Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144671.roa
File: AS144671.roa (raw, json)
Hash identifier: TBVuv9O8YxY0HB7FVFOTK1ZocZgbS4r/7b0wi16EqVM=
Subject key identifier: C2:6F:F3:4D:46:23:B9:F5:B3:37:80:E9:29:7A:5A:D8:95:2E:37:5A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7F36F8C43E74DDFFF06D68DEC0CD6F8C15143993
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144671.roa
Signing time: Mon 25 May 2026 02:22:18 +0000
ROA not before: Mon 25 May 2026 02:17:18 +0000
ROA not after: Mon 24 May 2027 02:22:18 +0000
asID: 144671
IP address blocks: 240a:a7e5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:36:f8:c4:3e:74:dd:ff:f0:6d:68:de:c0:cd:6f:8c:15:14:39:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:18 2026 GMT
Not After : May 24 02:22:18 2027 GMT
Subject: CN=C26FF34D4623B9F5B33780E9297A5AD8952E375A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d4:a4:53:02:8c:a2:80:67:f5:a8:ce:50:4d:
24:3b:a9:fa:76:3e:f6:c2:57:cd:88:4c:30:91:5e:
0d:71:12:00:f8:70:6b:0a:98:b1:f3:0f:0b:09:fe:
5d:b2:01:09:a5:65:8c:b3:1c:f9:0c:8b:8e:14:81:
e0:3c:30:50:92:56:2b:fa:7b:af:82:3b:72:54:01:
a8:80:68:17:da:3e:0c:2a:83:4c:73:41:ce:5e:08:
a8:ad:bb:fa:82:d5:42:6f:ba:4a:ff:64:c1:1e:e2:
e5:e4:87:06:c3:d5:88:1a:ea:87:b9:7c:d9:dd:08:
bc:84:16:4f:c8:c9:1b:b7:0b:87:a7:c4:5b:90:35:
6f:6c:97:3f:0d:e0:79:18:48:24:94:bd:f2:14:fe:
91:b6:36:27:8e:ab:0d:e6:48:0a:5b:72:a9:7b:f4:
dd:6e:2a:b7:6e:b3:05:5b:65:15:1b:bf:a0:5d:8f:
dd:ce:ff:a2:db:27:85:c7:44:6a:e7:57:7d:b8:9e:
8d:43:a1:b9:bb:70:ea:46:5a:03:25:be:f1:ed:71:
76:36:69:cd:fa:77:eb:12:6a:be:4a:eb:77:43:2b:
d1:75:2a:49:42:01:0b:53:5d:36:58:b5:ce:7f:04:
93:ed:11:5c:a4:f1:66:da:12:98:19:a0:f6:8b:ef:
b6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6F:F3:4D:46:23:B9:F5:B3:37:80:E9:29:7A:5A:D8:95:2E:37:5A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144671.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7e5::/32
Signature Algorithm: sha256WithRSAEncryption
1d:4c:4d:5e:f9:63:b6:14:ef:85:30:45:46:b6:e7:99:89:2d:
1a:20:be:dd:1b:29:6a:06:31:2f:92:f4:c4:1f:ec:e0:42:97:
3c:93:82:eb:45:62:ce:18:79:ee:40:8e:24:c3:4e:f4:da:35:
fb:ff:5c:00:77:6e:06:9e:c3:da:e9:8c:ea:61:64:fe:d6:2b:
af:61:3e:5e:9d:90:93:98:cb:9f:50:3d:bc:17:6e:d1:57:84:
6a:9c:69:65:12:00:3d:3d:e2:13:59:d8:3c:d3:ff:8d:d6:34:
3a:28:ca:7e:2f:7d:c8:af:6b:53:8c:e8:2a:24:42:4d:b2:22:
6a:f1:b2:40:40:45:75:23:d6:eb:19:3a:5f:0a:69:04:ac:6e:
86:1a:b8:39:39:e8:80:a8:90:c1:29:94:92:f0:b3:6a:4c:de:
b2:ce:67:88:33:c5:1f:cc:47:a5:28:9e:d3:da:6d:32:82:e9:
ca:82:8a:a5:81:05:4f:e1:9b:a2:31:6b:5a:fe:dd:43:7e:0e:
99:14:bc:52:0e:ae:f2:18:1e:00:48:cb:86:b5:ab:05:a2:82:
fc:7f:6f:4c:c4:98:c9:65:9f:96:8d:a5:65:02:38:2d:77:62:
7a:db:e9:bd:e0:e9:d2:b2:77:12:ff:9a:b7:a3:5a:14:e9:52:
24:95:cb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:54 2026 by rpki-client