Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144689.roa
File: AS144689.roa (raw, json)
Hash identifier: mLMc1qAdxlZ2vFNzYHi4HkN/jbygSn15utqnjFnGN1A=
Subject key identifier: 62:42:B0:A1:63:02:03:48:28:7F:EE:58:43:60:AC:81:0D:70:AE:38
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 55F9D4A3E87BA78DC7037C42B443F29CAA5A446D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144689.roa
Signing time: Mon 25 May 2026 03:19:25 +0000
ROA not before: Mon 25 May 2026 03:14:25 +0000
ROA not after: Mon 24 May 2027 03:19:25 +0000
asID: 144689
IP address blocks: 240a:a7f7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:f9:d4:a3:e8:7b:a7:8d:c7:03:7c:42:b4:43:f2:9c:aa:5a:44:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:25 2026 GMT
Not After : May 24 03:19:25 2027 GMT
Subject: CN=6242B0A163020348287FEE584360AC810D70AE38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:52:05:de:67:0a:68:05:b9:b8:88:f3:40:d2:
54:a9:45:a3:62:55:ed:c0:a9:fb:df:7e:2a:84:88:
c7:01:8d:c4:5c:62:08:95:c5:af:b2:c3:35:ff:63:
11:0d:e1:fe:c1:a8:23:6b:49:b7:01:4c:01:9e:8d:
75:71:ab:61:73:ad:f4:d5:6c:51:9a:bd:c8:bd:0e:
53:e2:af:78:5f:94:c3:98:13:a2:6c:6a:cf:1d:bb:
89:18:c0:be:37:1e:07:65:70:62:81:50:e3:c1:97:
b0:4e:b6:62:f7:c1:cb:ac:07:42:e5:e6:07:14:79:
3d:e7:e4:df:27:ba:65:ac:e2:b0:02:91:4d:7d:2d:
8a:84:5d:58:d1:eb:14:eb:eb:75:df:b9:7c:27:5c:
15:34:11:aa:04:4e:4c:c2:02:d8:06:32:3b:99:85:
6e:b0:90:bb:6e:94:50:07:07:72:89:26:0d:99:48:
a1:75:9a:04:9f:d8:11:6a:c0:ed:54:26:d5:b6:c1:
1c:f3:52:44:3e:9b:99:05:12:41:00:c1:51:3d:7e:
a2:27:29:3f:0b:00:3c:7e:18:76:95:9b:3c:00:af:
e7:ef:f9:08:05:e0:d2:c0:d2:bd:da:c9:08:9b:11:
90:25:22:ff:d2:db:33:17:52:81:a6:90:d0:bb:2f:
0b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:42:B0:A1:63:02:03:48:28:7F:EE:58:43:60:AC:81:0D:70:AE:38
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144689.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7f7::/32
Signature Algorithm: sha256WithRSAEncryption
15:b0:5e:69:c0:43:69:6b:5a:d3:be:a8:40:41:27:1e:e0:b9:
97:83:e5:d0:15:d7:91:be:2f:b9:d6:19:39:74:6e:8d:91:c6:
49:2f:00:a9:46:0b:d4:de:af:c0:2a:e5:1f:ff:3f:3c:09:5a:
70:8b:f3:ee:e6:f0:d2:21:e6:06:fb:53:10:6c:15:f2:2b:43:
83:b1:d6:4d:4b:32:2b:4e:71:1e:20:a9:7d:96:a0:3d:68:26:
ce:c0:29:29:4e:40:84:10:ef:2b:31:f7:86:10:1c:b2:03:6c:
dd:33:f7:e0:20:2b:95:1c:b1:27:22:c8:c8:99:62:3f:39:92:
ad:62:52:34:8e:ea:b9:7b:b6:bd:41:2d:ee:3f:06:39:21:49:
32:23:90:c9:86:f7:d9:9c:0b:df:da:d9:16:6c:44:6c:bb:cd:
11:19:35:a3:60:8e:7c:2f:f0:5e:a1:53:3e:d7:47:e8:e2:4f:
e5:6a:b4:19:da:2e:cb:82:be:dc:cc:53:4c:80:ba:24:8a:80:
2f:8c:ca:88:5a:f8:fd:f6:09:29:cc:67:08:75:f8:74:8e:cd:
9a:94:72:80:a3:c2:6b:14:d7:ff:33:bb:74:63:4b:17:d9:23:
84:be:81:2b:50:25:a9:7d:1d:c7:4d:75:1c:38:e0:28:b2:00:
77:6e:ce:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:25 2026 by rpki-client