Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144697.roa
File: AS144697.roa (raw, json)
Hash identifier: nlWYPrmLllOey9wOqWTbJgQ+O1is9+KlmmvX9h/RbXA=
Subject key identifier: 92:18:B3:FD:6F:C8:D3:F3:CE:EF:C7:9B:25:18:A4:98:30:3D:0B:8B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4D1F08A376AD6EBB08505C86B60C3148369D4D6F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144697.roa
Signing time: Tue 26 May 2026 06:31:01 +0000
ROA not before: Tue 26 May 2026 06:26:01 +0000
ROA not after: Tue 25 May 2027 06:31:01 +0000
asID: 144697
IP address blocks: 240a:a7ff::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:1f:08:a3:76:ad:6e:bb:08:50:5c:86:b6:0c:31:48:36:9d:4d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:26:01 2026 GMT
Not After : May 25 06:31:01 2027 GMT
Subject: CN=9218B3FD6FC8D3F3CEEFC79B2518A498303D0B8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:38:3e:5a:c1:17:45:4c:2e:d9:94:bb:e4:df:
2d:c9:5b:26:84:6c:ea:72:4c:00:31:59:43:d4:b7:
f1:20:8b:9d:ca:5a:47:81:b7:7d:bb:d6:5c:7a:5e:
5d:86:8d:52:01:07:ec:89:57:96:0e:27:3f:fb:8b:
35:c9:59:64:43:59:fd:8d:e2:da:52:49:6f:5a:66:
dc:24:f8:71:8b:f1:e8:6d:07:c4:e6:44:dc:96:ea:
91:e6:6f:75:1d:69:c3:0e:c3:f6:95:7d:71:ce:82:
6f:09:78:c5:5c:13:10:8b:f9:0d:13:a7:68:d4:37:
73:e8:3a:09:df:f9:24:45:42:8e:01:f4:b7:85:28:
c5:88:3b:9e:7d:e1:d3:e2:c2:03:a4:59:85:3c:07:
21:10:9d:d3:7f:7a:61:ad:d6:97:f4:e9:07:b3:66:
9c:3f:81:39:d4:38:b6:77:2c:ed:1e:92:f2:4c:b9:
d1:cf:47:03:f7:16:8b:8c:7b:02:3c:bb:61:16:03:
6e:80:6f:48:cd:a2:d8:ff:ce:0f:41:36:f1:7a:a3:
f8:a6:29:ad:c9:44:41:b3:82:04:f2:12:ba:b0:03:
b9:d8:e7:53:98:3a:f4:c0:c9:d9:32:b3:cb:c1:d3:
82:35:ad:73:af:a5:4d:c7:81:09:aa:1b:8e:6f:b9:
f0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:18:B3:FD:6F:C8:D3:F3:CE:EF:C7:9B:25:18:A4:98:30:3D:0B:8B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144697.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7ff::/32
Signature Algorithm: sha256WithRSAEncryption
b4:17:9f:ce:1e:3b:1a:64:52:16:5c:5f:db:1f:5b:fd:2d:95:
ff:01:df:b3:c6:1a:95:5c:6f:68:0e:35:8d:9e:03:af:13:07:
48:6f:a6:1a:59:0d:ce:82:ea:fd:15:9f:36:fa:3c:c9:c4:e3:
0a:96:9f:fc:06:a6:de:d2:44:70:be:a0:36:df:cb:2b:ce:f6:
35:7e:05:7e:b8:dd:50:89:3b:7e:18:58:f9:e7:ad:cb:dd:43:
fc:82:da:0a:4b:2a:ad:b2:0a:7b:e2:6a:e1:47:7f:ad:8a:ca:
64:38:80:fc:cc:b6:b2:ed:2c:de:90:62:ad:73:83:01:3d:71:
49:13:27:49:67:ac:fa:66:43:22:38:94:2f:0e:a5:45:47:97:
05:dc:dd:97:08:fc:a8:29:03:73:f4:77:df:59:b0:d2:d6:fa:
ef:84:37:b3:b6:10:eb:13:82:54:c2:c2:2d:82:45:82:61:0e:
20:ad:5b:e6:2a:f1:82:66:13:7e:d3:53:b8:f3:1a:72:8b:16:
18:a1:b5:0a:82:06:6c:86:f1:37:18:d4:f3:2d:e9:88:7d:4d:
39:a3:68:b6:8f:03:c9:66:57:00:f9:2b:27:d8:cf:17:cc:21:
39:b8:bb:79:62:de:1e:d1:a0:71:8a:25:42:f9:27:4a:25:13:
19:1b:65:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:26 2026 by rpki-client