Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144623.roa
File: AS144623.roa (raw, json)
Hash identifier: rDVAf6EaI2b/cJaTUqZ0fs4eC8Eq5q3S7/bAt087Q/E=
Subject key identifier: 93:5E:3C:A3:1A:95:EF:A3:2A:65:D9:E3:2D:2F:67:D0:1C:7D:BA:95
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2FEF987C60CFF1781A8184BC32280A8EA18729BA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144623.roa
Signing time: Tue 26 May 2026 02:35:10 +0000
ROA not before: Tue 26 May 2026 02:30:10 +0000
ROA not after: Tue 25 May 2027 02:35:10 +0000
asID: 144623
IP address blocks: 240a:a7b5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:ef:98:7c:60:cf:f1:78:1a:81:84:bc:32:28:0a:8e:a1:87:29:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:10 2026 GMT
Not After : May 25 02:35:10 2027 GMT
Subject: CN=935E3CA31A95EFA32A65D9E32D2F67D01C7DBA95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6d:30:60:f0:11:ed:8e:94:e9:9f:08:54:84:
69:e8:d1:e7:33:59:b7:01:ff:36:58:14:af:d6:85:
00:d7:6f:0b:6b:bc:3a:e5:60:81:00:b1:8c:ec:aa:
ed:f1:d8:34:2a:ef:9e:bd:2f:21:1a:e8:ea:de:b2:
89:c0:c6:18:e3:db:89:84:07:99:d4:00:20:12:cc:
d1:6c:b0:c7:b8:11:42:ad:00:ee:ae:a6:57:75:f4:
eb:b9:5b:71:8d:be:2e:c0:9c:ff:11:3b:26:94:fc:
fe:b4:77:46:8a:de:10:60:64:48:32:2c:93:89:96:
54:09:8c:e2:98:d3:b5:91:62:76:55:a7:b6:2a:82:
4f:85:e2:65:a7:22:11:04:b2:bd:3c:79:58:5f:60:
9e:c3:57:05:a8:56:3d:33:4e:5d:09:58:a1:ba:87:
e3:c2:bd:ab:a0:f4:1e:77:9f:06:89:5c:d9:01:c8:
62:de:81:2a:2e:e0:e2:07:d6:9d:d6:49:94:89:af:
74:19:e6:b1:8a:95:b9:99:cf:7e:1a:30:ec:73:92:
81:41:62:f5:5e:8a:38:18:dd:dd:2c:fb:c7:0f:fa:
ac:56:a9:85:78:0e:27:04:15:6f:54:1c:bb:89:8a:
02:46:82:ed:48:39:1c:78:6b:c3:e5:7b:1c:f1:0e:
11:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5E:3C:A3:1A:95:EF:A3:2A:65:D9:E3:2D:2F:67:D0:1C:7D:BA:95
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144623.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7b5::/32
Signature Algorithm: sha256WithRSAEncryption
a3:f1:63:15:96:fb:a1:da:ad:92:8f:52:80:57:e1:c4:32:93:
86:30:cf:b1:df:89:bc:a9:ac:06:f7:d0:f7:15:3f:56:46:4e:
8b:e1:be:8f:35:48:84:74:95:58:20:f4:07:08:c5:45:98:5e:
45:d9:b0:a9:6e:64:dd:dc:f9:36:7d:6d:be:17:43:dc:2c:b7:
75:4a:f7:bb:4e:78:57:ce:67:b1:b3:94:78:a0:6c:70:fa:4d:
5a:a0:1f:59:ee:ea:54:9a:8c:97:8e:4d:87:91:f2:4b:32:85:
83:88:ba:b1:52:4a:e6:9e:0d:92:16:32:56:7d:4a:4a:ae:b9:
f3:ba:98:6b:a5:cf:72:23:67:8c:2c:d1:0a:17:9d:53:21:69:
eb:22:da:9a:5a:20:8d:44:0c:84:a6:bf:8a:e2:90:d3:fa:75:
4e:4a:01:17:df:e9:87:1d:17:28:6a:91:64:98:e3:4a:5a:44:
9c:c2:62:20:eb:ac:d6:18:77:7c:3b:07:bf:78:e8:b6:bf:63:
bc:12:df:4f:4b:a4:34:03:0c:91:b2:a5:1d:29:42:a9:2c:41:
90:eb:b4:e0:29:a7:5d:08:ae:e9:32:63:56:ba:6c:27:3c:2f:
50:dc:dc:a3:d5:89:2c:01:d5:b5:2b:31:f6:8d:d7:38:61:c4:
76:69:54:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:12 2026 by rpki-client