Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144631.roa
File: AS144631.roa (raw, json)
Hash identifier: FByJlSJJd2HKnlARLGjSNjmW4QgmNCYMq3FlEuIjORM=
Subject key identifier: 6F:83:60:8A:EA:7B:D9:60:0D:F3:F7:06:14:29:37:51:25:F5:2B:CE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4786B239A37A7D2809CD6B1D903725A7DCAAD8A5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144631.roa
Signing time: Mon 25 May 2026 02:22:47 +0000
ROA not before: Mon 25 May 2026 02:17:47 +0000
ROA not after: Mon 24 May 2027 02:22:47 +0000
asID: 144631
IP address blocks: 240a:a7bd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:86:b2:39:a3:7a:7d:28:09:cd:6b:1d:90:37:25:a7:dc:aa:d8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:47 2026 GMT
Not After : May 24 02:22:47 2027 GMT
Subject: CN=6F83608AEA7BD9600DF3F7061429375125F52BCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7e:94:87:31:ff:3f:4e:9f:41:df:81:5a:30:
21:b8:e1:fa:7a:8b:78:28:57:06:4d:3a:de:dc:3f:
d3:95:5a:9c:bd:49:59:eb:d8:cd:58:0b:2c:6c:98:
64:ca:45:8b:db:62:14:5f:3f:94:01:9c:1d:f3:4a:
39:af:32:f0:b6:a4:2e:ac:65:cf:b2:ed:3e:cb:5f:
e5:9f:32:b8:dd:13:b5:a0:c6:ff:9c:d5:26:b9:50:
3f:19:95:fb:98:9f:99:17:ef:96:38:24:2b:7f:aa:
20:32:af:c1:23:52:cb:d3:4b:c3:f3:0c:e8:8f:c4:
20:ba:d8:05:43:b2:4f:d6:d9:d2:0f:85:7a:70:fb:
b3:c0:f6:15:07:a2:1e:3b:ea:64:50:3c:c5:fe:d8:
b5:02:92:49:49:09:92:4d:86:5b:a2:2f:0d:8f:2d:
9c:21:fd:90:20:74:79:5b:37:01:68:3b:52:89:05:
1a:b2:40:b4:a0:82:d2:64:7f:b5:34:57:78:b1:d6:
00:87:2a:6c:27:8f:5f:6b:ba:34:8b:ee:73:c2:37:
22:bb:e3:7d:00:56:2f:19:7a:fb:ed:77:ab:ce:e1:
3e:f7:e7:b5:cd:d1:06:90:6e:25:73:c1:87:91:e0:
43:da:8a:88:7f:ad:c0:57:1e:af:dc:df:4b:eb:20:
1f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:83:60:8A:EA:7B:D9:60:0D:F3:F7:06:14:29:37:51:25:F5:2B:CE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7bd::/32
Signature Algorithm: sha256WithRSAEncryption
0d:72:39:91:f8:52:1e:87:2a:91:d2:b6:1d:98:b2:04:5d:03:
f0:36:c9:33:92:97:42:84:e0:99:4a:66:93:e9:3b:aa:29:0c:
c4:03:63:4f:ef:13:8e:b5:87:79:62:9d:9c:92:5b:25:fc:f6:
a5:fc:21:b7:91:8e:0d:8e:a4:71:ee:80:04:1e:c8:6a:56:d4:
50:6e:47:d4:9e:32:d5:93:73:d5:be:43:17:80:58:a9:8d:20:
22:89:fb:de:13:43:2c:53:07:00:ca:74:d3:35:f6:0b:6e:bf:
a6:62:0c:bc:9e:05:06:a3:80:fa:31:b6:e4:cd:80:2e:ec:03:
5f:cb:5f:da:b7:0d:34:1e:b9:3c:12:ec:34:44:6d:d3:54:83:
a4:c7:ba:b4:ab:c5:1d:f8:e9:af:8f:e1:2e:53:22:8f:d4:cf:
90:8b:99:97:cc:d7:d7:4e:98:4c:da:41:52:cb:f6:fd:2b:c9:
3c:5b:2b:e8:56:a6:a8:36:95:bf:22:d1:f1:0d:ea:ef:66:f1:
2d:6f:e0:b4:4d:db:45:40:42:a2:61:06:3b:93:a9:d3:1f:fc:
89:a1:4d:9f:69:05:74:55:87:5e:01:9f:29:17:f4:80:a4:c2:
eb:87:12:6b:53:46:87:c2:33:98:6c:85:10:7d:1e:e0:b5:b2:
8e:07:cd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:29 2026 by rpki-client