Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144707.roa
File: AS144707.roa (raw, json)
Hash identifier: OMyznF7VApdK9v2tNnkj92nBVL9IS1KMT5nKtCAig/E=
Subject key identifier: DC:A1:D5:72:0A:B5:94:2A:E4:22:92:81:78:D4:F0:06:C0:62:34:DA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7592CEFA369ADE24F4D5E907B3520178D551D7ED
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144707.roa
Signing time: Fri 22 May 2026 02:47:45 +0000
ROA not before: Fri 22 May 2026 02:42:45 +0000
ROA not after: Fri 21 May 2027 02:47:45 +0000
asID: 144707
IP address blocks: 240a:a809::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:92:ce:fa:36:9a:de:24:f4:d5:e9:07:b3:52:01:78:d5:51:d7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:45 2026 GMT
Not After : May 21 02:47:45 2027 GMT
Subject: CN=DCA1D5720AB5942AE422928178D4F006C06234DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:76:4d:e2:59:41:14:71:01:c3:c4:fd:5d:5c:
f2:bf:79:7f:90:ea:cf:4a:12:8c:02:1d:f2:50:72:
34:e2:f1:3c:1b:3c:57:94:48:2e:6c:b3:b7:77:90:
a2:81:34:77:8f:c4:ff:16:70:2c:d5:ab:9d:52:cd:
d2:7a:4d:2b:6f:c0:c3:70:be:4e:76:af:64:d1:24:
b2:26:7a:3f:98:55:f4:72:e9:35:0d:b2:14:1b:b6:
77:34:74:09:c3:05:ed:5d:ab:ac:60:23:ea:f8:02:
d0:d1:32:04:21:4f:aa:05:ba:df:1e:62:69:a6:ef:
38:04:29:e6:01:a1:81:ef:d8:ea:99:78:a4:e2:31:
e7:ff:ce:9f:77:7e:f6:0f:97:89:e1:9e:a4:5b:c6:
11:08:1b:60:43:26:31:bb:b8:07:73:1f:2c:8c:73:
f8:3c:cd:9d:3b:51:46:eb:4f:f9:eb:49:47:d2:de:
3e:43:6b:7c:87:82:bc:1c:52:d8:ac:70:e2:fa:a9:
17:a7:8c:b0:0d:9c:9e:80:16:41:47:54:56:1e:b4:
d7:3b:76:1f:48:f9:79:7f:c5:14:c5:f8:47:5d:6a:
e9:bf:0d:b1:72:d7:a0:86:fb:49:ce:22:b1:1c:e3:
2f:3b:80:50:56:12:17:bc:c1:05:2c:0d:8e:5c:87:
21:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A1:D5:72:0A:B5:94:2A:E4:22:92:81:78:D4:F0:06:C0:62:34:DA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144707.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a809::/32
Signature Algorithm: sha256WithRSAEncryption
67:0e:a2:0a:a1:3c:5f:fc:2c:1e:d2:5e:36:d7:a0:61:09:a6:
a6:62:de:08:ab:eb:dd:3d:b3:0f:20:45:4d:2f:c7:dd:c2:14:
5a:33:25:17:56:73:56:74:f0:42:e1:f6:d5:3f:b4:00:67:27:
d2:71:a5:21:6b:26:6c:99:30:21:3d:7b:e8:4a:2e:5b:be:35:
75:5f:85:d4:a6:be:fa:aa:64:fc:50:16:42:98:67:d4:c9:98:
d2:d6:81:f6:93:f2:98:cf:4b:23:f9:80:92:c1:e1:73:20:ad:
40:01:ee:c5:c8:f8:91:e7:23:a7:41:67:ae:b3:48:bf:16:28:
ee:4f:a8:e4:d4:55:67:d3:d4:e5:21:a0:8e:de:2b:6c:6b:3f:
78:93:f5:f6:d5:58:da:da:46:a3:8c:9a:be:bd:fe:7f:69:28:
03:fc:62:c8:21:97:62:20:06:a0:91:98:ae:07:62:ad:ab:b4:
88:91:cf:e4:c4:81:49:f1:51:99:b3:5d:62:ec:3c:2e:3d:cf:
53:1f:a3:26:4d:7d:8c:29:e5:d3:ef:89:d4:b5:07:10:00:61:
c5:c9:bb:5b:06:a9:a0:a3:d5:5e:af:16:71:f0:50:cc:5d:e4:
2c:10:c5:57:ed:bc:82:52:b6:ec:59:90:0a:79:8a:a2:f9:7a:
97:26:27:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:04 2026 by rpki-client