Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144610.roa
File: AS144610.roa (raw, json)
Hash identifier: MKhlVwMugBW/QrfdT4S8ymaqt5kXA6CHfT7Yb47AG14=
Subject key identifier: 56:E9:65:11:21:7C:C9:01:60:1A:AC:41:23:93:0B:C8:BE:87:41:AF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 778A359836D99A2FFC689553427C3B966D1E2152
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144610.roa
Signing time: Fri 22 May 2026 06:05:36 +0000
ROA not before: Fri 22 May 2026 06:00:36 +0000
ROA not after: Fri 21 May 2027 06:05:36 +0000
asID: 144610
IP address blocks: 240a:a7a8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:8a:35:98:36:d9:9a:2f:fc:68:95:53:42:7c:3b:96:6d:1e:21:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:36 2026 GMT
Not After : May 21 06:05:36 2027 GMT
Subject: CN=56E96511217CC901601AAC4123930BC8BE8741AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8d:5b:c7:c6:00:c9:e1:e8:d0:39:81:34:8a:
67:7e:fd:76:df:66:7d:d0:3a:07:e7:c3:9b:ac:e9:
a9:26:64:e2:3f:df:88:04:75:72:dc:0c:4f:f8:53:
99:41:d7:04:4c:ce:d2:08:b3:55:e0:9c:14:cd:c9:
64:32:1d:1d:f7:b0:62:a9:25:af:32:eb:e1:0a:f9:
3e:27:ac:6b:82:56:41:ac:da:03:b8:b5:11:9b:07:
e1:1a:4c:34:0a:ad:8a:22:ac:83:97:c7:84:57:6c:
fd:76:64:6c:f8:08:2f:0c:37:d9:bc:cf:27:00:66:
0f:22:4e:c8:9c:2f:33:83:e5:ab:7a:b2:94:b2:b8:
e6:38:a0:8e:9c:21:a0:11:ce:60:d2:ea:18:91:55:
9e:9d:b4:0b:73:9d:d8:93:3e:d9:1d:a0:73:7c:10:
e9:c2:1c:87:ab:2d:04:92:1c:73:56:b0:f4:47:f4:
73:e9:25:07:c8:82:91:47:1e:57:f1:8f:87:3f:95:
07:a6:98:43:12:05:a5:7e:78:62:00:65:ec:a3:4b:
a3:b4:50:bc:e4:40:2c:7e:36:b6:07:e8:c3:e7:94:
c6:88:b9:d1:09:98:4d:ea:a3:70:91:d1:fa:3e:96:
40:c4:2b:9f:d0:a5:79:9b:c5:00:1d:33:62:c4:58:
20:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E9:65:11:21:7C:C9:01:60:1A:AC:41:23:93:0B:C8:BE:87:41:AF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144610.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7a8::/32
Signature Algorithm: sha256WithRSAEncryption
6b:55:c5:3f:a9:14:a2:b1:f8:40:86:72:27:ab:9e:64:7e:fb:
2a:1e:6a:64:77:4d:8d:34:68:e4:68:76:58:7b:12:8a:2e:aa:
9b:c3:c0:19:eb:a6:18:92:b3:ad:8b:52:94:35:0a:e8:8f:51:
2d:1f:02:64:ba:fb:2d:b8:c7:bf:40:81:38:54:bf:68:4d:a2:
eb:6d:fd:41:e2:f6:17:20:d5:73:65:2b:bd:16:c6:16:02:4e:
af:f2:a9:d2:16:18:fa:33:25:bc:a8:e2:f8:37:6d:49:c7:dc:
6f:11:38:6a:03:55:d8:c0:a3:eb:2a:cc:20:89:09:aa:4a:69:
d0:56:d9:32:00:4d:37:3a:fb:ab:0f:13:cf:46:77:12:fc:bd:
86:5c:b6:aa:ee:f1:d9:85:91:00:fe:72:0d:36:20:8f:90:a4:
af:cf:1a:c2:b7:61:ae:5f:89:20:ba:85:15:51:f3:d9:ea:7c:
db:d7:63:4b:94:4b:62:ea:74:b2:13:23:59:c6:40:6a:3c:30:
d1:e8:23:de:0e:ae:6c:48:e9:9c:bf:1f:12:5d:e7:53:93:b4:
20:16:eb:40:55:57:97:ea:42:89:fd:a4:f9:ef:a8:23:18:29:
96:4f:80:cc:2e:b2:c3:74:ae:9f:cf:c4:ab:58:6a:70:99:38:
ef:fc:30:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:38 2026 by rpki-client