Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144663.roa
File: AS144663.roa (raw, json)
Hash identifier: 7UGkjg62i+X0GYrcJbh1zkE74AviNG8RMSzzMCVCTno=
Subject key identifier: 68:FA:2B:C5:94:52:59:E8:EC:CF:DC:C3:2D:A5:C4:07:C4:13:2D:15
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 285798F0C2DEE596244E2BA1B0784A321A46E03F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144663.roa
Signing time: Fri 22 May 2026 01:50:35 +0000
ROA not before: Fri 22 May 2026 01:45:35 +0000
ROA not after: Fri 21 May 2027 01:50:35 +0000
asID: 144663
IP address blocks: 240a:a7dd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:57:98:f0:c2:de:e5:96:24:4e:2b:a1:b0:78:4a:32:1a:46:e0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:35 2026 GMT
Not After : May 21 01:50:35 2027 GMT
Subject: CN=68FA2BC5945259E8ECCFDCC32DA5C407C4132D15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c8:bb:93:90:c6:34:47:84:f4:df:16:25:1f:
e6:91:ad:56:9a:4b:f1:b3:1a:5d:6a:20:fe:b5:6e:
fc:c6:fd:67:f5:d6:bb:c6:f8:8c:ac:e1:14:72:41:
26:83:a8:03:f1:5f:95:19:a9:f8:46:37:b1:98:be:
3c:ec:94:62:da:05:3b:92:e1:99:ea:47:d8:06:df:
95:03:f0:0e:d9:33:51:d2:42:d4:db:ed:58:94:f0:
fd:76:ef:ab:29:1f:19:5d:2e:d1:f4:3f:17:66:8c:
c7:a3:32:c6:df:84:38:1a:4b:aa:01:3a:f6:c5:9b:
fb:84:d2:9b:3a:bd:1a:5e:d1:8a:f7:dc:04:d1:6b:
60:6e:62:03:98:45:a9:08:b7:54:8d:8a:dd:26:44:
16:09:bf:5d:09:c5:d4:58:94:6a:45:41:88:ca:4c:
9c:71:e3:62:aa:8c:05:5c:bd:68:3a:8d:52:20:71:
38:7e:d7:08:e8:1b:0e:f2:44:86:ba:a0:be:07:82:
d2:65:d6:9b:c4:e5:a6:4d:88:13:80:19:e2:5a:cd:
73:11:ac:e1:c5:a7:50:83:61:a7:97:fa:34:eb:a4:
16:90:42:28:3b:2d:fa:d9:33:9c:8f:9f:a0:86:f0:
19:92:8b:d0:8a:6b:8a:02:2a:39:b1:3c:7e:3c:5f:
a4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FA:2B:C5:94:52:59:E8:EC:CF:DC:C3:2D:A5:C4:07:C4:13:2D:15
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144663.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7dd::/32
Signature Algorithm: sha256WithRSAEncryption
98:00:5b:55:95:4f:cf:6f:92:5e:80:1b:15:67:04:52:6d:5d:
eb:69:d4:5c:35:9c:0b:09:05:79:c2:36:c8:87:a0:88:40:37:
dd:c3:01:5b:af:1e:16:69:96:82:df:89:f5:c1:74:7a:e1:3f:
10:f3:a0:d5:5f:bb:8f:94:b9:b8:df:4c:20:61:44:11:19:4b:
e5:b3:b9:9f:49:93:c0:c7:83:f8:54:2a:06:17:6a:b8:40:43:
65:2f:7c:69:60:9c:a1:ca:f1:c4:05:fe:94:03:c9:bb:90:30:
33:a8:ee:e3:54:9b:ad:e4:05:f7:1c:c8:14:92:11:1f:26:14:
6c:46:6e:24:8e:81:79:40:13:ba:a5:c0:45:cc:23:78:22:d0:
14:fc:73:4d:14:a5:a5:43:4d:ed:d0:f0:7e:39:29:75:48:00:
11:3c:86:07:8b:31:0b:16:86:76:71:1c:69:69:da:1e:de:5a:
41:66:1f:05:42:07:ec:81:50:fe:34:d4:5e:b5:ae:cc:4a:49:
10:39:60:2c:1e:39:1d:30:c9:b4:03:87:c0:0b:bf:a5:45:23:
fd:25:38:ef:a5:a8:65:38:76:52:8d:2e:dc:69:7f:f9:84:58:
39:03:28:03:39:e2:62:ed:41:89:4a:30:82:c9:31:a4:46:11:
25:ff:cf:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:51 2026 by rpki-client