Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144769.roa
File: AS144769.roa (raw, json)
Hash identifier: cl8i5tfQa0g9EeCpEsdyV68d815Dz5+nT/uQYm8BLhE=
Subject key identifier: 2C:75:00:53:F2:1D:6E:CB:64:31:E9:32:02:D7:A9:73:51:C9:8A:09
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 07E30F5E2A3CB3077EC426FCCF27B6AE6235E231
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144769.roa
Signing time: Tue 26 May 2026 08:52:45 +0000
ROA not before: Tue 26 May 2026 08:47:45 +0000
ROA not after: Tue 25 May 2027 08:52:45 +0000
asID: 144769
IP address blocks: 240a:a847::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:e3:0f:5e:2a:3c:b3:07:7e:c4:26:fc:cf:27:b6:ae:62:35:e2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:45 2026 GMT
Not After : May 25 08:52:45 2027 GMT
Subject: CN=2C750053F21D6ECB6431E93202D7A97351C98A09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:86:e9:cb:e2:e3:a8:44:75:60:8d:40:bd:2b:
51:f5:09:fd:ea:d6:dc:05:79:35:78:e0:6b:5d:68:
bb:36:68:1e:f8:04:e4:05:1a:87:aa:42:99:14:39:
5c:36:77:48:0c:bc:68:2e:25:2e:d4:de:08:e9:10:
14:50:20:80:57:6f:0b:84:03:71:c0:06:30:fc:9e:
60:65:12:13:ea:13:f8:3e:3c:8a:37:99:78:4c:d5:
5a:4e:6b:6b:3a:ac:b4:3a:5e:dc:7d:77:ce:d1:6a:
6f:a1:7d:da:01:06:ae:7a:f0:05:79:68:25:23:80:
1a:95:dd:27:93:2d:7b:ae:c2:ac:15:17:c7:7a:c6:
0c:07:d1:6e:ca:00:24:17:c3:19:7b:eb:73:d3:07:
79:04:21:eb:bd:3c:e0:cf:34:02:02:de:be:af:45:
23:80:42:f4:39:59:3e:08:14:96:90:a6:e1:72:dc:
b3:e8:46:85:c3:69:7e:91:e5:12:7b:d8:bc:64:e2:
1e:04:7a:60:43:1a:60:ce:32:11:5f:8d:d6:48:40:
9a:00:92:22:f4:96:c5:9c:87:ee:3c:cb:de:d4:1b:
6b:48:ed:14:d1:cb:73:91:62:41:91:3d:0a:49:d9:
af:82:3b:e7:77:86:c8:cb:fd:e7:d4:8a:c1:5a:58:
ac:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:75:00:53:F2:1D:6E:CB:64:31:E9:32:02:D7:A9:73:51:C9:8A:09
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144769.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a847::/32
Signature Algorithm: sha256WithRSAEncryption
0c:b0:55:af:4f:0f:79:7c:07:b5:14:da:61:78:22:76:48:48:
6d:0c:f9:ba:3a:d7:4d:f3:fd:d4:f9:7a:e4:7e:37:79:d9:f5:
40:ee:3f:6d:2e:54:22:49:76:fb:47:a2:86:cf:29:ed:09:49:
78:c5:d3:8f:4c:a1:eb:92:f5:a7:a8:41:85:dd:d7:98:cc:31:
96:eb:31:c4:10:26:ef:e6:2b:c9:93:6c:d4:42:39:5b:96:1b:
3e:16:cd:56:ef:17:87:5f:57:da:bc:1b:a0:c0:c1:23:5e:63:
7f:91:e7:58:9f:a6:35:4e:f6:5d:89:5e:e6:bf:9c:72:c9:4a:
bf:61:c0:79:57:71:77:4f:21:e3:61:0b:49:22:9e:8c:45:a4:
2d:b9:d1:76:fb:80:58:f0:fe:73:28:ba:61:32:20:12:0a:bb:
01:20:33:55:6a:ad:c9:54:95:7a:b4:f0:c7:f9:ee:f5:3b:ea:
38:e4:ef:9f:5c:48:84:1a:70:2a:54:ab:a2:21:ef:80:69:60:
5b:19:9e:51:7e:87:82:1c:80:59:7f:be:5b:79:21:85:a0:d2:
00:00:a3:9b:de:38:74:b4:56:34:e5:8f:10:35:5b:3c:5f:eb:
14:98:48:a6:f3:46:bc:2e:27:ee:f5:6f:aa:2e:dc:e2:f7:a0:
d2:b5:44:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:44 2026 by rpki-client