Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144659.roa
File: AS144659.roa (raw, json)
Hash identifier: wYpeX/6oW4/qGkkWSeYm2bgf+O3sSxrWXyea+FwhshA=
Subject key identifier: 4C:14:58:02:69:5E:C2:BF:30:30:FC:25:1A:3A:D4:B8:BA:5E:8F:66
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 28ACD482A442B9F3B5C2FA856972838F4196F083
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144659.roa
Signing time: Fri 22 May 2026 04:08:04 +0000
ROA not before: Fri 22 May 2026 04:03:04 +0000
ROA not after: Fri 21 May 2027 04:08:04 +0000
asID: 144659
IP address blocks: 240a:a7d9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ac:d4:82:a4:42:b9:f3:b5:c2:fa:85:69:72:83:8f:41:96:f0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:04 2026 GMT
Not After : May 21 04:08:04 2027 GMT
Subject: CN=4C145802695EC2BF3030FC251A3AD4B8BA5E8F66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:fa:52:4c:f1:ab:1d:56:31:2c:0f:34:3e:
4b:67:33:b7:e9:e8:06:58:db:0d:c6:af:24:dd:e4:
17:7d:d4:65:f0:a1:81:e5:04:9a:95:e2:fa:65:78:
6d:53:ef:14:2e:b2:f1:00:4f:6e:b8:b6:18:48:b4:
65:7e:4a:85:62:e4:25:94:44:f1:d2:9e:9b:89:aa:
71:ee:46:5d:a2:ba:7f:b5:88:45:ee:26:10:33:23:
3f:b4:c3:4b:94:aa:1f:9e:7e:62:b2:f0:9f:1c:87:
a0:fd:d1:da:57:50:ef:bb:ea:c2:dc:ad:35:80:95:
a8:23:ef:89:47:b0:69:96:a1:74:ef:f0:cb:5c:c4:
16:05:7e:bf:b6:fa:ed:e8:b8:c7:4a:aa:c9:e4:2f:
12:17:e8:b0:af:34:d5:9f:cc:34:94:d5:d6:3a:22:
54:cd:59:ae:95:b7:33:5e:64:7b:7e:dd:cc:a1:9e:
ff:0b:5c:b2:92:12:cf:fb:3a:af:14:e2:94:39:7e:
86:44:e7:41:51:88:0b:79:f6:a4:3c:9d:e7:a6:10:
a4:87:03:3b:eb:88:2d:89:3f:b4:31:c6:d2:f4:da:
71:2b:c9:98:8d:58:dd:0c:14:bb:98:31:c2:6d:9b:
ba:40:ef:c2:f2:53:fe:c9:e9:ee:3a:7e:ea:d4:f7:
b7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:14:58:02:69:5E:C2:BF:30:30:FC:25:1A:3A:D4:B8:BA:5E:8F:66
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144659.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7d9::/32
Signature Algorithm: sha256WithRSAEncryption
15:18:23:38:72:9e:ea:1c:d2:5c:0e:fb:7e:b8:11:ac:37:82:
d0:56:29:d9:7a:22:6d:5a:70:48:24:65:65:1f:07:37:c9:da:
49:36:61:f3:23:b4:b8:a3:b4:95:85:94:08:21:13:2d:e7:6a:
1b:97:31:ef:b1:43:0f:17:cc:1f:95:e3:31:9d:f8:a8:04:bb:
2f:30:a9:c9:e0:b2:37:77:ce:7e:2f:62:bb:9d:76:1e:82:e0:
39:55:e6:b9:27:a9:42:8f:6e:1a:b6:09:65:1b:b6:1d:ef:66:
28:0c:a3:44:b1:7c:08:66:27:df:a2:1d:73:98:5e:63:44:85:
65:34:f6:96:06:ec:5b:c5:40:5b:cd:85:74:12:f8:23:c7:0c:
82:1f:58:0f:e2:6d:bb:30:e6:4d:a9:3c:98:97:03:cb:f6:3f:
8a:93:41:c1:04:52:ca:83:35:f8:fb:09:d8:28:be:76:7a:b4:
0a:e1:01:e3:e8:1c:9c:e7:96:78:fc:d5:01:41:73:09:f4:ac:
4d:a6:66:c4:ae:50:4a:cc:d6:a2:bd:16:33:c6:3c:c2:c4:9d:
d5:b0:41:50:27:b8:fa:de:19:8a:58:28:4a:40:da:da:e4:02:
ce:73:a2:4c:0a:87:e7:70:8f:cd:e1:e5:f5:5e:fc:7b:30:e7:
3b:32:77:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:35 2026 by rpki-client