Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144764.roa
File: AS144764.roa (raw, json)
Hash identifier: CiaVjX4iBd7v58hgq517IJmmfrDuDQrYHuYO0EzEWwg=
Subject key identifier: EC:BF:92:1C:FB:29:89:D2:9C:E9:78:89:33:E4:D5:24:00:A6:D1:52
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 162172797597CC7F7332419488365DA5A47DDF7A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144764.roa
Signing time: Fri 22 May 2026 01:50:19 +0000
ROA not before: Fri 22 May 2026 01:45:19 +0000
ROA not after: Fri 21 May 2027 01:50:19 +0000
asID: 144764
IP address blocks: 240a:a842::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:21:72:79:75:97:cc:7f:73:32:41:94:88:36:5d:a5:a4:7d:df:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:19 2026 GMT
Not After : May 21 01:50:19 2027 GMT
Subject: CN=ECBF921CFB2989D29CE9788933E4D52400A6D152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:73:55:f1:cd:d8:ed:5a:3d:87:86:ff:26:a6:
96:84:23:4e:94:6a:4e:a0:14:f9:38:77:ef:ab:64:
09:fe:53:56:c6:bc:64:bc:82:94:01:82:04:ec:46:
6c:5e:52:14:c0:be:c6:2c:6f:71:96:95:b5:51:6a:
66:a8:e8:da:51:bc:2e:3c:ce:96:5f:51:01:b5:c2:
1b:63:11:43:a8:67:b4:cc:2e:5e:22:aa:b4:92:32:
93:ba:4c:54:df:da:8a:a9:0b:0d:27:e3:bb:58:b2:
30:c2:6d:00:08:06:5a:f9:4b:d2:7e:d3:f8:69:af:
8f:af:a1:62:c4:ed:10:01:2c:5c:78:f5:c0:85:25:
3a:1f:15:b2:f9:3c:22:05:91:4d:9e:42:bc:53:ad:
28:df:ed:09:de:27:13:05:e0:7a:4d:28:b8:8f:f0:
0a:68:8e:6e:70:84:a0:59:ff:02:0a:6f:d4:ab:5f:
dd:f6:55:20:98:c1:1a:a6:81:aa:15:35:e5:62:b5:
38:85:75:c2:6f:f5:8a:2d:c9:a7:2c:f7:d3:a5:64:
43:27:8a:99:5f:0e:d4:f6:b3:7e:20:6d:4b:fc:6f:
f5:01:43:f8:71:4c:59:3b:1a:82:3b:99:5b:d2:20:
af:94:d8:e1:3e:4e:12:5a:95:d6:a1:3b:a6:a9:07:
df:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BF:92:1C:FB:29:89:D2:9C:E9:78:89:33:E4:D5:24:00:A6:D1:52
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144764.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a842::/32
Signature Algorithm: sha256WithRSAEncryption
36:f6:ea:4a:28:0b:a4:ef:47:a0:79:aa:5f:6f:60:9c:1a:02:
f9:24:7d:5a:7d:e6:8c:08:27:06:a9:95:19:83:23:1c:8d:fc:
61:d5:2e:83:09:96:2f:98:2d:1e:99:ab:92:c9:fc:49:ba:dc:
6b:95:8b:84:c7:20:70:5a:a4:65:34:69:af:3d:ad:89:70:e3:
95:db:14:a6:1e:bc:34:41:39:b6:16:36:54:ab:e8:20:d2:3c:
7d:73:18:c2:b9:dc:3f:db:48:5b:5a:a9:92:c1:f2:08:16:9d:
95:35:d3:25:ce:88:bf:3c:16:c5:bb:46:04:b8:b4:c7:c1:21:
36:16:c9:c6:34:ad:26:90:b7:23:73:19:12:9a:53:0f:ef:0d:
d4:8d:3b:0e:9d:06:94:9d:8f:cf:53:fd:63:42:b7:15:01:19:
92:20:3d:bb:e1:9b:7c:64:49:b4:45:90:49:12:43:67:b5:7c:
3a:85:a7:ac:41:04:b0:56:5b:f8:f0:90:a6:c4:3d:35:dd:d3:
9d:b9:f5:94:d3:04:f4:89:ad:2d:24:bc:25:25:ef:3e:52:9d:
10:d6:6a:ef:0a:4a:30:01:24:3a:9d:91:49:c0:32:cb:94:bb:
23:12:27:2f:ce:37:b6:cc:ac:2e:f1:5f:b4:7b:95:bd:eb:10:
a8:dd:ab:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:35 2026 by rpki-client