Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144786.roa
File: AS144786.roa (raw, json)
Hash identifier: NChA53xnYuYTvJVRHl0JsvJ5JovqTc0242qn7/GQz70=
Subject key identifier: D9:7F:D9:A2:2D:CE:2E:D7:FA:50:9B:C6:AE:81:94:A8:EC:38:FD:0F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6E784D24D05B10B83ECB51783AFFFFFD68DD0463
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144786.roa
Signing time: Mon 25 May 2026 01:20:18 +0000
ROA not before: Mon 25 May 2026 01:15:18 +0000
ROA not after: Mon 24 May 2027 01:20:18 +0000
asID: 144786
IP address blocks: 240a:a858::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:78:4d:24:d0:5b:10:b8:3e:cb:51:78:3a:ff:ff:fd:68:dd:04:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:18 2026 GMT
Not After : May 24 01:20:18 2027 GMT
Subject: CN=D97FD9A22DCE2ED7FA509BC6AE8194A8EC38FD0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:13:43:ca:c0:a1:ed:9a:b9:c1:88:d2:a1:40:
c4:e0:68:29:cf:6d:ee:6d:36:4b:43:34:c9:f7:60:
0b:f8:2a:98:85:13:2f:36:61:51:b4:e2:ee:1a:5d:
2e:2b:8d:18:21:d6:fe:18:37:a1:67:8c:86:a7:8b:
1b:e3:e4:d3:3c:99:3d:f9:69:65:55:9e:a6:07:0d:
aa:f2:bb:9a:0c:5b:27:58:33:d7:c8:c6:2e:02:c9:
ee:b9:81:80:cf:c4:e3:da:f5:dc:b2:d4:99:14:a3:
05:62:b7:ca:ad:63:d8:59:de:d8:3e:82:af:05:d5:
59:3a:80:e7:4f:a0:85:a3:c1:b5:f9:2d:a0:4b:fc:
b8:13:7d:2f:a0:3b:e9:6b:dd:94:b7:6d:f0:f4:2e:
80:80:70:84:3a:81:48:a8:75:bb:ec:71:2f:9a:c7:
9d:ff:0f:8e:7b:e0:56:ba:ff:5d:e7:f9:ad:70:9c:
ad:58:ca:f0:ea:59:78:91:f5:01:f9:f2:75:0d:de:
67:25:85:e3:1a:3e:7a:db:62:9b:4e:2d:71:4a:ae:
ce:8a:7e:b6:c1:22:18:d2:1f:41:4c:2e:a5:a4:ca:
22:33:50:e1:fb:eb:1e:f7:e9:cc:b5:00:fb:14:27:
dd:07:f2:3c:4f:4d:a4:41:63:9c:54:81:54:62:09:
cc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7F:D9:A2:2D:CE:2E:D7:FA:50:9B:C6:AE:81:94:A8:EC:38:FD:0F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144786.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a858::/32
Signature Algorithm: sha256WithRSAEncryption
9a:f9:f5:ba:f2:c2:bf:8d:af:fd:5a:eb:e2:27:b7:3c:dd:ee:
2d:f5:a8:6f:21:9d:0f:31:76:66:93:20:ea:77:d7:de:18:3b:
21:8b:4b:d2:66:ae:6d:66:d7:c5:0b:d1:64:ed:1c:0b:af:c5:
90:2f:9c:ab:f7:1b:80:dd:f5:c8:bc:30:64:53:40:cf:9f:d7:
6b:0e:4e:da:44:71:b3:76:f9:77:d3:81:e6:3c:e6:f2:4a:6e:
09:dd:7d:dc:a1:80:8b:45:72:62:e4:aa:b6:04:7c:a0:34:2c:
8d:cd:c2:a9:59:0a:08:2d:ad:18:a3:64:3f:53:e3:35:59:ea:
de:cd:01:ee:10:5c:c5:32:2b:cf:e6:84:45:76:da:8a:81:55:
ef:26:05:6b:7b:30:a6:17:82:00:e6:ba:68:6e:7c:6c:31:91:
72:11:e5:dd:4e:d6:6f:19:48:10:2b:98:15:91:05:8b:8c:6b:
3a:bf:a3:f7:53:87:1f:06:7a:79:fe:3a:a6:cb:f6:90:c7:bf:
9e:97:6e:ed:e2:78:af:4f:79:1e:11:6f:8c:a7:40:ea:b0:5d:
f8:f6:21:71:1f:ac:e3:07:87:c7:f7:93:e3:07:9a:f8:69:87:
9a:ee:4c:10:15:a3:01:bd:28:fa:7c:fb:35:f2:46:cb:68:22:
f5:10:3d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:51 2026 by rpki-client