Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144638.roa
File: AS144638.roa (raw, json)
Hash identifier: NPrKfkR6MKUDj8SYgnvK7tqrN1tLg3aQS2EZBJL542Q=
Subject key identifier: 35:5C:C7:47:97:F3:69:B1:30:96:B7:A8:89:0E:FD:CA:12:00:E0:C7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 52B78E6D330FA8673B4837FE27D391CE9D6D7E94
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144638.roa
Signing time: Fri 22 May 2026 06:05:19 +0000
ROA not before: Fri 22 May 2026 06:00:19 +0000
ROA not after: Fri 21 May 2027 06:05:19 +0000
asID: 144638
IP address blocks: 240a:a7c4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:b7:8e:6d:33:0f:a8:67:3b:48:37:fe:27:d3:91:ce:9d:6d:7e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:19 2026 GMT
Not After : May 21 06:05:19 2027 GMT
Subject: CN=355CC74797F369B13096B7A8890EFDCA1200E0C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:39:92:74:56:31:ca:da:ef:0c:9a:09:72:91:
90:13:46:ff:81:a9:32:f3:fd:89:c6:34:15:94:4a:
2d:bc:81:2d:a5:b6:37:c6:68:ad:24:83:26:7f:a2:
66:70:28:bb:f6:75:66:c6:34:c2:00:ea:ba:c4:37:
61:92:a2:c2:af:44:44:47:98:49:6a:9d:a2:9e:2b:
3a:b2:b2:1f:9c:20:d3:ca:28:e5:00:ad:14:68:fb:
a9:89:1f:e9:b3:ef:b0:9e:e8:17:d6:9b:5a:ab:08:
50:8e:96:1e:3e:a9:e3:b5:0c:94:eb:7c:97:7e:2f:
28:e3:33:83:f4:5d:99:f3:1a:4d:84:1e:8d:54:e3:
a4:54:b8:9c:2d:86:23:48:6b:4b:4c:e7:d9:c9:50:
7b:87:ad:0f:b3:8b:59:12:9c:f8:cb:6d:d5:37:32:
a5:a0:78:11:ab:46:74:18:83:ff:e6:ca:5b:88:d5:
1d:91:67:4a:63:d1:16:0d:01:e5:40:24:20:39:05:
59:21:e0:d9:5e:63:4a:b2:da:d9:78:b5:98:8e:3b:
35:3c:66:75:0f:1a:ad:08:e8:d1:80:d5:28:ce:53:
da:37:71:c3:f4:43:4c:57:cc:21:3d:10:b5:de:9b:
c2:56:80:be:81:84:53:17:ac:92:3e:51:3f:59:c6:
6a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5C:C7:47:97:F3:69:B1:30:96:B7:A8:89:0E:FD:CA:12:00:E0:C7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7c4::/32
Signature Algorithm: sha256WithRSAEncryption
0e:46:6c:d5:4f:d3:87:96:48:69:88:cd:c8:d3:74:28:84:f3:
33:23:8f:a0:69:9e:78:cb:fc:51:37:d2:af:1d:55:f4:f1:4e:
db:91:83:2c:28:9b:fa:25:d6:ac:4f:68:54:18:00:79:fd:05:
74:7c:b3:bc:60:12:99:cc:37:12:75:2c:9c:89:f1:ea:a4:9b:
22:a9:26:91:ce:a6:78:ea:e0:08:8a:82:c2:63:e5:99:bd:08:
82:86:ae:61:1c:18:8d:ec:b0:f6:60:b1:29:4e:2f:e8:01:27:
90:47:38:1d:1c:e8:af:53:0d:f0:79:4b:25:44:f3:52:59:be:
cd:32:66:1c:30:23:88:72:e5:5a:a6:c4:4f:7f:88:40:41:2a:
ec:cf:65:49:90:74:77:ca:7f:fd:e1:50:cc:1d:e1:2b:d1:47:
a9:95:13:54:ee:a3:2d:26:60:80:3f:0b:d0:d7:ac:13:31:78:
88:0d:14:95:fd:f7:9d:23:7e:4e:c1:61:5f:4d:67:eb:54:40:
93:87:3f:f4:cf:6d:09:53:1c:45:c0:71:06:2b:08:bf:66:ec:
c2:e4:96:09:1b:72:2f:f0:a9:4d:d4:9a:94:24:50:61:89:e6:
dc:51:b0:7b:46:51:ec:35:7b:95:93:ee:5d:12:76:6b:40:aa:
83:98:04:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:22 2026 by rpki-client