Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144654.roa
File: AS144654.roa (raw, json)
Hash identifier: KxKZrs1Jb21gMibwrpPUs3JqjQxO8uocQXko93aYsfo=
Subject key identifier: A5:7E:1B:24:9E:AA:1C:D3:A1:BC:E6:FA:69:11:DE:A6:E7:22:4B:D6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7D5F1922B1E7EC38E9F9BD094CAF2E818FD2E37F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144654.roa
Signing time: Fri 22 May 2026 06:46:16 +0000
ROA not before: Fri 22 May 2026 06:41:16 +0000
ROA not after: Fri 21 May 2027 06:46:16 +0000
asID: 144654
IP address blocks: 240a:a7d4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:5f:19:22:b1:e7:ec:38:e9:f9:bd:09:4c:af:2e:81:8f:d2:e3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:16 2026 GMT
Not After : May 21 06:46:16 2027 GMT
Subject: CN=A57E1B249EAA1CD3A1BCE6FA6911DEA6E7224BD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:40:0e:c4:cd:b4:8f:cd:46:0e:0e:ac:95:d4:
fb:25:52:2d:81:aa:45:c8:10:b1:4c:fd:c1:e5:5c:
34:11:fc:ba:c8:9b:09:8c:3f:26:d1:77:57:4e:97:
3e:9a:c7:fb:07:1d:35:39:25:ae:02:fe:89:b9:a5:
21:44:cd:1a:94:4b:ce:da:a4:63:f8:ac:d2:99:24:
88:38:49:a8:12:d7:9b:f1:93:37:0a:17:df:3b:41:
e9:c5:13:08:27:dc:de:81:d2:bd:ad:e3:ca:64:03:
38:c6:1f:0b:72:5b:bc:1e:0d:2e:32:31:af:68:e8:
80:cf:f3:17:b0:c1:3a:c0:ad:04:78:eb:95:a8:00:
8e:55:a9:cc:42:0b:3d:b3:2c:63:62:6e:a7:36:28:
5c:f8:00:06:6b:c3:75:be:0e:e5:03:48:eb:0d:40:
26:10:d5:f4:3a:ce:88:2f:61:2d:55:f5:51:d3:0d:
c6:8c:9a:43:08:3c:12:d6:d1:b5:ab:83:2d:e8:8d:
5e:25:19:56:0b:0b:0d:32:60:93:a1:db:45:c0:bc:
8d:d0:5d:83:4b:a1:03:7c:d8:9f:3e:d0:88:98:0a:
12:7d:3d:85:71:1d:c1:44:1c:89:53:4a:82:69:8c:
82:7d:1d:0f:8b:c8:70:ab:73:d6:b5:73:63:f7:c2:
87:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7E:1B:24:9E:AA:1C:D3:A1:BC:E6:FA:69:11:DE:A6:E7:22:4B:D6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144654.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7d4::/32
Signature Algorithm: sha256WithRSAEncryption
30:0c:30:6f:8e:3a:73:5c:e6:b3:91:56:f7:ab:fb:bb:c0:f2:
16:01:e4:98:7a:52:43:cb:c6:ae:10:70:cc:9d:23:73:d3:55:
68:55:96:0f:61:11:21:b2:49:63:98:4b:07:1a:b7:af:87:ca:
85:01:43:ed:63:45:b4:e4:3f:88:b3:bb:b9:b7:a8:36:64:37:
9c:96:f1:fd:64:a5:1a:c3:b7:25:33:d4:6b:78:6d:aa:3e:8f:
f2:61:cf:39:6a:f0:a8:bc:35:fe:77:55:40:19:e4:11:d8:ae:
21:ae:87:e4:6c:59:21:4b:81:7a:02:88:fd:15:db:a9:06:52:
5a:cb:5b:b6:61:f8:a4:e8:9b:2d:1b:0a:7f:9a:c5:fc:7f:c4:
5c:a1:c9:9d:94:68:72:b1:a8:2a:5b:12:3c:bc:03:1b:f8:f5:
c9:aa:16:04:31:5b:53:69:d3:ce:b4:d1:97:22:b9:e4:cf:c9:
ae:80:cd:91:e5:28:7a:90:c6:2c:d3:56:ea:5f:1e:bb:b7:99:
22:f7:bc:53:d2:b9:e7:2f:32:aa:4d:19:de:71:c8:e6:4f:9f:
1c:da:92:c7:99:2a:7e:a2:20:23:88:b6:63:50:ab:80:b5:f8:
af:8e:e8:34:aa:73:a1:51:a7:8d:53:5b:38:48:eb:b5:23:55:
cf:aa:3c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:54 2026 by rpki-client