Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144630.roa
File: AS144630.roa (raw, json)
Hash identifier: iUhhPTpFcGPGLVcqvRWFiITyqVicWO+9G7/SGEqmFKI=
Subject key identifier: A9:E1:53:43:0D:C6:BA:B7:47:C5:A4:A0:4E:67:D9:FD:0A:52:A4:B2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6631709518A6C520E5A35F6336D461E1C2189761
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144630.roa
Signing time: Mon 25 May 2026 01:51:19 +0000
ROA not before: Mon 25 May 2026 01:46:19 +0000
ROA not after: Mon 24 May 2027 01:51:19 +0000
asID: 144630
IP address blocks: 240a:a7bc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:31:70:95:18:a6:c5:20:e5:a3:5f:63:36:d4:61:e1:c2:18:97:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:19 2026 GMT
Not After : May 24 01:51:19 2027 GMT
Subject: CN=A9E153430DC6BAB747C5A4A04E67D9FD0A52A4B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:25:ac:60:50:d7:4d:80:a6:00:fc:f2:96:f6:
2d:69:39:b9:7d:a6:44:0c:0d:17:d2:60:0e:a5:c9:
06:3c:44:f5:f4:de:26:b6:42:43:36:56:8e:6d:b2:
a2:78:d9:c4:bf:00:c9:d2:21:92:df:d9:02:cf:c5:
d4:d3:60:b6:68:54:86:b6:77:0e:e0:74:1f:7b:3d:
eb:d3:c3:db:44:62:8c:f4:b6:8b:1d:ca:1f:27:49:
db:fd:07:74:e3:3d:64:81:a9:3e:e9:10:a5:1a:13:
83:81:d5:42:32:25:c9:22:75:e1:e6:d5:42:60:64:
27:d3:94:0d:98:5f:e3:22:0c:83:ba:59:21:81:8a:
10:e1:91:a1:dc:ad:f3:87:cc:79:08:c0:d5:16:1b:
1a:7a:e8:0d:55:a4:b5:55:eb:41:b3:80:40:85:49:
85:44:31:77:c0:2e:69:ff:d0:0e:15:e2:29:0a:a4:
ff:63:89:7f:75:66:74:b0:89:ff:10:87:e3:46:84:
07:c1:f6:11:06:2a:c1:2b:8d:9e:c2:f8:d2:fe:11:
b5:e7:0e:ad:6a:a6:28:f2:88:63:c6:4b:e4:a5:c1:
c7:c9:61:fb:86:7c:95:b0:a9:fa:3b:30:b1:cb:63:
57:92:d8:42:e8:c6:dd:4a:a5:63:99:96:30:a1:7d:
d7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E1:53:43:0D:C6:BA:B7:47:C5:A4:A0:4E:67:D9:FD:0A:52:A4:B2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7bc::/32
Signature Algorithm: sha256WithRSAEncryption
a8:bf:7d:ce:17:24:c2:65:8c:7a:9d:55:b8:5e:90:38:09:3c:
ad:8d:0e:84:75:d2:c7:e6:68:5a:71:c8:52:fb:ec:61:0f:6c:
b5:2c:cc:53:5a:a1:a2:87:61:95:59:74:dc:c4:f9:25:bf:9a:
10:d1:78:9f:e7:06:e2:e4:1e:f0:d4:33:08:e7:ae:c4:f2:02:
51:45:18:76:69:a1:b5:7b:74:2b:88:ab:15:8b:7e:8a:7a:d0:
74:a3:fe:14:be:0e:f3:2e:fc:0b:cd:31:84:59:87:8f:1f:0a:
4c:af:55:41:36:c8:06:40:48:d0:54:71:39:f7:e0:61:78:fc:
62:e0:6d:cf:61:fc:63:94:7d:e5:35:17:56:99:59:b4:df:77:
0d:42:e7:fa:64:8e:6d:fe:33:5b:29:22:48:53:a6:ff:90:1e:
ab:1b:46:cf:72:c8:5a:8c:20:44:06:82:6f:28:0a:fb:b3:35:
eb:45:cb:49:f4:24:b2:56:5f:69:ca:3b:23:85:7d:92:9e:d6:
da:60:d3:ec:3c:56:25:33:b3:50:05:19:d1:64:61:ce:0c:77:
ce:4d:9e:e5:2b:f4:d1:d9:7a:e9:ff:27:c4:fd:5e:23:b8:93:
43:2a:00:53:14:8f:5b:cc:05:08:59:03:3a:ac:8d:05:31:91:
36:d0:f8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:01 2026 by rpki-client