Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144684.roa
File: AS144684.roa (raw, json)
Hash identifier: KKIXSPGg650B7ook9I4UNpSOMBLW0k7vffcebDfbFgU=
Subject key identifier: 84:FD:6A:81:BF:85:4D:32:62:57:73:FB:25:D6:98:E9:2C:1F:C7:2D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 654ACD43D6F830CF93899CA3F67D31638C33341C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144684.roa
Signing time: Fri 22 May 2026 06:58:37 +0000
ROA not before: Fri 22 May 2026 06:53:37 +0000
ROA not after: Fri 21 May 2027 06:58:37 +0000
asID: 144684
IP address blocks: 240a:a7f2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:4a:cd:43:d6:f8:30:cf:93:89:9c:a3:f6:7d:31:63:8c:33:34:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:37 2026 GMT
Not After : May 21 06:58:37 2027 GMT
Subject: CN=84FD6A81BF854D32625773FB25D698E92C1FC72D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7b:6a:c5:8b:d1:c1:6d:c5:65:d8:8a:43:4c:
96:8a:03:96:d1:1d:ec:2e:80:3a:96:96:ed:a7:f6:
0e:4c:fc:88:ef:20:a3:fc:02:b4:7a:a7:46:87:1c:
18:46:3c:47:c1:18:5e:09:9e:7c:d5:ff:05:86:b5:
9c:63:f3:22:23:c0:fd:5c:da:b0:59:df:72:b2:a6:
3f:5d:f5:f1:8e:ef:79:6d:14:dd:9f:f9:ae:56:13:
9b:6c:5c:ec:96:95:71:86:b0:2f:7f:13:0c:d1:4a:
2f:33:7a:45:a4:25:52:ea:5e:01:66:07:bc:70:dc:
6e:65:84:f4:40:c4:90:65:40:2c:0b:45:b6:e2:af:
f4:f7:ec:cf:58:09:73:95:6b:73:4d:bd:28:76:f7:
03:b5:f7:41:b7:f6:b1:04:49:6f:fe:19:b1:85:60:
2d:2a:3a:f1:a0:eb:eb:2d:27:ec:69:20:77:ae:83:
4f:ac:02:93:78:6f:c5:f2:f2:18:c3:c0:f5:12:5c:
71:3c:32:91:b5:ad:63:6d:d5:2c:36:0f:bf:11:90:
d9:a2:6e:2c:90:e0:c4:d6:2b:65:5b:f7:07:2d:c4:
0a:35:af:e7:0d:40:ac:b7:48:2f:a9:1b:04:e6:6a:
68:08:54:c6:4f:20:3f:2f:6b:c9:b1:8a:dd:21:b9:
05:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FD:6A:81:BF:85:4D:32:62:57:73:FB:25:D6:98:E9:2C:1F:C7:2D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144684.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7f2::/32
Signature Algorithm: sha256WithRSAEncryption
91:32:f4:a7:b6:17:01:5b:7e:d4:27:05:7c:7b:95:c7:54:ff:
fe:03:5e:38:77:de:b3:75:f6:02:17:86:40:1b:28:70:ab:e2:
56:1b:85:c1:c3:d9:4a:37:65:91:09:18:87:80:20:26:bd:4e:
b6:60:77:26:8c:9b:26:4c:33:1f:82:71:b8:f7:ef:c7:57:96:
d9:41:74:40:e5:30:a4:f7:58:0a:18:09:95:05:b3:33:cf:85:
47:4f:ea:21:81:46:75:25:87:d8:a2:7d:14:bd:c3:02:91:85:
23:98:28:58:40:bc:82:ed:97:89:ae:81:00:84:d4:1f:4d:c1:
b6:cd:78:b9:ef:85:3c:c3:8d:70:b6:cc:c6:0c:23:ee:73:5e:
f7:84:f4:38:ff:14:2d:18:de:76:14:ee:59:63:64:98:6b:0c:
dd:56:9e:ad:f7:6c:48:28:96:7d:e4:b0:31:97:66:37:5d:64:
e7:df:d9:b9:61:e1:2d:d9:5e:30:c0:98:10:16:b6:22:8d:64:
af:31:96:28:50:93:47:17:2a:0b:bc:44:05:86:7e:99:33:73:
8c:12:15:52:81:01:d5:45:68:9d:8d:d7:13:f6:3b:10:2c:7f:
21:55:2e:84:ad:a2:ca:5e:4e:bc:f8:79:40:9e:63:74:3c:75:
61:fe:7d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:52 2026 by rpki-client