Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144747.roa
File: AS144747.roa (raw, json)
Hash identifier: mew+zaR5Xh94+bY/KZ0NQup317JrpWjB6TYIS9QumMk=
Subject key identifier: A0:2C:90:FD:BF:8F:24:B2:3F:CE:6E:18:43:F1:52:20:26:B4:92:6F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 576698CC76936F595B4AA83ED38A005D2B2FD00F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144747.roa
Signing time: Mon 25 May 2026 06:49:06 +0000
ROA not before: Mon 25 May 2026 06:44:06 +0000
ROA not after: Mon 24 May 2027 06:49:06 +0000
asID: 144747
IP address blocks: 240a:a831::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:66:98:cc:76:93:6f:59:5b:4a:a8:3e:d3:8a:00:5d:2b:2f:d0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:06 2026 GMT
Not After : May 24 06:49:06 2027 GMT
Subject: CN=A02C90FDBF8F24B23FCE6E1843F1522026B4926F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:91:5c:33:76:16:e7:d8:72:7a:83:80:1c:
7d:11:58:50:98:a1:fe:d7:25:19:d5:53:2a:18:fb:
a2:43:58:e5:65:af:cc:eb:a3:07:0e:4a:5d:5a:51:
5f:8a:f3:45:e0:bf:81:1a:6a:6c:03:6a:cb:31:24:
99:ce:ae:51:26:5a:bd:cd:5a:ff:9c:c2:48:cd:91:
16:92:f4:e1:07:98:08:04:37:09:a7:23:56:43:a9:
af:80:04:4f:90:b2:72:da:83:18:6c:7e:c5:bd:3d:
69:19:00:f2:4c:f6:e4:07:a2:c5:7f:bb:1a:50:a4:
02:5b:a5:6b:17:6b:79:6a:7b:71:d2:ca:8a:30:c7:
80:97:2e:1c:83:b8:9d:19:0d:06:44:10:69:c5:a3:
1d:50:14:16:d1:ef:fd:d9:c1:c6:d5:32:6f:cd:bc:
eb:ee:72:4a:65:56:8d:49:71:45:98:43:e6:69:30:
b4:75:d2:c4:de:5e:80:b2:b0:5e:c7:cb:a1:ae:9b:
ef:e7:a5:62:cd:22:09:67:73:bf:4a:2c:03:50:40:
54:a8:a2:3b:13:f5:9c:0e:ab:c0:7b:02:eb:2f:8e:
fe:4e:4a:b5:33:21:c8:07:98:a0:b6:d8:04:3b:97:
1e:99:30:af:40:5a:63:6f:f8:71:85:72:c3:b6:a9:
ca:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2C:90:FD:BF:8F:24:B2:3F:CE:6E:18:43:F1:52:20:26:B4:92:6F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144747.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a831::/32
Signature Algorithm: sha256WithRSAEncryption
7b:90:3d:ca:10:c5:72:5f:13:fb:e7:11:2f:c9:05:c7:d8:6a:
4d:08:a9:10:7a:0e:d4:09:5d:58:ed:e7:fc:eb:96:aa:c6:e8:
90:79:63:7e:d5:06:44:77:16:31:ee:a7:04:aa:f9:33:18:c8:
27:61:8a:7d:46:ea:14:32:c7:6a:57:71:e1:01:52:37:74:a6:
61:89:27:93:c1:68:39:4e:c4:89:91:1b:03:94:30:ee:6b:3e:
d4:a5:e1:52:2b:65:59:7e:bb:66:6c:b6:74:a3:da:d4:0c:d0:
d1:d7:de:9b:26:fc:06:f6:aa:22:55:3f:df:2e:89:c4:63:44:
89:3b:c1:4b:b0:8b:1b:80:14:ae:43:1a:da:71:51:de:0f:3d:
0a:56:74:cf:ae:37:2a:9e:fd:4e:bd:ff:e2:21:f0:1d:f6:5e:
d3:b5:7d:79:6e:01:1e:cf:4b:a8:86:01:0f:1f:34:f8:5e:69:
1f:65:fc:56:33:b1:8c:ab:ff:92:ba:f0:45:92:e9:33:1d:43:
a6:ff:91:75:c3:6c:bf:ba:f2:f6:56:43:8e:ec:cf:94:10:4f:
27:9f:d1:f8:80:c1:42:7a:b6:b1:9b:c7:cd:d8:fa:83:15:3b:
ff:dd:85:a2:f1:0a:a3:bf:af:0d:99:57:8e:a5:c5:f4:f1:dc:
a0:52:f8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:08 2026 by rpki-client