Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144680.roa
File: AS144680.roa (raw, json)
Hash identifier: tu6Da7qbVi6LIIc+6k0oIzNqHipMuP1dEy5d2KBxlrU=
Subject key identifier: 1C:5B:29:DF:43:78:87:0F:A8:D9:F2:11:04:C5:AA:01:02:54:5E:83
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 620632FCB319305242A6F686BF8F2EC5C9126278
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144680.roa
Signing time: Tue 26 May 2026 02:35:05 +0000
ROA not before: Tue 26 May 2026 02:30:05 +0000
ROA not after: Tue 25 May 2027 02:35:05 +0000
asID: 144680
IP address blocks: 240a:a7ee::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:06:32:fc:b3:19:30:52:42:a6:f6:86:bf:8f:2e:c5:c9:12:62:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:05 2026 GMT
Not After : May 25 02:35:05 2027 GMT
Subject: CN=1C5B29DF4378870FA8D9F21104C5AA0102545E83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:22:c0:61:97:c0:73:3e:e7:81:78:19:f9:69:
56:f4:5f:f7:ce:9b:d8:3f:fb:da:8e:c2:a3:a9:1a:
00:7b:0a:cc:e4:57:02:26:aa:f1:7d:9d:e1:8c:4f:
e5:04:20:55:5c:11:fa:66:39:91:70:c6:f4:37:87:
9f:db:4f:1c:d9:21:84:4b:f9:06:15:35:63:99:13:
8c:34:04:87:3a:be:69:8a:40:f7:cf:d6:77:ca:9b:
3e:3f:bf:e3:a8:6d:b6:ef:92:49:3c:db:98:94:7e:
f9:b0:47:f9:11:dd:e5:18:4b:4e:c4:7a:2a:df:4d:
66:df:c2:db:4d:cd:79:d8:04:72:81:91:15:84:61:
0e:71:49:9f:d4:97:92:98:73:50:6e:8f:fa:33:bc:
86:b8:f1:52:9a:df:b7:51:44:28:10:75:c5:5b:61:
61:96:79:3e:8e:35:8f:0d:18:f6:65:6f:90:e2:75:
ca:6f:11:e6:7b:41:5a:ae:49:f2:c3:4e:dc:9c:5d:
ce:26:77:c8:62:24:7d:20:9e:d5:64:d1:43:bd:2f:
c4:49:8b:1c:c2:7c:c5:45:f0:f3:80:e1:b0:a4:4c:
77:03:c0:bd:6c:58:ff:2f:8c:7a:a1:2d:52:fb:31:
75:ee:2a:a1:f2:3f:63:c4:1e:96:32:00:ba:78:24:
32:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5B:29:DF:43:78:87:0F:A8:D9:F2:11:04:C5:AA:01:02:54:5E:83
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144680.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7ee::/32
Signature Algorithm: sha256WithRSAEncryption
86:0e:bb:c3:f2:7c:59:95:d3:cd:c3:9f:14:09:0c:45:66:04:
26:9a:6a:13:56:17:de:9d:0f:f4:e5:81:47:8d:96:30:27:49:
e8:3c:70:87:4b:ad:ea:f5:b0:93:02:30:c6:e2:7e:ee:63:06:
14:0f:eb:81:ec:6f:fa:2c:c5:52:04:c0:63:1e:ed:0c:13:7f:
28:dc:f7:f3:58:6f:d3:d9:d4:c9:d9:d6:70:dd:42:1e:83:11:
4d:ec:b3:47:32:ef:68:52:29:7f:fa:e1:79:e1:ee:c2:12:81:
9a:14:c3:58:eb:72:20:11:93:0d:10:5e:35:88:c6:b0:bd:0d:
f5:73:6f:46:43:07:0c:ef:fa:9c:f3:28:2d:e0:f9:51:3f:01:
8a:2e:53:64:27:4e:9b:d3:ba:4c:58:cf:dc:95:45:3d:80:62:
b5:d9:87:20:a4:49:99:16:05:b9:7b:6d:0f:46:fa:ce:f4:e1:
51:26:1b:1b:7d:67:f5:78:61:25:6f:bf:5f:9c:eb:bc:ea:dc:
99:81:a6:a4:dc:28:f9:97:8d:f8:88:f9:19:33:00:b7:b5:07:
e2:9f:41:92:e4:27:44:58:09:ed:17:2b:ec:93:28:c6:08:d0:
77:0c:b3:fc:8d:a7:35:1a:3e:b1:90:37:c4:34:5f:01:0f:e8:
aa:6e:63:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:21 2026 by rpki-client