Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144709.roa
File: AS144709.roa (raw, json)
Hash identifier: /dt+BgZ/DWMa6guKiUy3STHQXc2WIvD6p0sd5gp6KYc=
Subject key identifier: 06:C9:B7:B0:35:08:CA:6F:AE:09:DC:24:62:56:21:8B:96:A7:FA:03
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 58DEC49C15FA89EEBCE702684F844CF93415305C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144709.roa
Signing time: Fri 22 May 2026 07:41:15 +0000
ROA not before: Fri 22 May 2026 07:36:15 +0000
ROA not after: Fri 21 May 2027 07:41:15 +0000
asID: 144709
IP address blocks: 240a:a80b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:de:c4:9c:15:fa:89:ee:bc:e7:02:68:4f:84:4c:f9:34:15:30:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:15 2026 GMT
Not After : May 21 07:41:15 2027 GMT
Subject: CN=06C9B7B03508CA6FAE09DC246256218B96A7FA03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fd:1b:01:51:30:dd:10:b8:1e:56:91:21:ed:
2b:53:1d:2d:8f:fd:31:93:56:30:f8:d5:66:2a:a4:
a7:22:7b:7b:28:0d:aa:32:1e:db:42:84:73:fa:f0:
76:a3:4f:de:ae:3d:ac:69:bb:ea:d7:1c:82:1d:d7:
60:9c:1d:41:c2:8b:33:eb:04:5e:59:e4:59:58:2c:
2f:51:fb:ff:be:30:66:10:46:16:b1:61:e6:63:b5:
48:99:aa:60:fe:49:dc:f7:d0:44:68:6f:b6:5f:7d:
46:20:8a:2c:74:ac:3b:d6:51:2b:4e:0d:48:6f:35:
7c:9c:40:2d:01:20:9c:c6:17:d9:f3:f8:de:a2:8c:
d3:da:e8:2b:f4:e7:e8:73:9e:5f:1c:32:5c:7a:e3:
8b:c3:67:4b:5e:89:d6:45:47:7c:83:43:e0:3f:29:
77:3b:3e:a6:fe:eb:31:28:99:4e:0b:e4:20:48:cc:
d9:d8:d3:88:83:c8:48:d2:f6:2c:ad:f3:09:11:38:
94:73:7d:3f:bc:95:31:64:3f:3e:e5:eb:39:c4:df:
99:28:b6:90:c4:b5:8b:a4:dc:96:ec:b1:cd:1d:9b:
4f:5a:cb:1a:30:b8:ba:bf:0f:1d:67:7d:6e:ef:8c:
58:d3:f8:f5:c6:2c:0c:6b:00:4e:35:9f:63:bc:d6:
1b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C9:B7:B0:35:08:CA:6F:AE:09:DC:24:62:56:21:8B:96:A7:FA:03
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144709.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a80b::/32
Signature Algorithm: sha256WithRSAEncryption
9f:b6:9e:27:f4:8d:92:0e:9a:58:99:60:ec:9e:f4:ad:ec:4e:
5e:56:c8:4b:59:0c:7e:d1:b4:1b:27:bc:63:44:50:80:76:8e:
61:f5:16:9c:43:12:08:08:5e:1b:aa:1d:8f:18:af:ac:3e:ec:
77:a6:be:15:1b:02:1c:5c:e8:0d:04:a3:b3:6e:51:67:ec:b3:
8e:22:4a:01:10:d5:d5:26:0a:2a:9c:d9:99:dc:f0:ad:c2:90:
9a:64:d0:89:c5:fb:14:95:01:da:ec:6d:44:9d:06:a1:8f:68:
4e:b2:46:31:80:fa:0a:a5:0b:8b:63:79:5b:d2:7b:35:13:c7:
00:20:d5:39:00:92:ba:2d:6b:fa:0d:ef:fa:e7:56:4e:eb:0c:
c2:f7:ea:8e:9d:6d:43:9e:6e:63:c0:eb:96:39:95:57:a2:ba:
03:a3:0a:9f:d4:c7:15:e9:f3:d6:70:8f:7a:46:25:c1:8f:b6:
92:25:a3:4c:2e:1d:95:5a:a2:e8:f9:80:14:2c:b3:13:95:7d:
31:e3:69:86:67:31:73:d7:75:97:e7:94:08:9d:a6:2e:2c:9f:
97:64:3b:0f:17:b0:bc:fa:90:47:74:8e:b0:d8:2b:02:23:d3:
5e:61:8a:ec:2a:19:e7:14:a6:de:7f:d7:3b:d2:d6:dc:3f:7f:
84:e9:24:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:44 2026 by rpki-client