Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144787.roa
File: AS144787.roa (raw, json)
Hash identifier: 7av8vPX8J6HiH1mpEBhIXCXskSBhXBBDgp9YfXwGsxs=
Subject key identifier: 47:BE:D4:6B:56:70:19:E5:6D:8F:9A:0A:BE:60:95:F2:92:6C:7C:2E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 02D00DCBDEAC7A8B6BF73A16ACD11C342629427C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144787.roa
Signing time: Tue 26 May 2026 02:34:58 +0000
ROA not before: Tue 26 May 2026 02:29:58 +0000
ROA not after: Tue 25 May 2027 02:34:58 +0000
asID: 144787
IP address blocks: 240a:a859::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:d0:0d:cb:de:ac:7a:8b:6b:f7:3a:16:ac:d1:1c:34:26:29:42:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:58 2026 GMT
Not After : May 25 02:34:58 2027 GMT
Subject: CN=47BED46B567019E56D8F9A0ABE6095F2926C7C2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e7:85:d5:cd:10:f8:74:05:3c:66:8e:2a:8f:
a8:63:3c:b5:84:73:bd:a9:d2:10:c2:88:24:6c:7b:
0b:48:18:16:e7:c1:ed:95:8c:f7:89:ea:8b:82:0a:
db:ef:a2:9a:8b:c9:5e:23:f7:e7:4b:f1:d6:9d:93:
7e:52:04:cc:a1:99:3e:b6:3b:39:a8:3b:22:18:9c:
e2:6e:16:d2:05:46:0a:7a:cf:44:29:d8:29:e3:2e:
b6:70:46:42:1f:e1:87:56:b5:b7:c4:49:17:bd:19:
f3:1b:ce:1a:4e:d7:e6:e1:f5:9d:28:6b:ab:24:d3:
80:2b:0e:fc:c2:12:51:dc:6d:a7:cd:02:33:2f:a3:
7a:06:5c:62:7f:c0:37:b8:e5:16:3b:71:d5:af:38:
71:ae:a8:46:74:4b:83:62:c2:f4:f7:de:24:05:e1:
40:20:3a:3b:c0:c2:ad:3a:0b:6b:59:8e:5d:c3:89:
9b:6f:de:f2:b5:92:36:13:0f:fe:b9:b1:d5:44:68:
26:56:05:82:99:7e:65:74:35:94:2d:c8:69:ac:40:
1b:45:ec:16:66:69:d1:44:3e:d5:d7:98:d2:bc:fd:
ba:fa:4c:d2:4f:60:4f:a0:9e:2f:59:a9:42:d5:2d:
f0:63:15:9a:d0:5e:9d:45:85:38:f0:e2:8b:51:d4:
30:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BE:D4:6B:56:70:19:E5:6D:8F:9A:0A:BE:60:95:F2:92:6C:7C:2E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144787.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a859::/32
Signature Algorithm: sha256WithRSAEncryption
7c:31:73:80:08:ed:29:57:7c:b0:ac:b2:90:19:80:55:a1:3b:
fa:16:cd:6e:51:5a:f2:d7:7d:16:b1:55:dd:4e:b6:3b:52:6a:
20:af:3b:00:b2:6c:09:16:e7:04:f0:51:b0:d1:ea:9e:75:37:
25:67:8e:13:80:b8:4d:a8:aa:d0:fc:5e:59:9b:8b:9c:cd:cf:
23:80:16:f7:1c:6c:42:7f:e9:20:7f:c4:4b:da:19:87:c3:43:
0f:42:39:7c:db:ce:88:fe:99:00:1e:e7:e9:1c:33:bc:3d:40:
72:d8:a9:1a:e8:4c:12:71:81:cd:0b:ae:41:ea:d1:86:02:10:
31:c7:87:cd:30:4f:fa:70:f0:12:b3:9d:fc:f0:9c:80:4d:30:
a9:05:fe:33:64:79:01:5d:b2:cd:17:b7:58:94:71:8b:d6:19:
2e:b9:5d:c7:be:95:f3:7d:45:f6:84:b2:9a:ee:06:12:47:ed:
ad:9b:c2:c0:fa:fa:45:de:5a:c0:15:e8:36:fc:70:5f:3f:fc:
d6:2b:03:96:ac:e4:c8:41:26:3a:2d:52:f4:e6:d1:87:49:fd:
db:75:54:eb:e1:c1:d3:6e:87:61:e2:0b:d5:1d:5c:b5:fd:a3:
33:57:3b:c7:04:bb:0e:a4:7c:33:5a:df:b7:fd:51:85:bf:57:
84:3c:8e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:41 2026 by rpki-client