Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144672.roa
File: AS144672.roa (raw, json)
Hash identifier: 9QcXlcbwnsh+yIhqUz0Ztiwq6tJvNNxpYa8s+0wU97I=
Subject key identifier: A6:8B:CB:F2:6E:C8:FF:03:F8:1E:04:F4:35:EF:56:A0:24:B4:1C:93
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 37D3DC0A0BD106659DB74A02781BF21F6CA5D4BF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144672.roa
Signing time: Mon 25 May 2026 06:48:59 +0000
ROA not before: Mon 25 May 2026 06:43:59 +0000
ROA not after: Mon 24 May 2027 06:48:59 +0000
asID: 144672
IP address blocks: 240a:a7e6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:d3:dc:0a:0b:d1:06:65:9d:b7:4a:02:78:1b:f2:1f:6c:a5:d4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:59 2026 GMT
Not After : May 24 06:48:59 2027 GMT
Subject: CN=A68BCBF26EC8FF03F81E04F435EF56A024B41C93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:82:1a:dd:1f:da:d7:fe:ec:56:23:3e:f6:b3:
92:d3:36:44:33:95:8d:e0:c7:7a:a8:f3:77:3f:e2:
5a:a7:f0:e5:46:e8:b8:8f:3b:c3:1f:f3:ff:f1:46:
38:49:16:54:8b:b2:ab:ad:d5:81:be:cc:46:32:c7:
06:01:bc:34:90:dc:c1:b5:98:5a:4b:33:c0:81:3a:
03:16:fd:b2:9f:2f:3c:77:a1:51:ce:f4:da:9c:1e:
fe:26:bc:e7:c4:dd:f5:54:d2:95:73:4b:30:36:8f:
af:21:b3:5e:43:19:2b:d2:d5:d9:f9:5b:3a:7c:7c:
e7:36:0e:3b:3d:46:32:f0:01:34:9f:5f:ef:b9:29:
29:be:17:82:6e:6b:ad:ec:06:a1:04:90:58:86:5f:
45:1b:b9:5e:d1:3c:b0:00:81:74:4b:05:62:bb:26:
5c:ee:97:d4:97:52:87:21:e3:ed:cc:20:f5:69:18:
7a:97:46:2d:38:12:1e:1e:75:ef:79:4a:9a:77:84:
95:5c:62:40:6d:40:96:e2:cd:e1:b3:1e:f6:56:ee:
83:00:7a:c4:e4:99:5e:4e:a5:79:5f:a8:56:65:bb:
88:3a:b9:78:7b:0c:4a:6e:76:57:71:3a:93:0b:d3:
3b:8b:3d:23:f7:aa:8c:1a:1a:62:4f:ef:a1:a6:12:
c3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8B:CB:F2:6E:C8:FF:03:F8:1E:04:F4:35:EF:56:A0:24:B4:1C:93
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144672.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7e6::/32
Signature Algorithm: sha256WithRSAEncryption
ae:21:26:17:4b:5a:fa:b2:5c:d0:29:db:ec:e9:93:43:ef:dd:
c0:e2:b9:6e:12:a4:74:97:cc:62:95:7e:05:47:f2:f8:73:22:
3d:82:55:c9:8c:1f:7a:ae:10:23:a3:ca:83:7c:a1:ed:2b:4b:
a7:be:ef:f7:93:93:3e:3f:15:f5:9b:75:31:55:af:a4:8e:5a:
5a:17:b5:c8:44:be:75:4d:fc:f3:f0:47:20:7f:08:d5:64:a7:
a3:99:71:61:09:5c:70:d7:0b:ca:58:16:15:72:8e:25:1a:66:
a7:28:12:f8:95:72:58:2b:ce:73:b3:0d:ca:86:4a:d6:5b:7f:
9e:58:9e:3d:ba:8d:c7:1d:e8:52:6d:aa:e2:97:91:aa:f7:c1:
19:16:ba:f5:75:a1:c8:e2:2a:6c:b2:bf:50:c1:ad:a2:95:da:
d0:1e:d8:97:a3:69:55:fb:ae:20:ca:57:26:96:06:e3:5c:8f:
09:ad:c5:17:03:f0:9f:a4:39:21:cf:8d:f9:7d:87:e9:f0:60:
9b:9c:6a:f1:17:3e:00:9d:85:ba:a8:52:01:59:17:20:98:b6:
8e:80:e2:f9:0e:1c:85:b1:e7:1f:7f:0d:da:1d:d5:59:0f:fd:
d4:4d:21:7e:2c:3d:66:b1:d1:77:bf:06:23:73:a0:8d:80:d0:
83:45:7c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:58 2026 by rpki-client