Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144658.roa
File: AS144658.roa (raw, json)
Hash identifier: jtQymtnCcGtgIUGClW+uF342+J2SBKSEkdzX/kD5NJE=
Subject key identifier: BD:26:4F:32:46:40:3D:77:60:DB:6A:5C:FD:64:70:C2:3C:87:E7:34
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 354908C77B45B6BD18B3F253605AC2BAAF0EDF53
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144658.roa
Signing time: Mon 25 May 2026 06:28:44 +0000
ROA not before: Mon 25 May 2026 06:23:44 +0000
ROA not after: Mon 24 May 2027 06:28:44 +0000
asID: 144658
IP address blocks: 240a:a7d8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:49:08:c7:7b:45:b6:bd:18:b3:f2:53:60:5a:c2:ba:af:0e:df:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:44 2026 GMT
Not After : May 24 06:28:44 2027 GMT
Subject: CN=BD264F3246403D7760DB6A5CFD6470C23C87E734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:08:61:e8:84:db:2f:ab:ee:5d:74:68:a1:6f:
94:82:5a:0d:b5:b1:a6:3c:3a:db:14:c9:dc:e4:84:
fe:15:4a:ee:03:5b:a2:87:be:d8:f0:5a:d9:f6:07:
57:90:6c:0b:3d:94:6a:a0:c3:7e:ea:76:bd:45:9e:
37:33:5e:32:ce:78:78:77:e5:d4:3e:7b:70:1f:8b:
ed:5f:b0:7f:96:d4:c5:f9:72:dc:7a:a5:07:ae:a4:
b4:7d:df:03:c1:85:78:0a:5f:93:7f:52:11:ea:29:
84:be:bb:2e:26:1e:c4:1c:3d:0f:21:3c:ec:ea:ef:
c8:d8:7e:34:da:ac:78:1f:24:05:f7:45:df:15:99:
52:9d:a9:80:73:1e:a9:27:db:60:bb:2b:61:b5:8d:
59:69:0c:5e:cc:6d:a0:64:62:71:ea:3b:13:a9:00:
09:ac:b8:da:fb:ed:8f:c9:1a:71:74:ba:0a:f8:d1:
78:53:6c:fd:ea:1a:31:11:7b:08:65:94:f3:07:e3:
f6:7e:e5:e0:78:a4:31:0e:4e:1c:51:5d:0e:75:d1:
45:fb:3b:c9:17:64:3a:29:ae:e8:ec:05:e9:ed:53:
b8:f8:fc:37:56:03:f9:0c:6b:4b:cb:ef:84:4a:15:
c3:30:a8:34:0d:1f:d3:b3:d9:da:69:1e:24:e4:c5:
84:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:26:4F:32:46:40:3D:77:60:DB:6A:5C:FD:64:70:C2:3C:87:E7:34
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144658.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7d8::/32
Signature Algorithm: sha256WithRSAEncryption
74:ec:f6:8c:74:c8:43:f2:4f:a3:68:0c:15:49:24:61:2d:b4:
28:ca:f1:cf:32:59:ba:99:42:28:32:5c:02:d4:39:a4:36:f0:
e1:1e:2c:0d:81:27:94:57:b9:3d:0f:69:be:d9:80:21:e9:1b:
0b:64:41:e7:18:c8:d1:32:df:ec:75:c4:4e:64:2b:21:e6:5a:
d2:70:50:ad:21:4f:5d:d7:cf:cc:53:4d:8e:cd:1c:3d:c1:59:
b7:4d:73:26:1f:56:89:8b:6b:63:e4:30:38:1d:3e:48:ff:d9:
b7:ca:06:57:d9:a0:90:78:1a:59:a8:39:f5:64:7f:f0:36:51:
b3:7b:e9:16:d7:ba:5b:fa:95:4d:de:0d:7e:d5:e4:84:bf:b2:
ab:e9:a9:a3:89:53:93:3f:62:81:18:eb:0b:e6:2e:30:24:27:
b4:44:00:fc:88:1e:3d:80:a5:30:34:43:ea:33:33:25:77:0c:
6f:a3:df:27:eb:da:b0:96:62:d2:59:1d:8e:87:7f:e1:ce:e9:
2a:36:8d:b8:c3:52:f2:99:0b:5b:b2:4f:03:32:59:a4:57:62:
a7:3f:b2:b2:51:fd:af:d0:fd:73:c7:4b:3b:d5:6d:c5:3a:52:
58:63:9d:ec:4f:69:31:85:88:a2:f9:fd:f2:cf:a5:ae:e4:eb:
89:17:1f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:21 2026 by rpki-client