Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144713.roa
File: AS144713.roa (raw, json)
Hash identifier: AxFIGby+gdIOZOdGcs5QJLpAmqz1paASXJ7ZM8KT+5o=
Subject key identifier: CB:88:CB:56:1E:C9:A5:42:2C:10:39:59:30:3A:6C:7A:9D:95:3D:EB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 179E9160C09AD7A568B6182A0C34D4E80CC2335B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144713.roa
Signing time: Fri 22 May 2026 07:32:27 +0000
ROA not before: Fri 22 May 2026 07:27:27 +0000
ROA not after: Fri 21 May 2027 07:32:27 +0000
asID: 144713
IP address blocks: 240a:a80f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:9e:91:60:c0:9a:d7:a5:68:b6:18:2a:0c:34:d4:e8:0c:c2:33:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:27 2026 GMT
Not After : May 21 07:32:27 2027 GMT
Subject: CN=CB88CB561EC9A5422C103959303A6C7A9D953DEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:15:93:e6:fd:19:f1:88:5d:81:3c:ab:d0:c2:
04:a6:19:58:66:d8:02:eb:da:dd:5f:9a:d1:3a:9c:
78:ff:75:4d:60:90:a6:96:63:79:35:15:6a:e3:c5:
1c:6f:24:b6:c6:9d:64:2c:7e:a1:da:46:4c:3e:02:
e1:e9:ed:96:72:8b:71:08:1e:8c:72:31:4b:32:57:
c1:6d:80:18:40:4d:77:f8:63:03:43:0d:15:b3:27:
0c:4f:b1:61:58:24:f9:4c:f9:ba:22:27:fe:11:6c:
d9:f8:03:94:1e:20:65:43:9b:6c:7b:20:15:2b:c2:
c3:42:0d:dd:c0:93:86:87:98:98:a6:48:7e:29:84:
ff:bd:e6:8d:85:2b:51:81:b2:08:04:5f:ea:fb:54:
50:b0:c6:63:c2:e0:d1:d3:af:97:42:63:cc:e9:e9:
58:51:e5:d5:68:0b:ed:bd:23:72:24:df:33:8e:8f:
a3:a3:fe:42:e0:81:29:c6:2c:ee:ea:9e:52:4e:a6:
d5:ad:34:eb:9e:67:c3:b3:e2:78:20:fc:d3:bd:9a:
48:7b:8a:83:c5:0d:8b:26:45:ce:7d:3a:c8:33:65:
0a:bd:08:80:e8:ef:e5:44:df:43:d1:7e:71:a8:92:
3f:4c:40:9a:8a:97:28:fb:01:da:3b:5d:be:39:10:
e7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:88:CB:56:1E:C9:A5:42:2C:10:39:59:30:3A:6C:7A:9D:95:3D:EB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144713.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a80f::/32
Signature Algorithm: sha256WithRSAEncryption
47:13:4a:58:d7:92:c9:f3:8a:26:ec:24:5a:f8:a6:9c:48:5c:
a5:0f:1a:bb:45:f6:2e:07:98:83:56:c5:19:0a:87:89:b5:9a:
ce:4f:37:ff:94:b6:a1:42:53:d7:70:d4:12:fd:24:a4:36:aa:
be:ef:14:82:b9:5c:3d:d3:86:5b:b9:2d:ff:56:68:04:d4:b1:
91:83:13:02:72:0c:89:ac:ec:18:52:68:76:08:7e:68:e1:b8:
00:97:ba:bb:b5:24:19:74:33:ee:16:aa:7e:57:92:a2:60:57:
65:85:a9:31:96:ea:63:83:9f:c3:55:1f:fc:69:c1:e2:a8:df:
55:d0:2b:89:eb:40:53:99:f5:d3:8d:aa:34:b7:ba:eb:4a:3a:
ac:02:d1:ab:5f:fc:ff:47:b0:4a:97:63:19:13:33:ee:ac:20:
ba:a2:2d:ed:34:06:70:4f:8c:7a:81:65:64:dc:bd:79:4a:f1:
de:c3:52:eb:5e:cc:c8:0d:13:a9:51:ef:37:68:6b:71:81:a5:
84:cb:8c:9d:4f:bb:ee:89:42:bb:69:05:4c:88:78:bd:04:30:
8e:bb:e2:79:cc:40:6c:d1:f6:56:a4:ff:61:f2:6b:ac:0f:f3:
86:e9:c6:9e:a6:05:9f:e3:57:c1:96:75:9d:7a:13:d7:ed:35:
0f:58:64:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:02 2026 by rpki-client