Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144756.roa
File: AS144756.roa (raw, json)
Hash identifier: rp4fNUcryXQLJZDIlkbKMo9BDQ9T2aLUL/Qmx4JzSAE=
Subject key identifier: 29:A9:4E:50:4D:A4:0A:48:44:DF:77:AF:C8:14:4F:55:CC:1C:8C:0C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0B3DCCB463E3B59425130F7E79BBAA2A3CB6525A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144756.roa
Signing time: Fri 22 May 2026 06:05:41 +0000
ROA not before: Fri 22 May 2026 06:00:41 +0000
ROA not after: Fri 21 May 2027 06:05:41 +0000
asID: 144756
IP address blocks: 240a:a83a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:3d:cc:b4:63:e3:b5:94:25:13:0f:7e:79:bb:aa:2a:3c:b6:52:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:41 2026 GMT
Not After : May 21 06:05:41 2027 GMT
Subject: CN=29A94E504DA40A4844DF77AFC8144F55CC1C8C0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4a:86:29:41:38:9c:96:4d:c8:19:d4:f1:1c:
68:34:f5:62:5d:fd:83:7a:45:e1:ad:8e:b8:d6:1a:
1b:db:e9:e4:ad:0e:72:06:54:20:32:88:ef:f3:98:
53:24:d0:af:3a:dd:1d:37:f3:f2:d7:f8:ec:ec:d9:
ee:98:0a:82:4a:7d:4d:5b:41:5e:5d:2a:fd:47:de:
06:0a:b0:5a:7a:06:48:a7:b1:0a:2e:69:a5:bd:f9:
91:b3:45:85:57:16:d1:46:b6:d2:95:f9:07:17:c9:
2f:35:c7:ea:82:77:9a:fc:cc:e9:ef:25:cc:cb:42:
ab:93:da:b2:d8:a1:d2:b4:10:ac:c6:61:bc:b1:ad:
b4:cb:28:45:c6:35:bc:50:c0:5b:eb:50:54:86:06:
02:79:06:4e:a0:bd:3b:88:d5:7c:ea:29:96:13:49:
d2:a3:6e:b5:bc:1d:a4:ef:75:05:62:0d:15:de:5f:
68:bf:cf:10:68:90:29:42:1f:35:fe:11:0c:b4:e3:
bd:e0:63:bc:e5:bb:f3:f0:67:17:bc:7a:ae:11:40:
77:f3:50:98:c5:42:c7:14:bd:6b:79:7a:f2:6e:b1:
87:b8:ba:02:04:05:cd:c8:57:b2:c0:1a:f8:80:e1:
cc:67:1d:7f:b5:53:e2:1a:ed:63:64:9d:d1:1c:8a:
e8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A9:4E:50:4D:A4:0A:48:44:DF:77:AF:C8:14:4F:55:CC:1C:8C:0C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144756.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a83a::/32
Signature Algorithm: sha256WithRSAEncryption
11:4f:2d:77:65:0c:6e:eb:9e:e3:c3:46:e8:d4:a7:02:8c:18:
44:45:2f:ff:55:44:19:9e:8d:e4:30:18:7d:e8:b3:f0:99:df:
a3:57:d7:b9:42:90:e7:58:b4:32:3a:65:ca:27:48:6c:be:b7:
57:f4:9a:ac:27:7e:6b:f9:25:31:f5:a9:7f:46:cb:39:60:21:
a8:69:7d:a0:27:30:f3:23:c0:e2:fc:a0:37:41:c9:49:ba:31:
70:0a:12:a7:90:10:1b:41:af:af:55:61:93:a0:f5:61:cf:5c:
72:65:a6:bc:e6:93:78:43:ac:46:e6:5a:66:16:b3:3b:0b:c6:
fe:c4:72:fc:15:24:d6:b6:5b:f5:d6:3f:fb:57:48:85:26:16:
8b:41:f4:e1:d8:b8:37:c9:a9:af:23:4e:17:6d:f7:8c:aa:d6:
e0:95:75:0c:2d:e3:89:34:23:bf:21:0a:d9:16:66:c2:f2:2c:
76:f8:b4:74:d0:42:49:c0:d9:12:bb:5c:d9:0b:52:1e:f3:64:
12:5b:66:5e:3f:fe:95:82:20:22:78:7f:1b:c5:77:89:d3:fa:
29:fb:53:e7:18:e5:5d:2e:af:db:67:60:08:b1:04:60:32:db:
3b:8e:ea:09:25:52:34:f0:d8:94:5d:0d:4e:60:d1:07:8b:a8:
9b:e8:e5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:10 2026 by rpki-client