Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144632.roa
File: AS144632.roa (raw, json)
Hash identifier: 1Xf03Cnh2FoUh4zqGFWlHzL1kMUiVfUe/kXgrwCxILk=
Subject key identifier: 7D:8D:E9:53:A6:4D:3C:46:EA:34:6A:ED:5C:F9:EB:B7:4A:CA:4B:71
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2A18ED5B07531A9879A5C72E935291C6BD1E6FCE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144632.roa
Signing time: Fri 22 May 2026 06:27:40 +0000
ROA not before: Fri 22 May 2026 06:22:40 +0000
ROA not after: Fri 21 May 2027 06:27:40 +0000
asID: 144632
IP address blocks: 240a:a7be::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:18:ed:5b:07:53:1a:98:79:a5:c7:2e:93:52:91:c6:bd:1e:6f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:40 2026 GMT
Not After : May 21 06:27:40 2027 GMT
Subject: CN=7D8DE953A64D3C46EA346AED5CF9EBB74ACA4B71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:a6:17:a5:81:f7:11:11:38:42:5f:e5:99:
33:33:44:a3:81:9c:63:20:52:d3:a9:a9:8d:8c:a8:
df:cd:5c:5e:e7:d6:fa:b2:93:75:b3:db:43:c6:a2:
5e:24:28:d9:71:9c:29:8d:e4:0e:3a:a2:7e:a5:24:
f1:3a:ba:05:cd:a3:24:b1:02:5c:3c:50:33:bb:28:
48:20:47:77:d9:12:1e:d6:33:e8:84:c4:de:57:4c:
6b:2f:bc:2e:d7:17:7e:2e:68:97:f9:0e:f2:4d:32:
35:aa:1e:76:20:97:44:76:36:34:7b:dd:10:10:9d:
00:18:54:17:c3:f8:ad:76:0f:70:50:5a:b1:ec:52:
e5:f2:1e:52:51:3a:8f:4e:a9:38:8a:7f:41:ae:e2:
bc:87:43:64:d0:4e:4a:07:d3:37:a2:81:b1:f4:97:
3b:56:4e:5f:89:69:3b:93:ec:9a:81:5f:f9:fc:49:
e6:21:34:f9:af:b4:86:24:c3:33:79:30:3c:f2:2f:
9a:b1:5c:ed:4b:bc:dc:a4:be:b6:fa:e9:00:98:c9:
13:93:1a:d2:57:e9:d8:4c:a9:98:6e:de:bc:88:8d:
ee:e6:83:62:d7:31:9b:af:ef:86:21:4a:b5:ed:73:
59:3b:2f:27:4e:9f:44:a0:c1:05:32:72:16:46:63:
12:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8D:E9:53:A6:4D:3C:46:EA:34:6A:ED:5C:F9:EB:B7:4A:CA:4B:71
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7be::/32
Signature Algorithm: sha256WithRSAEncryption
4f:f5:70:00:ad:8e:1d:83:68:de:bf:ea:49:5d:1d:dc:62:68:
3c:b3:08:2a:77:99:2f:35:2d:f4:98:95:de:89:8e:51:5c:3e:
74:8c:ad:8a:dc:8e:cd:f1:68:1b:09:b0:a9:7a:20:f4:3f:63:
4b:76:ca:51:ec:8f:86:12:26:d4:8a:b5:bf:b0:df:49:50:7e:
11:b2:4b:a2:b4:77:b5:ea:2d:4f:98:db:3a:f6:7b:3a:8a:f5:
25:03:e5:13:71:15:05:07:3b:f8:9c:4e:36:41:6d:9e:e7:f5:
ab:3b:ec:67:17:e8:58:0c:c1:c1:73:cb:8e:51:c9:05:e1:72:
ab:e5:63:5e:df:b6:2a:01:06:6b:62:b7:f4:94:fb:c3:ae:15:
25:15:53:04:22:2e:5f:e0:d7:22:6b:2e:9b:ab:d5:36:6d:cb:
e8:7c:d5:b9:2a:45:77:12:4f:f0:71:ea:24:c7:68:2e:d7:9d:
1c:71:ec:56:ac:8d:40:31:ec:a5:a1:e9:cc:6e:aa:12:a6:83:
46:3e:b5:ff:ff:07:fd:bf:cd:5d:47:a6:8c:83:40:08:ca:ed:
12:95:0e:43:4d:1d:cd:8d:62:99:b6:20:e4:9e:4d:ac:f7:e2:
79:e8:d6:93:69:a8:45:05:e1:e9:8b:62:6c:a8:2b:4f:a7:39:
38:23:0b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:54 2026 by rpki-client