Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144653.roa
File: AS144653.roa (raw, json)
Hash identifier: 1XqyakE6GViFXYliffH1YGR9iN/WQmt5clpV2zfJyjA=
Subject key identifier: 27:AA:85:BA:7A:2C:55:37:43:9F:CB:E5:36:30:6C:BD:14:DC:A3:74
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7841AB2CA4F457A70D1DDD5E2503B0D03EC78BA5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144653.roa
Signing time: Tue 26 May 2026 06:12:39 +0000
ROA not before: Tue 26 May 2026 06:07:39 +0000
ROA not after: Tue 25 May 2027 06:12:39 +0000
asID: 144653
IP address blocks: 240a:a7d3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:41:ab:2c:a4:f4:57:a7:0d:1d:dd:5e:25:03:b0:d0:3e:c7:8b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:39 2026 GMT
Not After : May 25 06:12:39 2027 GMT
Subject: CN=27AA85BA7A2C5537439FCBE536306CBD14DCA374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ef:99:c8:b4:53:e6:86:4d:8b:17:0d:d4:0d:
19:04:86:e8:83:db:30:26:6d:80:5b:6d:79:95:38:
8c:59:e5:30:79:3b:3c:67:c8:bc:fc:67:20:91:9e:
61:f4:de:70:1d:ae:8d:ee:56:6d:6e:b5:ae:ec:10:
4b:55:3c:94:56:99:e4:82:e6:93:d9:87:b9:15:32:
e8:87:c5:10:c6:8c:20:ca:14:9a:21:ba:dc:6a:16:
ef:03:76:ce:3a:af:1e:f2:bc:3f:ed:65:25:f2:53:
54:43:9c:14:39:97:8b:45:06:55:9b:87:f3:bd:3d:
82:26:c1:b9:f4:75:32:30:2e:3c:81:10:25:06:dc:
11:e1:51:a0:c1:e7:12:e9:61:3d:cb:fe:46:9a:41:
99:bf:c5:65:d7:7a:0e:f8:22:6d:ab:b4:f1:04:db:
dc:77:a1:bf:ae:3c:94:0b:4e:da:36:99:68:5b:b5:
a3:01:85:94:bd:60:38:a4:7c:a4:22:0c:03:85:df:
e6:2d:78:d8:11:43:a4:ab:3f:df:97:a8:a6:a9:d2:
40:5f:2e:00:da:dd:c7:6b:50:54:89:6f:4b:45:ad:
5e:20:59:db:cd:3d:9f:14:60:1d:57:70:61:77:7b:
9b:fd:b6:43:9c:db:38:e3:9a:a2:5a:9f:be:72:35:
85:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AA:85:BA:7A:2C:55:37:43:9F:CB:E5:36:30:6C:BD:14:DC:A3:74
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144653.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7d3::/32
Signature Algorithm: sha256WithRSAEncryption
14:66:bf:c2:27:07:18:cc:96:6d:9b:1d:9d:5c:2f:21:d0:08:
79:9e:23:34:3b:82:f4:6b:04:94:f1:7d:4b:86:3c:c4:c5:4c:
5c:2e:4f:f4:32:59:81:e7:b1:17:54:52:59:8f:84:a8:fc:44:
3d:aa:7f:5a:5d:1b:a2:fb:31:72:80:e5:58:27:ea:2c:16:06:
37:30:6e:d4:66:1d:a7:93:93:25:6e:3c:a1:20:3e:0b:01:fd:
da:91:a2:07:fc:dc:ff:3f:42:44:1a:e1:0b:07:6d:f3:45:bc:
8e:a1:ac:61:14:3b:a5:1f:3b:df:d7:8e:fa:b3:e9:42:d9:51:
30:10:b4:a4:9d:f4:0c:76:e0:30:71:0e:68:4e:22:bd:13:30:
3f:e4:17:48:2d:39:38:a6:a0:d5:d3:b2:19:42:1a:58:56:c2:
38:ea:f2:ea:37:2f:53:62:f6:8f:68:5b:05:f7:97:b6:ca:3a:
e5:4c:c7:31:1c:8f:59:7a:1e:23:3e:f2:c3:6e:c1:11:74:82:
65:45:d2:2a:9d:d2:f4:db:15:1d:18:59:e6:94:c9:6b:53:70:
b3:d7:d5:a9:8d:ed:d9:89:9d:dd:07:84:7a:ba:ee:4a:3c:af:
f3:48:73:02:c3:d3:8d:92:ae:b7:71:14:89:d7:00:42:05:5b:
5d:a5:de:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:54 2026 by rpki-client