Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144620.roa
File: AS144620.roa (raw, json)
Hash identifier: ayKu2202NJoQqSH33JzILwTHCpa8T1HzqFNTR+jb5vw=
Subject key identifier: A3:F3:8A:6A:05:56:80:4D:21:CB:A4:8A:62:AB:D6:2F:9F:7B:12:48
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6FF575F30D727ECB5E4674FF6E27F3DB5BA90C2B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144620.roa
Signing time: Fri 22 May 2026 02:47:32 +0000
ROA not before: Fri 22 May 2026 02:42:32 +0000
ROA not after: Fri 21 May 2027 02:47:32 +0000
asID: 144620
IP address blocks: 240a:a7b2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:f5:75:f3:0d:72:7e:cb:5e:46:74:ff:6e:27:f3:db:5b:a9:0c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:32 2026 GMT
Not After : May 21 02:47:32 2027 GMT
Subject: CN=A3F38A6A0556804D21CBA48A62ABD62F9F7B1248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:85:9d:01:0c:b8:15:74:f9:0f:7b:52:3e:37:
e3:85:10:43:a3:cc:7c:0e:1a:c0:6c:28:ec:38:9a:
d6:97:e7:41:56:88:3f:3f:91:38:6b:9a:16:71:e8:
fa:5d:ba:c3:9e:03:4a:09:38:ee:2a:5b:15:ec:d6:
b0:09:4f:ce:2b:f3:c6:7c:6d:b0:4f:55:92:2d:31:
56:d4:c0:15:be:82:7b:a4:d2:4e:ce:22:7b:c9:05:
80:e9:0d:68:17:2f:e9:49:83:55:c6:ee:99:e1:20:
fb:d6:c0:18:bd:3a:39:9c:70:7a:93:53:2b:2e:dd:
57:b5:05:8c:56:d4:11:cf:be:35:43:a1:5f:e4:b0:
f4:75:98:d6:02:70:ef:fb:16:03:2a:36:1e:bb:b4:
ee:c9:09:ba:b5:21:05:19:8b:18:6f:a9:8d:6f:50:
b7:3e:9c:1e:bd:ea:25:57:37:14:53:6c:90:10:e5:
08:7c:e8:52:73:44:ce:a7:ea:99:e9:78:a5:26:44:
45:a1:ec:c1:a3:d4:53:35:02:4a:d5:af:58:02:c7:
95:1c:85:23:ce:0c:8a:ad:dd:a8:5c:03:ac:1e:f9:
31:a2:65:2a:a8:c7:cb:dd:c8:e9:e1:c0:2b:35:72:
b7:55:e6:cd:ca:db:c6:8b:d4:a1:e5:6a:27:a1:91:
40:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F3:8A:6A:05:56:80:4D:21:CB:A4:8A:62:AB:D6:2F:9F:7B:12:48
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144620.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7b2::/32
Signature Algorithm: sha256WithRSAEncryption
90:be:2b:12:cd:c9:59:24:04:c8:81:65:a1:3e:50:49:d1:71:
b6:10:3a:5f:1b:06:b7:36:06:9d:84:4a:d0:a5:3f:03:64:2e:
2d:fc:4a:62:b2:d4:17:ac:ec:69:d4:f1:74:30:e1:66:0d:45:
5c:c9:f9:48:8d:b5:62:5c:b1:17:af:81:69:91:b5:a6:bc:08:
33:ff:b3:ab:38:74:2c:af:3e:6c:88:25:01:1d:59:14:a1:16:
c3:bf:96:c2:ee:f0:c5:3d:6b:4a:2a:0d:eb:f8:18:b5:87:88:
0a:c7:21:13:ec:1b:f8:66:62:1b:28:8a:f8:e9:65:89:d8:5c:
c9:3f:ae:2f:ce:3e:03:98:ae:10:9a:a8:5c:8e:c8:36:8f:b4:
7b:16:3c:b4:02:d1:d8:8c:2f:40:b7:93:a7:8b:eb:df:76:1b:
81:bf:4e:c9:52:af:08:ff:70:cb:11:b8:85:93:b3:e3:cd:cb:
17:7a:dc:07:28:9f:38:7d:64:13:5f:f0:b5:72:62:9a:4a:c3:
55:48:4c:af:9b:4b:aa:f2:61:30:15:79:f9:ab:d7:b5:81:8b:
4f:03:df:ba:0b:f9:bc:73:3b:c4:85:c6:7b:fb:e4:cc:39:17:
34:1c:4f:d8:68:df:ed:24:e0:03:be:1c:35:2c:bb:71:72:4f:
50:1e:c8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:04 2026 by rpki-client