Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144626.roa
File: AS144626.roa (raw, json)
Hash identifier: wb+T/g1cPohDACoWTxabDi0kUGrCxtURxbxb8rbRPOA=
Subject key identifier: 05:BE:37:8B:E8:D8:F3:1F:22:15:95:31:00:8F:96:57:EF:90:6A:B5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 33AE470B1FE4371EFA68888FD9C587789D9783AE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144626.roa
Signing time: Fri 22 May 2026 01:50:35 +0000
ROA not before: Fri 22 May 2026 01:45:35 +0000
ROA not after: Fri 21 May 2027 01:50:35 +0000
asID: 144626
IP address blocks: 240a:a7b8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:ae:47:0b:1f:e4:37:1e:fa:68:88:8f:d9:c5:87:78:9d:97:83:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:35 2026 GMT
Not After : May 21 01:50:35 2027 GMT
Subject: CN=05BE378BE8D8F31F22159531008F9657EF906AB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d9:c6:cc:4b:e7:c9:1a:9c:b2:af:87:8e:ba:
db:00:2a:cf:39:eb:81:6a:f3:bf:64:5f:92:9d:87:
85:31:bd:f8:b3:fd:d2:84:98:88:e6:e9:ba:de:08:
d3:7a:24:0a:a6:9b:2c:10:fb:65:c8:9e:af:fa:80:
97:00:f7:45:78:30:fc:f7:b8:4f:be:cd:1a:e9:4b:
f6:13:29:e7:7a:50:cb:f8:34:a4:c0:1f:5b:a0:a6:
12:1a:9a:46:b9:1b:85:de:34:d4:7e:d1:d9:f6:37:
43:49:5a:43:17:08:be:3e:7c:04:67:83:34:fa:53:
6f:d9:0c:d8:5c:69:1d:b4:62:c2:16:0e:81:b7:0c:
94:24:9d:1c:42:29:78:09:54:3f:61:7d:16:26:ea:
f8:5f:f7:77:07:9e:94:bf:68:a6:34:c9:a7:76:db:
96:0f:5e:87:ac:f5:f8:3a:b8:64:d7:77:e9:a9:33:
c3:af:21:2b:f3:bc:0f:20:a6:6c:3b:34:53:0e:ba:
fa:4d:1a:8d:92:4b:25:6b:fb:11:d4:50:63:ca:e0:
0b:07:64:93:2e:b7:04:50:22:c4:42:b4:b6:2a:21:
a7:9f:9d:d9:3a:ec:b1:b7:6d:75:59:b3:0c:e0:1a:
4c:dd:1a:27:5d:72:e7:a8:7d:82:55:ff:27:cb:40:
e9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BE:37:8B:E8:D8:F3:1F:22:15:95:31:00:8F:96:57:EF:90:6A:B5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144626.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7b8::/32
Signature Algorithm: sha256WithRSAEncryption
a8:bd:16:9c:91:10:f4:e1:68:8a:de:96:2e:d9:ed:81:07:33:
09:23:15:c5:c3:99:66:93:da:bd:05:ff:db:d1:51:86:8b:7e:
22:70:16:be:a1:d2:9f:03:8c:71:11:6d:c6:ad:c1:66:c9:41:
5a:a8:ca:0c:12:1d:de:3d:ca:22:7f:d7:12:ad:18:06:46:7d:
fa:cf:1b:54:72:e0:33:49:d1:cc:01:31:f2:36:5f:54:54:9f:
5d:44:1e:00:75:bb:00:96:55:a6:e2:5e:d6:30:ac:d8:e9:0f:
bb:32:ee:91:dc:38:89:ce:6c:3e:cd:b9:d2:66:27:c7:21:75:
f0:87:74:46:ef:d8:c6:87:1a:6a:e1:e2:b1:d7:93:66:dc:b7:
ee:dc:64:a9:35:62:70:e5:fc:5b:4c:bb:f8:fd:47:c8:fa:d1:
c4:8d:a3:33:39:ff:bd:4d:62:d9:aa:9e:a0:fe:9c:45:ce:1d:
47:6c:77:67:f0:ed:2b:14:6f:c0:9e:72:62:67:08:09:a4:ae:
f8:fd:8f:1c:36:cd:47:99:09:ed:35:31:89:71:ca:79:b0:d6:
04:cf:a4:de:b9:fb:4c:09:10:a6:82:d9:95:0f:57:58:39:ca:
1d:f6:57:c3:48:9d:6e:ad:68:b4:18:22:4a:82:6c:11:43:a4:
92:80:2c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:38 2026 by rpki-client