Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144710.roa
File: AS144710.roa (raw, json)
Hash identifier: asPJjPQGN69I9QUPx3A10zfrByvt2xyvT0dIJ9TYQRc=
Subject key identifier: 70:C3:72:15:22:4B:F4:E7:12:6A:36:71:51:3E:68:35:0F:5C:0D:5E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6A7638CB7CAA77542FDA7A963B7F3715D1A6A465
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144710.roa
Signing time: Fri 22 May 2026 06:58:18 +0000
ROA not before: Fri 22 May 2026 06:53:18 +0000
ROA not after: Fri 21 May 2027 06:58:18 +0000
asID: 144710
IP address blocks: 240a:a80c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:76:38:cb:7c:aa:77:54:2f:da:7a:96:3b:7f:37:15:d1:a6:a4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:18 2026 GMT
Not After : May 21 06:58:18 2027 GMT
Subject: CN=70C37215224BF4E7126A3671513E68350F5C0D5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:aa:06:8a:6a:42:da:b2:ac:ff:21:97:e0:
5e:65:67:f1:97:e0:f7:f5:7b:82:53:e7:ac:6b:7b:
fb:d5:16:86:a1:a3:1d:d2:09:d2:c7:47:a3:f2:ae:
ad:e8:c8:c6:6f:d5:b0:ca:d6:57:58:d6:ed:4e:e3:
7f:1a:b6:c7:d8:08:dd:52:63:9b:f9:03:5a:f5:56:
84:02:23:83:ec:f5:55:37:fa:a4:9b:50:d4:6b:1e:
10:d3:5d:e5:de:c1:c9:20:ed:47:65:82:d0:73:5d:
37:18:79:3c:74:e1:33:14:c8:d1:69:50:69:7b:15:
62:25:78:af:21:c8:e7:48:30:70:39:9e:d7:e7:c5:
09:d9:ae:99:1c:27:20:23:44:0c:1d:6a:d9:65:be:
9b:05:8e:d1:cd:25:35:ed:da:9c:42:54:8e:5a:c2:
7a:55:8c:a9:6f:32:77:46:ed:db:18:42:5b:83:29:
f2:14:4d:bd:4b:19:63:5e:60:50:b7:be:af:28:d3:
c8:e5:9a:b4:f3:2e:ca:f0:20:c0:49:1c:af:91:6b:
05:58:c4:ba:e0:9e:dc:81:94:9e:b2:4e:c1:43:83:
8c:0a:54:cd:0d:6a:79:1d:ff:86:f5:d3:01:ff:ed:
4d:03:88:46:7f:74:36:83:33:48:1e:8a:ff:34:25:
ce:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C3:72:15:22:4B:F4:E7:12:6A:36:71:51:3E:68:35:0F:5C:0D:5E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144710.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a80c::/32
Signature Algorithm: sha256WithRSAEncryption
4a:e2:41:b4:dd:8a:7b:94:ab:e2:b6:f6:10:e8:9c:27:5d:f5:
ea:c4:ec:0e:c2:17:a0:60:78:09:60:a8:f5:75:76:54:e4:aa:
cc:61:47:d9:ff:67:b2:7d:42:27:de:55:75:02:2f:1c:a8:b7:
15:42:1d:68:77:f6:24:17:8c:6d:1c:23:90:86:b7:44:11:9f:
0b:58:c6:8a:75:d0:5a:ec:5f:81:72:58:b8:52:40:13:19:84:
91:50:90:c6:5a:ef:bb:e8:a9:1c:bb:4b:3d:22:b8:f8:13:72:
0a:62:98:b8:ac:2c:f1:67:9d:74:df:5d:74:85:8a:db:a3:bc:
d5:dd:63:28:d5:44:92:6a:fb:da:d5:ba:f0:0a:a0:3a:7d:72:
53:ca:16:02:42:1c:f3:d5:dd:1e:c6:6a:a1:d4:69:49:81:fd:
a1:58:b7:b7:dd:3d:cc:d0:cb:da:cb:ea:47:6e:62:62:f3:66:
ab:50:cd:c2:30:20:74:48:25:f4:6d:0a:66:53:5a:61:27:fa:
88:72:a6:58:ae:e7:c7:aa:50:12:69:4e:27:7e:66:1d:5c:22:
f5:82:28:13:fd:bf:16:80:b5:ef:98:d2:c3:92:6e:f4:3f:14:
4e:b1:8a:8c:e5:35:79:59:ea:df:9c:48:7d:9f:77:1b:43:6f:
5d:1f:4b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:10 2026 by rpki-client