Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144721.roa
File: AS144721.roa (raw, json)
Hash identifier: suMIyt5we2WI1+DwJHUJZHEld8JvXBAkCHMB0NrFT24=
Subject key identifier: E1:30:B7:A0:6B:FE:54:D6:91:E9:E7:FD:61:38:C2:0E:31:95:5D:8B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 18AC9AC76EDEE6AE080A80B7C896C0A954C64F4D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144721.roa
Signing time: Tue 26 May 2026 01:13:18 +0000
ROA not before: Tue 26 May 2026 01:08:18 +0000
ROA not after: Tue 25 May 2027 01:13:18 +0000
asID: 144721
IP address blocks: 240a:a817::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:ac:9a:c7:6e:de:e6:ae:08:0a:80:b7:c8:96:c0:a9:54:c6:4f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:18 2026 GMT
Not After : May 25 01:13:18 2027 GMT
Subject: CN=E130B7A06BFE54D691E9E7FD6138C20E31955D8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:f2:a7:2b:82:cf:69:da:f4:1a:e3:a3:2c:
1a:22:bf:d6:6e:14:37:78:8a:1d:8b:8b:12:04:c7:
35:6e:d8:76:54:6a:5e:cf:c2:d9:6b:45:ce:9f:41:
f2:73:bb:9e:aa:df:dc:57:13:b1:28:2c:63:e9:b1:
cd:6c:f7:64:7c:01:e0:f2:9f:f7:32:64:16:3c:58:
57:f8:53:4f:77:e2:f2:ca:9a:8f:0d:e4:8b:1a:cd:
61:b2:f9:74:99:78:ba:79:68:0d:68:44:52:68:0b:
60:91:cf:09:7e:cc:d9:3a:65:67:1e:11:51:58:60:
d4:73:65:d0:cc:81:ce:48:36:bd:3c:b5:23:dd:01:
ca:19:2b:6e:9c:10:de:7d:b9:4e:16:94:22:f8:10:
da:72:88:90:29:1e:08:53:8b:45:f3:25:a9:e2:1a:
7b:0f:b0:59:f0:cf:bb:57:c4:30:3a:6a:c0:5f:45:
eb:af:12:39:b1:5c:54:29:d1:b8:0e:82:3b:fa:19:
57:9e:7c:45:b5:b8:f9:f1:af:cb:24:11:d1:d6:61:
e0:40:4d:4c:bc:6b:7f:f3:d5:26:64:d3:1a:3c:bd:
db:5a:68:21:02:d5:3e:48:7d:27:2d:c7:d3:c8:36:
62:9a:9c:39:a2:11:5c:96:9a:1a:13:7e:87:ba:b3:
0e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:30:B7:A0:6B:FE:54:D6:91:E9:E7:FD:61:38:C2:0E:31:95:5D:8B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144721.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a817::/32
Signature Algorithm: sha256WithRSAEncryption
8b:3a:51:95:c8:5c:64:3d:40:7f:bf:41:69:47:a1:bd:40:cb:
ab:15:38:38:41:b1:20:3d:cb:35:ff:60:71:40:9c:e5:0a:92:
4a:e1:7f:d0:c1:f6:5c:2e:f3:7d:51:a7:58:6d:1a:89:84:21:
c1:22:86:95:48:8e:e9:7a:73:95:08:66:1e:86:99:1a:f1:78:
cb:c6:53:ae:cf:75:28:b8:c5:d5:57:d1:8a:55:a5:4a:d2:27:
d8:0a:05:aa:38:94:bd:1e:b9:cd:6d:89:0a:11:76:61:c4:c6:
ad:35:f9:7c:df:3d:22:17:15:dd:15:8c:3b:2d:3e:61:ca:ba:
e9:92:4a:00:9f:42:90:c0:97:e5:38:d7:26:8f:c2:a4:a6:8c:
28:b7:8c:2a:18:f5:f2:71:92:d0:26:35:67:a8:bc:56:b2:be:
d6:66:47:08:5f:62:08:31:c3:a6:fd:18:ea:5c:a3:2e:2c:fb:
ae:a7:5b:12:e3:11:c3:e3:5f:37:81:37:ca:8a:f9:52:56:6f:
eb:3b:f8:df:e2:99:08:db:ad:d9:38:41:75:25:7d:64:64:3b:
21:af:24:59:4d:b1:dc:60:e9:03:13:c6:83:68:e8:26:85:78:
b1:89:26:ff:6b:8a:5b:12:a9:52:ee:97:91:70:43:73:1f:9f:
f3:59:4a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:26 2026 by rpki-client