Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144699.roa
File: AS144699.roa (raw, json)
Hash identifier: 6rSsAE5AhA59rx71YntlekTaH8OnI9JpvXv6PVmQqKU=
Subject key identifier: 8F:E1:E5:F3:5D:DD:90:C9:24:D3:94:4B:F1:09:3A:ED:6C:29:A5:BB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7AD97A79157FB402C6F809F970B3746E50758312
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144699.roa
Signing time: Fri 22 May 2026 07:08:54 +0000
ROA not before: Fri 22 May 2026 07:03:54 +0000
ROA not after: Fri 21 May 2027 07:08:54 +0000
asID: 144699
IP address blocks: 240a:a801::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:d9:7a:79:15:7f:b4:02:c6:f8:09:f9:70:b3:74:6e:50:75:83:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:54 2026 GMT
Not After : May 21 07:08:54 2027 GMT
Subject: CN=8FE1E5F35DDD90C924D3944BF1093AED6C29A5BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dd:b9:47:0d:58:2c:80:ca:95:d7:38:e2:31:
53:6f:74:74:b0:35:ac:ce:a7:50:44:d2:d3:08:0b:
0a:71:b4:ba:e5:e1:b7:69:87:44:f8:57:3e:73:54:
52:52:33:ab:05:57:39:9e:32:ea:0f:c4:2d:c8:f2:
5e:b7:85:b0:4d:53:72:89:9c:2d:54:19:86:94:90:
5b:54:27:c3:94:21:6d:95:35:26:d9:4e:d5:65:e6:
94:ed:b1:2b:31:74:36:45:b7:86:f5:dd:2e:d3:28:
4a:3e:35:3b:1a:dd:da:7b:60:0f:e2:10:c4:1a:3f:
95:fc:5e:ad:37:29:5c:6f:27:9d:a4:23:4a:6b:d2:
cc:24:8d:39:2d:46:bd:cf:e4:e8:c5:ba:d4:26:2b:
1c:b9:e5:8f:5c:ed:85:df:90:6f:58:8e:46:2a:a9:
e2:50:a7:1a:e8:95:86:5b:2c:4e:d0:e3:26:1f:0a:
11:92:33:a2:dd:3a:59:63:bb:69:fd:49:21:08:44:
05:f9:9e:51:26:e9:65:42:23:30:04:59:97:db:af:
8b:2f:1c:94:59:75:60:92:6c:ea:f9:92:c3:15:99:
66:18:90:92:53:30:6b:1d:af:0f:99:6c:a8:e3:ce:
48:a4:8e:1d:f8:b4:7e:29:02:26:0d:8c:71:d2:27:
24:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E1:E5:F3:5D:DD:90:C9:24:D3:94:4B:F1:09:3A:ED:6C:29:A5:BB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144699.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a801::/32
Signature Algorithm: sha256WithRSAEncryption
b7:8e:81:bf:e2:13:9f:23:ff:71:c9:9f:42:32:eb:4a:5a:01:
ac:80:cd:2e:fe:9c:b2:eb:7d:d4:9b:e8:28:f9:78:96:15:0b:
e1:d8:09:49:35:f4:e3:a5:c6:e5:61:23:83:61:a1:aa:0d:1c:
a9:b9:fc:e1:62:b6:c5:85:86:7e:46:fa:f8:50:0d:af:d8:ec:
e7:f2:12:03:be:2f:2f:b1:86:6d:02:d0:d2:15:b3:ba:90:09:
e4:8b:44:59:fa:83:70:0f:7e:5a:66:18:48:17:d4:e3:d1:01:
48:2d:8a:6d:91:5f:46:9e:74:78:18:bd:78:85:d8:0b:55:e4:
98:6a:d2:da:e4:4e:81:e9:11:5e:00:dc:a3:8c:fa:f2:d5:9d:
ba:db:b2:bd:30:0b:14:2f:35:f5:4a:f0:9e:a2:a5:6f:b2:87:
91:97:a0:14:d3:29:34:ee:8e:78:08:39:e5:07:37:c7:5f:fa:
60:cb:92:4f:6c:fe:37:36:2a:ad:71:29:15:2c:fc:53:48:d0:
37:5a:3d:0d:92:46:bf:fe:8c:17:ca:6c:f3:f7:87:98:b3:a8:
ea:60:cf:10:3b:78:b4:de:89:f9:67:58:ad:5c:0f:a5:79:1a:
33:9b:45:65:0f:45:45:e3:3c:66:e3:de:a2:d0:d1:0c:ad:56:
5b:4a:ae:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:53 2026 by rpki-client