Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144771.roa
File: AS144771.roa (raw, json)
Hash identifier: zd2VWh9IBKj8NK7CvLwcbFoYq5pJIWVZzPeEf4yUg6o=
Subject key identifier: 78:5A:7F:1A:46:23:60:B7:1A:B6:71:B0:8D:97:8B:08:30:5E:5D:04
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5009AD4C27EA855607D3869381858D529CFDB561
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144771.roa
Signing time: Mon 25 May 2026 03:19:31 +0000
ROA not before: Mon 25 May 2026 03:14:31 +0000
ROA not after: Mon 24 May 2027 03:19:31 +0000
asID: 144771
IP address blocks: 240a:a849::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:09:ad:4c:27:ea:85:56:07:d3:86:93:81:85:8d:52:9c:fd:b5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:31 2026 GMT
Not After : May 24 03:19:31 2027 GMT
Subject: CN=785A7F1A462360B71AB671B08D978B08305E5D04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bf:e5:34:80:23:77:32:1f:1b:31:8f:2f:75:
16:02:ce:32:28:29:de:56:08:49:19:99:03:ad:cf:
8b:91:34:5f:3c:d5:51:d2:f5:49:54:fc:ca:a6:a8:
5b:73:86:ff:bf:d0:29:c2:1d:3b:98:2e:4d:35:bb:
a5:a3:42:54:28:32:8c:0c:3d:5b:c7:13:61:83:c3:
fc:5c:06:48:82:a1:c9:fa:66:4f:45:8a:88:53:b0:
89:a8:cf:16:ca:11:a9:18:23:b9:b1:33:7b:5c:20:
e7:12:e9:23:76:6e:84:47:49:01:e1:cf:4e:71:4e:
2a:24:bb:e3:46:bd:f9:9e:15:96:dc:f6:f7:76:26:
66:0e:77:4c:aa:37:0e:ca:03:72:ed:e7:31:c9:b9:
e3:5f:e9:5d:e3:1e:a3:16:ee:c5:1d:e9:a8:dc:c1:
7b:3a:60:b3:d2:4f:d0:4c:58:58:95:6a:5b:cd:fd:
51:56:3f:74:0a:45:31:2d:b2:8b:cd:af:e7:62:7a:
38:45:45:b1:a8:74:b7:b9:0f:57:1d:80:c9:24:98:
5e:1b:6f:eb:09:98:e7:a3:fa:16:b7:7d:2d:ca:b6:
a0:af:31:55:79:3b:a1:dc:28:73:69:ef:1c:64:77:
f2:28:54:db:9d:45:1c:a9:0a:57:cf:a1:10:84:47:
6e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5A:7F:1A:46:23:60:B7:1A:B6:71:B0:8D:97:8B:08:30:5E:5D:04
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144771.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a849::/32
Signature Algorithm: sha256WithRSAEncryption
1c:27:c9:33:ff:2a:4c:7f:22:1e:1d:be:14:c6:d4:b1:14:43:
b6:27:fb:db:2b:94:9f:65:e2:1d:32:03:c2:cd:f6:a9:0d:c1:
c5:3d:cd:46:f9:98:71:30:8a:80:14:f1:ff:de:19:88:98:0c:
1b:86:64:ac:10:ba:1a:69:d1:01:19:e2:cb:aa:5b:cd:aa:c6:
0b:55:e0:19:6b:b1:be:f3:38:34:37:99:ac:0e:52:e7:54:0e:
99:86:e4:ab:91:d8:a4:3a:d2:06:02:e5:1e:3e:63:7f:a7:98:
02:b9:df:4f:0b:64:c4:db:a5:3e:11:d4:61:52:d7:ec:43:a6:
ea:b5:9e:04:8c:b6:48:c3:68:9c:af:a5:e8:5b:13:4c:bf:bb:
d2:cd:f3:07:52:45:57:3e:b8:cf:c0:d7:e2:a1:35:d6:18:bb:
b8:ab:cb:4c:ff:3f:05:8e:fe:48:c8:68:a5:82:e9:90:19:8a:
cb:f4:af:1d:43:f9:40:bb:81:d3:fb:18:b6:84:8a:e7:cc:d8:
a1:77:ef:2f:96:0b:df:da:d5:38:11:de:bf:85:7e:64:40:98:
84:ef:1c:13:a5:d5:09:75:04:72:09:36:94:a2:d2:13:fd:55:
55:ac:ea:e1:03:6e:60:26:af:c4:e3:49:8f:cb:6f:8e:e0:43:
eb:eb:58:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:40 2026 by rpki-client