Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144776.roa
File: AS144776.roa (raw, json)
Hash identifier: 5eMhYOb/H13zSzx1BLYQcHMC90AjlBYpHw/KaFmobc4=
Subject key identifier: 37:12:98:EA:74:98:E2:2C:BF:DD:99:FB:57:F8:AC:89:67:14:48:17
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 11C361855EF3572A390980A3A957651B8DBCD955
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144776.roa
Signing time: Fri 22 May 2026 07:25:02 +0000
ROA not before: Fri 22 May 2026 07:20:02 +0000
ROA not after: Fri 21 May 2027 07:25:02 +0000
asID: 144776
IP address blocks: 240a:a84e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:c3:61:85:5e:f3:57:2a:39:09:80:a3:a9:57:65:1b:8d:bc:d9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:20:02 2026 GMT
Not After : May 21 07:25:02 2027 GMT
Subject: CN=371298EA7498E22CBFDD99FB57F8AC8967144817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:f3:40:6e:89:f7:f8:37:9e:cf:c7:d2:80:
10:9a:58:b1:d7:a5:1c:c7:49:df:c0:13:f2:32:d7:
8c:65:4e:1e:a6:ba:89:39:d2:74:3f:c9:9c:da:17:
26:d2:0a:bf:7a:54:50:9a:11:ff:38:bd:8f:2f:2e:
07:a0:ce:e5:4c:b7:be:06:8b:6a:80:13:dd:11:b4:
c8:80:a3:cf:29:16:9c:bd:f3:64:8a:6d:8e:f5:aa:
c3:83:e0:29:7a:3b:5f:65:1f:6e:9f:b8:39:77:e9:
5f:33:23:b6:c8:62:81:97:3d:f3:ae:03:b3:46:14:
08:e9:66:13:a0:e8:79:3d:97:79:14:d6:72:9e:f0:
30:aa:d6:22:69:83:42:b2:8f:62:07:e4:0d:86:82:
58:28:01:8b:98:90:dd:6a:5c:53:a3:74:13:c9:bc:
4f:c7:f1:2e:92:71:1b:09:13:31:4e:ad:84:c8:6e:
37:2b:48:dc:c5:43:28:9a:01:59:3e:d1:b9:7a:e5:
bd:ef:09:1c:73:a6:12:27:a3:27:ba:36:52:db:3a:
fd:13:39:0f:a3:ff:ce:85:6c:28:23:f9:ad:c9:1e:
97:4a:e1:32:a3:ac:0e:53:c5:33:06:4d:82:e6:51:
01:36:20:b9:97:08:c4:67:44:bc:f0:b8:7f:2a:6e:
58:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:12:98:EA:74:98:E2:2C:BF:DD:99:FB:57:F8:AC:89:67:14:48:17
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a84e::/32
Signature Algorithm: sha256WithRSAEncryption
65:3c:c9:2b:e9:94:7e:f2:8e:77:2b:9f:29:98:16:b8:35:e3:
67:95:2c:ed:17:4d:c7:e4:23:6c:67:49:ee:06:64:00:36:e1:
2e:1b:68:ff:91:31:0c:d6:ac:3e:8c:14:73:9e:7b:77:71:9d:
f0:20:88:8e:4e:a3:fe:85:5c:ae:de:3b:13:b1:7c:81:22:cf:
dd:1b:13:b3:82:b6:21:ad:9c:e2:99:d9:a4:b0:7c:1b:b3:14:
6f:68:d6:e9:7d:e0:69:a8:a2:53:fe:aa:fa:62:58:47:32:50:
ae:c2:0f:7d:bb:b0:ff:95:a6:4d:63:84:39:7c:8c:56:f7:47:
bd:a1:80:93:d2:8d:45:d7:17:06:05:55:1c:5c:80:89:01:a7:
73:c0:8f:51:21:a9:52:17:68:f2:23:8d:f7:28:b9:93:6b:32:
dd:6c:db:67:0f:1e:ea:59:72:06:a7:2c:04:0c:97:18:fb:5a:
b3:a9:44:3d:37:b4:ed:52:c9:a4:ab:5a:f9:6c:67:c5:e0:49:
ea:39:a1:b6:f6:0f:3c:fa:0d:e9:9b:af:31:4f:89:86:42:6f:
3a:36:3f:ac:aa:56:21:8e:23:0e:7b:d3:6d:f9:79:ce:ec:c9:
af:95:d1:96:00:b1:e2:97:21:eb:52:4e:b9:60:d8:b8:31:5d:
52:20:76:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:39 2026 by rpki-client