Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144732.roa
File: AS144732.roa (raw, json)
Hash identifier: 9UkhKfg8F5VD08m8dvZGgA39Ro+BYR8dj6ySkSPfWdQ=
Subject key identifier: 94:1D:20:5D:D0:60:E5:32:9D:BD:02:94:01:70:89:A1:5B:A5:A9:12
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 71E3D4A975197121607DDA0BC5CDAED8F2252AFE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144732.roa
Signing time: Fri 22 May 2026 07:32:08 +0000
ROA not before: Fri 22 May 2026 07:27:08 +0000
ROA not after: Fri 21 May 2027 07:32:08 +0000
asID: 144732
IP address blocks: 240a:a822::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:e3:d4:a9:75:19:71:21:60:7d:da:0b:c5:cd:ae:d8:f2:25:2a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:08 2026 GMT
Not After : May 21 07:32:08 2027 GMT
Subject: CN=941D205DD060E5329DBD0294017089A15BA5A912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:41:99:0a:ce:4c:16:f9:72:67:dd:a1:04:16:
61:e8:d6:58:ba:63:e0:3d:47:45:ba:c1:05:ef:a4:
dc:db:3c:c4:fa:19:4a:90:83:4e:a1:5f:68:f4:83:
6c:f5:61:be:73:06:b8:7a:04:2f:27:37:81:a3:03:
24:cd:d8:45:38:b2:60:71:58:a3:7a:64:4b:48:28:
b4:b8:78:a3:fb:32:da:6e:de:25:0a:af:a9:50:76:
54:c8:8d:fe:17:11:8e:a3:54:df:d1:2b:a7:28:eb:
bc:0f:c0:e3:d4:3a:8b:60:5a:80:d3:7a:c7:f8:15:
f5:f7:05:12:ac:52:e1:ac:ad:21:f6:f9:ed:3c:d8:
d4:41:24:0c:a0:91:cd:36:83:9c:51:8e:f4:6f:cc:
30:b6:f8:05:21:57:62:cd:b0:85:72:b7:7e:2a:a3:
19:20:72:b6:8c:77:34:c6:ed:2b:7c:e7:b3:bd:57:
43:2b:b9:6b:7f:30:34:92:c9:25:b8:d5:d4:b0:07:
2d:2c:5d:59:d1:c2:50:0f:06:ff:64:68:a8:4a:26:
e7:bc:ac:36:e4:cf:b9:ee:93:6f:cc:1e:fd:9d:7f:
40:33:d4:2d:46:61:48:14:e5:6c:d6:e2:e2:b9:09:
b3:10:ec:cd:82:f1:9e:84:12:fe:a7:79:b1:c1:1c:
16:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1D:20:5D:D0:60:E5:32:9D:BD:02:94:01:70:89:A1:5B:A5:A9:12
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a822::/32
Signature Algorithm: sha256WithRSAEncryption
72:fa:b9:a5:e0:ff:f3:2e:9e:08:94:08:33:53:5b:2e:d3:67:
35:eb:b7:7b:07:fd:5f:46:a9:b4:4e:db:c1:04:54:e1:b0:66:
f8:fb:a7:42:b5:75:a9:9d:fb:b1:f2:35:bd:6e:74:56:69:7e:
91:61:20:fc:f2:25:e1:1a:d5:48:c9:fc:74:f7:2e:61:01:00:
67:8c:6d:f3:cc:6d:6d:39:15:7b:ad:01:47:7d:7a:8f:55:9f:
9b:77:5c:4e:e7:4e:45:37:6e:65:31:d1:b5:74:2c:a0:92:06:
86:76:ef:39:d8:f0:60:a4:b6:3b:43:45:1c:26:e5:0a:f8:39:
e6:36:ce:4d:25:ba:c5:5d:37:ea:4e:b9:c6:f2:2f:ec:13:26:
77:91:02:7e:09:6d:f9:1b:35:a3:99:d3:10:d5:95:21:41:4f:
32:87:cb:30:e2:af:1b:60:94:c8:1e:2f:30:2a:75:0f:14:25:
1b:fa:4a:d8:70:19:90:62:bd:a4:d3:45:a9:42:bc:89:b5:21:
27:c6:46:24:8d:bf:d1:b4:62:22:37:5e:c9:dc:5b:79:30:2a:
fd:b5:d2:31:c7:fe:97:cb:2a:d6:72:bf:d6:03:fc:b4:03:7b:
ad:16:46:6d:2d:e7:0a:2f:ba:7c:33:eb:5e:0c:68:ce:19:fc:
71:5f:03:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:59 2026 by rpki-client