Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144628.roa
File: AS144628.roa (raw, json)
Hash identifier: 6/f7vpk1RN3xls6XJSrgTUqaxwUdQIyZ8SNgXxCLqO4=
Subject key identifier: 91:43:D3:8A:AB:14:89:57:70:CE:F9:D1:93:22:44:0B:A1:5E:21:27
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5B487CCCCC5845CB23AAFD65B3EB47570407D9C1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144628.roa
Signing time: Fri 22 May 2026 04:26:55 +0000
ROA not before: Fri 22 May 2026 04:21:55 +0000
ROA not after: Fri 21 May 2027 04:26:55 +0000
asID: 144628
IP address blocks: 240a:a7ba::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:48:7c:cc:cc:58:45:cb:23:aa:fd:65:b3:eb:47:57:04:07:d9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:55 2026 GMT
Not After : May 21 04:26:55 2027 GMT
Subject: CN=9143D38AAB14895770CEF9D19322440BA15E2127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f9:9b:71:cd:48:5a:1f:70:8c:4d:a9:38:72:
e0:0c:d4:b6:d7:7b:3a:65:e8:f2:6a:65:4f:63:8b:
85:79:65:65:f6:ec:c6:3d:d4:04:c9:48:00:f2:97:
dc:4a:d8:db:81:30:eb:63:3f:dc:9a:20:bc:81:de:
3e:b9:c9:92:79:03:12:64:04:f9:78:69:0d:72:21:
a7:90:d1:ef:23:65:6b:df:cc:b4:6d:d5:61:2f:1c:
85:36:04:80:5a:f8:c0:37:8c:5c:7c:87:38:94:50:
a7:88:dc:9f:0b:32:8a:51:bf:ec:6e:68:38:19:b2:
34:54:8a:95:08:1f:51:31:d2:28:5a:3f:42:9a:83:
60:db:ce:26:f7:57:47:f3:93:d4:75:5b:61:12:5c:
a8:67:2a:70:b2:bd:61:e2:81:f9:fd:53:00:e6:e8:
fd:78:cc:b4:4f:08:1f:60:50:94:41:fe:9a:99:e8:
6f:33:95:7e:c8:16:a0:2e:90:e9:6f:04:d5:74:81:
0b:8c:a8:26:2e:13:5c:51:99:aa:a0:56:97:4e:ea:
38:6d:48:3e:03:6f:4d:a8:26:6c:a8:2b:15:c9:49:
66:b8:81:6f:77:74:e6:d3:a7:4e:c0:c8:f7:cc:e1:
3c:57:7c:33:53:13:71:45:69:f2:0d:e8:a7:a8:b4:
5e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:43:D3:8A:AB:14:89:57:70:CE:F9:D1:93:22:44:0B:A1:5E:21:27
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144628.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7ba::/32
Signature Algorithm: sha256WithRSAEncryption
27:09:69:e1:4b:de:47:75:d5:3b:f9:52:d9:48:3b:5f:20:99:
dd:27:23:63:ad:4c:dc:cb:e1:b6:4f:9d:a2:dc:c1:da:5e:6c:
7d:41:20:b6:5c:17:c0:cf:eb:25:3d:ce:17:5c:bc:d8:f6:98:
14:45:4e:61:17:a1:6a:04:c7:f1:26:ed:c3:1d:64:61:27:68:
a1:63:62:65:fc:b0:4a:76:c4:be:06:ad:2b:45:54:aa:14:c1:
79:82:87:bc:1a:b5:fc:a5:fd:93:86:f8:3e:61:1e:12:0a:47:
ec:67:96:ae:06:1b:7e:91:07:3c:26:ef:4a:71:d3:4a:73:46:
3b:a4:76:65:3b:28:40:dc:b2:01:bf:ac:ef:64:e3:a7:8c:2c:
6a:67:7f:32:cb:ba:f8:36:2d:48:b8:0a:eb:aa:0d:12:b7:f5:
68:19:ee:91:36:a6:e8:1a:ca:cf:9a:be:7e:92:25:d1:e6:58:
52:c5:d1:8f:b0:46:fe:f8:e1:49:88:eb:5f:1a:bb:30:82:23:
e2:ca:30:4a:74:2f:36:46:10:31:14:6a:a5:15:fd:8c:50:64:
17:47:ae:0e:ec:07:a3:c6:0b:81:7c:f6:ac:4b:b3:e5:11:de:
33:7c:f1:51:49:77:c6:31:ce:69:e5:30:ca:33:6f:cd:db:22:
d7:11:97:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:23 2026 by rpki-client