Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144624.roa
File: AS144624.roa (raw, json)
Hash identifier: nU9I6VpUs+qRMw7d+dn77Y9XFaMPPOUQ5mk7JsZDbTY=
Subject key identifier: 40:3D:98:7A:CC:D9:EA:FB:B1:83:A7:31:DD:06:75:01:08:D3:20:9D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7E410B272C309E202A7A8B86411704B57350C6B1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144624.roa
Signing time: Mon 25 May 2026 01:38:17 +0000
ROA not before: Mon 25 May 2026 01:33:17 +0000
ROA not after: Mon 24 May 2027 01:38:17 +0000
asID: 144624
IP address blocks: 240a:a7b6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:41:0b:27:2c:30:9e:20:2a:7a:8b:86:41:17:04:b5:73:50:c6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:17 2026 GMT
Not After : May 24 01:38:17 2027 GMT
Subject: CN=403D987ACCD9EAFBB183A731DD06750108D3209D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:77:73:2b:f8:9f:40:37:c7:e7:bc:d2:63:
17:9a:45:47:ee:b3:f2:a8:af:96:b5:b4:71:ab:b2:
4d:c9:35:83:0c:97:47:11:92:65:c1:ed:34:07:59:
a5:f6:28:f1:7e:54:80:ac:bf:dd:81:0d:26:75:a7:
5d:16:67:03:dd:ee:08:47:b9:9d:74:af:f1:ea:e8:
d0:41:35:c1:cb:aa:15:09:69:e9:84:8a:69:45:a4:
46:13:8a:9e:22:f9:96:39:d4:dd:0a:1e:b3:7b:0f:
66:8b:11:23:c8:1b:3e:64:e8:c5:82:48:30:c3:5c:
a5:fe:d0:92:bf:e0:02:07:87:12:96:a0:b6:33:1c:
34:fb:06:17:2b:3b:f1:c4:ae:e9:7d:d3:12:9b:ea:
44:9d:b7:fc:01:c3:f9:66:5a:ea:3f:bd:78:f4:88:
c3:d7:00:e7:67:87:74:91:03:59:48:97:e5:1d:c5:
70:f0:c7:f6:41:a4:e2:23:23:7b:72:33:e4:ad:12:
96:83:b4:c3:c9:22:fc:29:17:9a:36:a7:6e:e9:6c:
0d:dc:39:11:75:9c:0f:80:54:87:3f:39:63:38:ac:
91:3f:84:2f:e0:7a:04:77:57:29:75:26:fb:a3:0d:
dc:99:a3:0c:bf:8b:14:74:ed:94:83:c7:4d:94:5a:
21:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3D:98:7A:CC:D9:EA:FB:B1:83:A7:31:DD:06:75:01:08:D3:20:9D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144624.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7b6::/32
Signature Algorithm: sha256WithRSAEncryption
3c:e6:32:97:f8:b5:b3:4e:2d:b7:38:7b:f6:2f:72:df:9b:91:
c8:b8:ab:e7:25:e0:72:cd:e6:f1:4e:90:93:ca:c4:a1:ea:20:
b0:f5:12:19:55:09:cf:e5:ee:0d:d5:9b:74:56:df:da:a4:a9:
88:58:90:0e:23:f5:f5:c5:f8:7d:93:db:28:fa:d9:b1:d1:63:
1a:bb:a4:5b:39:ff:94:35:34:7a:01:50:6d:f3:6d:05:95:f2:
8b:81:e7:8f:30:85:a6:aa:b0:d0:76:e3:0f:7e:e4:33:78:06:
71:70:1f:5f:80:6d:a7:1b:29:23:d1:0d:19:7e:8b:da:f5:3e:
aa:3f:9e:1c:f2:ed:ac:92:6f:cd:76:26:5e:89:14:81:12:37:
66:a6:67:79:2a:29:4e:9d:b7:0a:63:ab:73:ff:63:36:ea:a7:
65:ab:8d:04:b4:57:04:42:48:21:13:1e:fd:5e:8d:c1:e6:a1:
0d:98:4f:26:f8:df:60:e0:40:ea:95:cf:ad:cc:12:a6:9c:78:
e1:5d:dd:ba:dc:7d:b5:38:ad:17:cf:f8:25:ab:a1:b7:e0:0e:
58:f9:38:6a:af:f2:90:fa:97:c6:33:9e:b9:07:44:4f:a6:b1:
05:ee:f6:06:14:73:7d:86:a6:3f:1f:83:52:5e:27:ea:31:0d:
df:15:0e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:43 2026 by rpki-client