Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144780.roa
File: AS144780.roa (raw, json)
Hash identifier: DVN/jdZsrODkB62P224fm1lJFXptfzoqdWGYzf/kwPs=
Subject key identifier: F4:C2:B9:CC:BC:2D:02:98:B3:FC:69:99:01:E3:9E:FD:0E:FF:C6:94
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 47826B239E854B5824412BCA5223D33B8F04465C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144780.roa
Signing time: Mon 25 May 2026 01:20:07 +0000
ROA not before: Mon 25 May 2026 01:15:07 +0000
ROA not after: Mon 24 May 2027 01:20:07 +0000
asID: 144780
IP address blocks: 240a:a852::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:82:6b:23:9e:85:4b:58:24:41:2b:ca:52:23:d3:3b:8f:04:46:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:07 2026 GMT
Not After : May 24 01:20:07 2027 GMT
Subject: CN=F4C2B9CCBC2D0298B3FC699901E39EFD0EFFC694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:46:bf:0a:bf:ab:a5:cb:25:a9:b1:8b:c9:b9:
72:73:9a:b5:d1:4f:a4:77:67:8d:3e:9d:81:58:76:
6e:61:73:43:8b:da:45:f5:8e:94:45:3d:18:ca:0a:
a7:4f:53:3f:b9:fd:54:bb:54:d5:2f:22:1e:98:82:
89:e7:ae:4f:7f:60:cf:d5:e6:74:34:93:af:6f:77:
41:4c:de:78:6b:21:f4:81:79:4f:97:25:8d:89:d0:
25:e3:64:4a:2e:3a:3d:10:fe:43:11:ef:b5:6a:b8:
9d:f3:b6:89:ec:89:d7:18:cb:f5:5e:9e:96:23:7b:
5a:b2:f0:b9:1c:d4:89:dd:31:82:f2:e2:41:41:1e:
3a:b1:e3:f3:ce:3e:cf:21:06:da:f5:79:06:ef:53:
92:5d:a5:4e:01:d8:04:a8:0c:c0:e8:03:49:8d:6f:
bb:5a:56:14:5e:2e:df:73:ab:f3:17:28:35:62:cc:
35:6b:96:49:52:1d:16:ee:ae:c1:d9:9a:29:1b:96:
ff:4a:f1:2f:ec:df:6a:9d:33:ee:73:d9:aa:70:fa:
6f:cb:e5:23:8d:bb:4d:ee:86:c6:51:58:d1:64:c5:
e2:a7:ba:08:be:81:82:11:9b:85:a1:40:59:8a:28:
d8:cb:7f:60:6f:b5:da:ba:cb:2f:14:aa:79:5c:65:
f8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C2:B9:CC:BC:2D:02:98:B3:FC:69:99:01:E3:9E:FD:0E:FF:C6:94
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144780.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a852::/32
Signature Algorithm: sha256WithRSAEncryption
2a:17:68:4e:4a:6d:9f:3a:80:d7:84:f8:a2:07:7f:db:f8:39:
75:13:af:1c:ce:5c:87:4e:b7:4f:c9:3e:d0:38:f7:09:ee:8d:
06:ed:2e:1e:43:bd:52:ea:28:0d:30:a0:60:35:1f:50:73:34:
47:ce:fe:6f:91:e4:d9:81:73:26:53:f0:72:15:3d:0b:0c:1e:
67:50:0a:22:86:8a:82:83:1a:e6:90:2d:c3:21:8d:89:55:3a:
78:71:8c:93:09:59:34:db:71:1c:4d:97:6d:bc:1b:fb:09:8f:
94:d2:c2:18:ae:81:15:d7:2b:55:14:45:81:18:3e:20:c4:fe:
5f:62:a1:59:f9:bc:7b:56:36:a3:92:0d:2a:0f:0a:92:7b:5c:
21:18:8e:27:bf:cd:1d:ee:a7:8e:55:c6:bf:3b:ea:7c:98:4e:
52:79:fb:e6:01:da:a2:e7:23:c8:02:10:b7:0d:5f:c3:47:0b:
0b:5e:0d:a2:ce:40:c2:a6:bc:08:48:e6:73:d3:9a:c6:d9:5e:
4e:81:ab:a5:17:9a:c3:29:cb:f0:6a:42:64:dc:65:6f:62:37:
98:4f:4b:b1:58:63:9d:56:e4:9b:25:ec:55:9d:d1:a1:61:65:
c0:fb:cc:4d:83:10:4e:98:38:88:28:7c:ec:d7:5a:75:d9:ed:
ac:56:da:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:46 2026 by rpki-client