Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144646.roa
File: AS144646.roa (raw, json)
Hash identifier: Zz6heY5ybiuTItJxRp0MPyW184DUYzV2rFf+1Y4vmJE=
Subject key identifier: C2:57:85:43:69:C3:45:2D:01:89:79:B1:1C:68:A6:40:20:82:5B:6A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0C7CCFAF1E95DB669296080F7CF3635006D68B74
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144646.roa
Signing time: Mon 25 May 2026 06:28:31 +0000
ROA not before: Mon 25 May 2026 06:23:31 +0000
ROA not after: Mon 24 May 2027 06:28:31 +0000
asID: 144646
IP address blocks: 240a:a7cc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:7c:cf:af:1e:95:db:66:92:96:08:0f:7c:f3:63:50:06:d6:8b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:31 2026 GMT
Not After : May 24 06:28:31 2027 GMT
Subject: CN=C257854369C3452D018979B11C68A64020825B6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c3:fa:dc:81:cf:92:d6:4a:a7:0b:bc:a3:08:
ed:66:70:77:de:67:b0:4a:ee:d6:69:8b:1e:27:5a:
f8:fd:95:76:ad:0e:8e:30:12:15:75:e0:0a:38:ed:
eb:15:a1:ab:03:a5:e0:e5:8d:bf:fb:45:5e:81:c6:
21:56:7b:be:38:7f:cb:3d:a6:7f:85:c1:df:eb:fb:
a0:6a:f5:66:23:b7:7a:48:53:a6:82:b4:88:8d:d2:
b1:f7:e9:ea:01:6b:81:73:0e:f5:44:0c:a1:59:3e:
91:99:a7:a4:96:e9:78:3f:3a:ac:e8:64:20:8c:38:
06:60:2e:14:2b:ba:27:a0:3b:10:e3:98:64:23:c6:
4b:bb:16:5f:09:9e:82:e5:bd:3c:9d:69:fc:cd:10:
6d:8c:49:e2:b1:d2:13:c6:08:d3:d6:15:22:38:ea:
cf:e9:f4:39:f5:36:fe:64:0d:97:ef:92:f3:96:f3:
5f:c0:cd:b1:08:09:70:d3:d8:11:42:61:6d:4f:78:
a2:5b:b0:3f:6e:ac:b6:b7:bd:e0:7d:de:0e:41:63:
5b:ab:5a:13:34:01:1b:e4:4e:57:b0:21:d3:ff:03:
fd:e1:c9:ea:3f:1b:fe:f4:d8:96:31:58:c6:0d:97:
aa:4e:a5:8d:f6:51:78:67:1c:85:63:21:06:8f:a3:
c3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:57:85:43:69:C3:45:2D:01:89:79:B1:1C:68:A6:40:20:82:5B:6A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144646.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7cc::/32
Signature Algorithm: sha256WithRSAEncryption
44:5a:25:85:f5:cf:6a:4f:27:67:58:21:e4:c3:67:d3:2e:be:
30:8a:20:83:0d:91:f0:ed:65:f1:ab:e2:57:3f:db:27:b2:d9:
3d:29:a1:8e:c6:35:a8:4a:6b:98:31:ed:ab:6b:a3:c0:62:bb:
36:df:0c:ab:a8:d3:a9:18:b9:28:38:a2:93:86:82:64:47:53:
19:e6:17:54:71:a7:f1:24:80:70:e9:7b:be:3a:08:53:4a:5a:
73:9b:74:8a:43:cf:bb:13:b5:df:22:82:07:e4:9d:41:08:26:
22:82:bc:3f:30:9e:0c:98:4a:0d:7e:81:e7:cb:ba:fb:78:80:
5e:45:db:24:a1:0e:bf:46:60:45:20:1d:ae:8a:fa:f5:cc:77:
b4:d7:31:83:9d:f6:b6:ad:03:b3:5a:eb:84:f2:77:42:04:f3:
90:62:3c:b0:bb:95:7f:78:ad:f7:d8:84:dd:ba:e5:7a:29:d4:
57:9f:7f:d9:45:cd:9e:63:4e:31:f3:d9:95:0c:5a:4a:6f:fc:
9a:b3:8b:9b:a4:ed:6e:ee:91:48:dd:0b:39:47:5d:44:0f:be:
88:bb:39:7e:dd:33:e5:58:b4:b6:85:50:30:29:67:52:10:96:
f2:4f:be:4a:79:f9:e5:b7:ad:da:54:1e:00:11:66:3a:f7:95:
bc:03:28:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:05 2026 by rpki-client