Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144677.roa
File: AS144677.roa (raw, json)
Hash identifier: cVKZ1D6eoNMOcuQh0W/SGQpgwzn5JMTRvCl43th5zwc=
Subject key identifier: A7:F3:E0:61:A6:A8:9C:CB:E8:C3:A8:BE:98:8B:69:BE:FF:BB:44:90
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 40AB338FDF933177684383479A3314EBC96595FF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144677.roa
Signing time: Tue 26 May 2026 02:35:09 +0000
ROA not before: Tue 26 May 2026 02:30:09 +0000
ROA not after: Tue 25 May 2027 02:35:09 +0000
asID: 144677
IP address blocks: 240a:a7eb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ab:33:8f:df:93:31:77:68:43:83:47:9a:33:14:eb:c9:65:95:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:09 2026 GMT
Not After : May 25 02:35:09 2027 GMT
Subject: CN=A7F3E061A6A89CCBE8C3A8BE988B69BEFFBB4490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:14:7b:61:00:7a:80:d8:1b:f0:0f:9d:e9:9d:
30:4b:c4:1f:d0:58:75:57:be:c9:3d:67:50:b5:b2:
f0:f4:f9:af:8e:99:78:a8:d3:24:98:35:05:c3:dc:
03:a0:d3:20:2f:a4:b1:6f:0b:a7:91:75:e7:a6:d1:
5a:ef:a2:30:ff:57:76:80:9e:5e:c0:1a:5a:d0:39:
ef:e7:0b:42:ec:55:d1:a1:bd:0a:ec:95:8a:0a:20:
6a:4f:7b:67:e3:c8:33:84:1d:02:79:95:98:5b:ac:
43:28:a9:f1:8f:8d:7f:21:c4:ec:35:bb:b4:53:e8:
a6:b6:b2:46:bd:e5:ce:38:82:3b:9d:2c:4d:aa:35:
1b:b5:3a:ed:60:db:75:5f:c1:ae:0b:ac:58:02:a2:
d9:56:40:83:1f:0f:b5:d5:22:51:a2:a2:f2:b2:0b:
28:3e:d0:75:a3:d3:8b:f8:7d:16:99:02:11:8d:32:
84:19:cb:db:f3:1a:81:e4:e6:41:16:e3:55:76:4a:
7e:0f:09:5a:32:72:b0:57:e5:d8:f5:58:28:07:d5:
f6:07:4a:0f:7a:69:6b:d7:db:f2:c4:7b:fe:11:53:
fe:3d:04:48:62:3d:b4:7d:a5:62:cd:4a:14:e2:65:
e0:67:0f:cb:28:54:ca:44:d2:10:dc:dd:1e:9d:8b:
96:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F3:E0:61:A6:A8:9C:CB:E8:C3:A8:BE:98:8B:69:BE:FF:BB:44:90
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144677.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7eb::/32
Signature Algorithm: sha256WithRSAEncryption
85:c7:7d:5e:28:a4:bc:e2:7e:1b:a1:e2:af:0a:9f:7b:5c:87:
89:83:4f:a4:39:94:b4:a8:c4:14:dd:14:3f:df:21:d0:2f:59:
62:68:24:53:da:66:78:06:2d:6f:f2:af:5e:19:01:60:61:99:
c8:ee:97:fe:e3:d4:a1:4e:e5:67:6a:00:1e:7f:0e:6c:a7:a8:
1d:aa:ec:81:87:9f:72:c0:df:8d:25:69:15:aa:b2:7e:37:dc:
03:ea:07:ff:59:d5:34:ff:42:8b:f0:c4:91:49:d3:a4:0f:3c:
78:d3:29:0e:e8:91:26:c8:cb:d4:f2:95:23:e9:cf:70:10:a1:
8a:4e:3e:3f:7c:c4:fc:2b:2c:26:93:ac:1a:77:be:61:62:96:
46:10:51:31:69:6e:03:87:8e:3d:50:36:1e:5a:c3:19:ff:18:
c7:70:2b:a8:a2:3c:ff:0c:db:07:df:a0:85:96:c2:66:0e:b9:
e4:58:b1:f0:6c:b8:de:6a:aa:8a:53:35:a2:13:86:3c:7f:b6:
ec:1c:df:5d:06:b1:80:35:0c:4c:fe:f0:5c:85:8d:34:2b:2a:
26:9d:ab:dc:82:28:bc:78:fa:4f:c5:be:10:29:14:42:5b:41:
3d:0a:4d:60:80:c5:03:0d:0e:a2:94:ef:56:0d:0d:94:e0:9e:
0f:e8:df:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:04 2026 by rpki-client