d7:f1:f9:cf:0c:20:53:ea:50:67:6a:ea:33:
9f:2b:f9:dc:db:4c:f2:c5:d6:29:c0:0c:ba:83:39:19:7f:a1:
21:12:5d:b1:3d:70:09:e8:06:8f:31:a4:64:ff:bc:35:dd:56:
b6:8b:b4:b0:6f:c8:a4:74:c3:9f:55:8c:fd:c5:68:9c:99:25:
ec:b8:26:ea:b6:46:73:a2:f3:fa:87:c0:a1:6f:2f:ea:3f:73:
65:55:a0:40:21:82:b3:f8:a4:90:fa:31:e7:59:00:59:be:d5:
a9:3e:3e:c7:db:d2:c5:8c:7b:60:9d:bc:a1:23:a8:4c:13:14:
c2:97:67:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:48:59 2026 by rpki-client