Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144675.roa
File: AS144675.roa (raw, json)
Hash identifier: dUekRVT4nHRVAXdRgJ6hu3e0O5Ai+L+j/AGOA+OTEPg=
Subject key identifier: 83:BF:54:4D:0F:BD:2C:50:51:A6:78:32:06:11:E5:1E:5C:93:1E:84
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2BFA1B5A49D71B0A2356F68C11168D04B05686A7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144675.roa
Signing time: Fri 22 May 2026 07:08:52 +0000
ROA not before: Fri 22 May 2026 07:03:52 +0000
ROA not after: Fri 21 May 2027 07:08:52 +0000
asID: 144675
IP address blocks: 240a:a7e9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:fa:1b:5a:49:d7:1b:0a:23:56:f6:8c:11:16:8d:04:b0:56:86:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:52 2026 GMT
Not After : May 21 07:08:52 2027 GMT
Subject: CN=83BF544D0FBD2C5051A678320611E51E5C931E84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0c:b9:9d:00:c2:06:cb:c8:be:2e:a6:c9:e0:
c4:60:6e:99:a7:8f:92:64:a6:5c:1e:82:60:ed:af:
65:cd:54:5a:82:57:16:97:12:88:95:42:95:3f:a7:
1a:1b:8f:a6:c4:c1:63:42:6c:4b:48:2b:c0:ef:b2:
aa:9b:a7:ae:35:44:f8:95:1f:74:c2:75:d4:47:f2:
ab:22:c3:df:5c:d3:d7:79:4a:cf:56:84:95:a4:95:
77:d6:f2:85:15:1d:64:45:ac:f8:a0:52:0c:be:a2:
a5:23:c3:83:ac:ee:2c:57:0e:e0:2e:24:b0:66:17:
b0:53:aa:ed:d4:49:dd:32:20:45:50:99:fd:1b:3a:
2f:25:2b:19:5b:f3:d8:e2:48:7b:7f:50:ab:86:1b:
7c:18:dc:1b:6d:5a:fa:b7:02:3c:b0:d0:f7:f0:69:
67:eb:8d:bd:db:63:8b:b9:32:49:f1:63:55:ca:86:
0b:ad:6e:74:51:0e:7a:85:88:b0:c5:d4:67:10:44:
34:d9:fe:63:ec:c1:4d:74:b9:c9:dc:1b:51:ce:b4:
1c:37:46:d0:ce:2a:b0:86:3d:48:16:95:b7:d2:4f:
6f:f0:e6:1d:f7:df:09:31:7c:e4:cd:ad:32:ec:9b:
e5:56:aa:10:46:35:8f:b1:36:c8:dd:b5:18:e3:a1:
d5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BF:54:4D:0F:BD:2C:50:51:A6:78:32:06:11:E5:1E:5C:93:1E:84
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144675.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7e9::/32
Signature Algorithm: sha256WithRSAEncryption
65:83:c0:b1:01:5b:de:f8:b4:53:25:14:56:32:22:5f:c3:66:
31:6e:76:2a:2a:48:5d:52:87:60:41:a5:35:1b:9d:fe:dd:87:
d0:cf:f4:4c:68:d0:78:3c:25:d8:fb:83:ac:e5:f4:1b:56:fa:
3d:e1:89:58:9a:e0:7e:3d:62:31:73:d6:55:52:81:15:94:fd:
c6:b5:a2:70:89:c0:59:36:a2:f3:b0:0f:b4:4b:c9:87:8d:28:
15:d8:1b:fd:a0:44:cc:2d:18:ef:24:a5:5a:89:de:44:c6:06:
58:85:6b:c3:45:e2:fb:28:03:af:32:35:23:dd:8c:cf:49:ab:
66:ee:23:0e:74:f0:42:f8:5d:1c:c1:13:8f:54:9c:1f:3a:22:
de:e7:73:5e:94:12:33:c7:56:34:03:8c:3b:30:b2:56:93:fc:
ca:00:1e:0a:4a:15:38:8d:97:f0:b3:e9:9f:3d:f7:57:70:86:
2b:61:e1:25:5b:54:a9:5c:fa:43:a0:42:0c:b2:e0:f5:4c:8e:
23:4b:c8:31:87:e7:2b:76:f5:3f:9a:ed:7c:7e:a3:f7:12:da:
02:97:91:48:9c:ba:86:75:9c:04:26:72:98:48:3f:20:0b:e6:
15:c6:fc:e1:57:0d:00:06:64:07:01:ee:35:03:65:af:61:fb:
21:be:bd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:44 2026 by rpki-client