Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144731.roa
File: AS144731.roa (raw, json)
Hash identifier: as0Tzs1FGwr0Bn6CM3fuNZdIEHGZOUlSakWsfJy66x8=
Subject key identifier: 03:59:CF:79:76:1C:46:8B:94:69:15:6B:19:65:F2:E9:F8:64:E1:40
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7FA91562F59C3485EB4C176325397D530894A306
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144731.roa
Signing time: Fri 22 May 2026 07:32:35 +0000
ROA not before: Fri 22 May 2026 07:27:35 +0000
ROA not after: Fri 21 May 2027 07:32:35 +0000
asID: 144731
IP address blocks: 240a:a821::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:a9:15:62:f5:9c:34:85:eb:4c:17:63:25:39:7d:53:08:94:a3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:35 2026 GMT
Not After : May 21 07:32:35 2027 GMT
Subject: CN=0359CF79761C468B9469156B1965F2E9F864E140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:33:7a:e7:f3:0b:e6:f3:57:23:ed:9c:6a:
99:10:e9:56:fc:04:75:4c:6f:8b:ce:ad:34:d8:3a:
91:e7:92:52:9e:8c:f6:65:ad:bd:32:85:1d:8d:ca:
68:39:cd:68:44:f2:21:1f:1a:c7:f3:0e:5b:37:41:
1d:60:13:4f:37:59:ee:74:f6:1d:41:b3:8d:01:24:
d2:e4:90:0f:08:51:4f:c8:07:25:e5:c7:f0:34:07:
35:d3:cd:fe:de:4a:f3:c8:18:57:e6:26:23:f5:8c:
89:02:25:df:3d:22:7d:43:29:d9:ff:e1:d7:bd:b9:
39:64:23:52:6f:59:83:86:0d:74:32:f5:da:01:9b:
48:96:a2:05:6b:3f:58:bc:1a:82:34:9e:49:ee:a0:
83:57:0b:b1:3f:68:ec:0a:a9:4d:4f:0f:81:ae:08:
93:cc:05:06:5a:83:7c:aa:52:09:f9:48:42:75:bf:
cc:30:94:12:48:4e:a9:04:fa:ef:a9:ce:dc:86:ea:
3a:60:fe:07:7d:22:da:ba:80:bd:9d:94:d4:f3:3d:
fe:99:68:be:05:02:34:3a:86:04:7c:5e:6d:a3:c8:
9a:22:da:27:b1:c4:75:fe:e4:36:c1:ad:56:4d:39:
b1:5f:74:c3:46:f2:24:80:ea:6c:46:3f:0f:7c:dc:
64:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:59:CF:79:76:1C:46:8B:94:69:15:6B:19:65:F2:E9:F8:64:E1:40
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a821::/32
Signature Algorithm: sha256WithRSAEncryption
3c:3c:14:70:60:21:26:26:6b:0b:96:64:0d:1f:d9:d6:5e:85:
91:1d:d2:8d:0f:18:4d:56:ae:91:aa:fc:f9:a2:96:9c:5e:e4:
9d:72:e4:82:7d:71:c3:1c:1b:01:e4:72:90:c7:f6:ed:87:8e:
d5:21:7d:a6:84:6e:11:74:d4:19:6a:df:ad:fe:30:b6:65:b1:
24:f9:1d:3c:68:a5:c0:f9:c9:aa:c8:7e:ed:d2:8a:3e:fc:dd:
4b:dc:17:6f:d1:a0:ec:9e:e2:1c:7d:66:d7:f6:f5:51:f7:dd:
5e:bd:b5:be:8a:b2:48:7f:ae:d8:28:f0:37:95:aa:24:44:ed:
12:7b:5c:4c:94:f7:47:58:fb:d8:72:ad:a0:45:bb:39:f8:82:
bd:fc:60:ca:4a:8b:71:2e:7e:6a:dc:30:8f:75:f6:a9:ad:64:
c5:ad:3d:6c:0b:95:0f:92:70:6d:75:59:28:7c:1b:4f:b3:70:
5d:9a:d6:29:77:93:f6:e3:e0:85:43:4e:1f:fe:9c:34:bb:b8:
ca:fd:b4:eb:ed:7d:7b:75:2d:12:00:a9:79:5e:46:75:4d:89:
cb:3e:46:a1:00:fb:ef:00:86:5a:2d:31:37:0c:21:a4:57:51:
7e:1f:39:4f:bb:53:af:83:06:34:07:7a:47:11:f1:59:d8:65:
13:bb:92:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:32 2026 by rpki-client