Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144790.roa
File: AS144790.roa (raw, json)
Hash identifier: da9Udp+NfMn9tpByrs8AM2tWTmaVk+imwLUgXAqXKY0=
Subject key identifier: A1:F4:18:B2:0F:22:E1:23:4F:D6:E2:5B:9C:47:9A:4C:69:04:61:A7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 474456EF97F63CED1A1E2BA45BCC078C6889C27D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144790.roa
Signing time: Fri 22 May 2026 07:32:01 +0000
ROA not before: Fri 22 May 2026 07:27:01 +0000
ROA not after: Fri 21 May 2027 07:32:01 +0000
asID: 144790
IP address blocks: 240a:a85c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:44:56:ef:97:f6:3c:ed:1a:1e:2b:a4:5b:cc:07:8c:68:89:c2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:01 2026 GMT
Not After : May 21 07:32:01 2027 GMT
Subject: CN=A1F418B20F22E1234FD6E25B9C479A4C690461A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:22:7a:f3:5d:c8:c4:04:02:3a:d6:48:8a:
38:86:54:42:df:25:02:eb:f6:bd:fe:5a:04:93:e2:
2d:57:29:1e:cf:96:da:76:80:50:95:4a:36:23:01:
51:3d:4e:3d:4c:25:97:ea:29:ac:19:6d:7b:9a:09:
b0:45:55:17:ba:a6:37:09:12:2e:58:06:c7:1e:76:
8d:f2:2f:31:bf:23:9c:8b:dd:29:ed:18:a7:2e:21:
59:df:4b:db:4e:64:a4:c9:f1:0d:f8:a5:4a:f5:da:
09:9a:bf:a1:6a:9e:78:67:40:71:4b:ad:00:18:2f:
e0:67:55:82:0c:3e:10:e0:6c:1c:59:c3:41:a8:b2:
d6:b2:09:2e:b6:03:3e:51:61:9b:94:73:f2:96:1e:
3c:83:0e:72:0d:44:7f:a2:96:b3:ae:6b:4b:67:4f:
23:70:7c:6b:60:1d:77:cf:30:02:4f:b0:95:ca:32:
c6:e1:ce:c1:e1:51:c5:ec:9e:f1:ec:7b:3b:6b:85:
48:ee:d8:55:d7:63:d3:64:74:41:a5:63:33:49:f8:
f5:14:42:bd:67:2e:2b:35:db:ca:c3:57:fd:69:c2:
e2:09:71:d5:84:2c:5a:61:d8:4a:d5:56:16:41:57:
51:3c:4c:94:a4:23:1c:b2:8d:35:ca:48:17:9e:a5:
51:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F4:18:B2:0F:22:E1:23:4F:D6:E2:5B:9C:47:9A:4C:69:04:61:A7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144790.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a85c::/32
Signature Algorithm: sha256WithRSAEncryption
92:61:13:4d:1f:be:43:36:6a:22:34:be:52:ef:2e:76:8c:17:
3c:21:bc:d9:89:0f:0b:59:bc:02:10:73:44:50:02:2b:6b:54:
0c:b5:cf:2a:04:ac:01:6b:b2:44:45:15:8a:34:82:46:1e:14:
67:44:a3:94:25:eb:89:a8:0f:10:98:d0:53:6c:ab:6c:67:6c:
36:6c:d1:3d:3e:c8:09:e4:1f:21:59:db:88:c0:f5:55:cc:31:
b9:f4:a2:80:eb:f5:bd:70:9b:69:64:3d:a3:38:09:2d:68:22:
e7:96:0d:3d:8e:1b:23:5e:ee:f6:66:5f:1b:83:4d:ee:cb:8b:
08:e7:5f:2c:29:95:61:de:c5:cc:5b:a2:8d:c7:72:e1:a7:2e:
17:16:9d:4e:8f:d0:af:b7:e6:d9:68:a2:52:bc:2f:76:b8:01:
80:7f:39:9f:31:7c:e8:9e:40:a8:e3:b7:28:43:80:a2:db:cb:
96:08:af:93:39:17:ae:52:a3:34:b1:4d:fb:1c:ec:0f:17:11:
1b:3f:dd:e2:c4:16:96:3f:af:44:7c:8e:47:9a:30:b8:8d:ad:
ce:0e:05:a4:eb:8f:30:da:a3:19:1b:e4:7f:84:15:bc:5c:b8:
c7:53:96:a9:8d:b7:60:48:c3:6b:4b:85:75:b9:61:65:2a:d3:
9d:b9:96:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:47 2026 by rpki-client