Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144793.roa
File: AS144793.roa (raw, json)
Hash identifier: pDPkrb+i9ed+SCF2xSDrQjdFrI9GlRFfWnqAmkwoKMM=
Subject key identifier: 3A:44:8A:5D:57:AF:3D:BC:D0:6D:87:B8:65:6D:4F:5C:B4:7A:2D:D0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6AD92C5B7F3658BED3CE1920D9986F1FA06ED870
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144793.roa
Signing time: Fri 22 May 2026 06:58:53 +0000
ROA not before: Fri 22 May 2026 06:53:53 +0000
ROA not after: Fri 21 May 2027 06:58:53 +0000
asID: 144793
IP address blocks: 240a:a85f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:d9:2c:5b:7f:36:58:be:d3:ce:19:20:d9:98:6f:1f:a0:6e:d8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:53 2026 GMT
Not After : May 21 06:58:53 2027 GMT
Subject: CN=3A448A5D57AF3DBCD06D87B8656D4F5CB47A2DD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cd:dd:97:ff:c2:9b:57:8b:92:ef:19:ac:4c:
76:03:e8:cc:b5:58:45:d0:75:47:ec:93:f4:05:45:
76:a1:65:bd:ca:02:5d:ef:49:7f:1c:a0:01:b7:d2:
10:f7:a1:ac:d2:d8:e9:32:a2:b2:8d:65:86:4f:ed:
c6:5e:c6:34:af:c3:a2:81:b8:04:0f:ae:c7:4c:26:
59:f9:53:c8:c2:00:2e:79:1a:df:4b:80:7d:3b:56:
6e:46:17:26:97:e7:49:0d:3e:c9:13:a4:d5:91:24:
bf:97:2e:5b:51:50:00:eb:22:0c:be:7f:f0:2b:eb:
8c:d0:92:9d:fe:58:13:5e:c2:a1:d3:1b:0d:45:c6:
b2:8b:a7:dd:91:64:44:e0:2b:19:f1:3a:4f:e2:2f:
56:b0:21:54:a9:8f:ac:ab:28:f9:99:e8:90:b3:d3:
63:8d:65:c5:e2:a3:8d:bb:50:b9:89:03:78:7e:fc:
6e:c4:ad:53:28:72:aa:9c:3d:40:b0:29:fe:85:9e:
a7:92:ab:f6:87:6f:71:83:5c:66:f5:86:d3:41:af:
5c:5d:52:b0:59:a9:e4:60:c0:7a:d8:84:2f:45:d3:
b2:5e:8a:e0:cf:28:0d:13:ee:dd:e5:20:f7:d6:27:
cc:ea:c4:79:88:42:16:17:a1:3a:da:14:1a:49:bc:
00:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:44:8A:5D:57:AF:3D:BC:D0:6D:87:B8:65:6D:4F:5C:B4:7A:2D:D0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144793.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a85f::/32
Signature Algorithm: sha256WithRSAEncryption
9b:0c:c9:3f:04:cb:42:ed:1d:e1:2e:0e:25:41:c5:e2:88:78:
c4:e3:96:92:67:e2:a1:6c:b0:cf:f4:3e:0d:40:45:4d:4c:19:
d0:a4:8d:a6:5c:78:40:70:45:80:9b:40:a6:c0:2b:49:ca:bf:
d4:57:78:05:88:08:47:81:92:3a:6a:e1:2b:88:5b:69:97:46:
74:dd:cc:ca:e9:7d:e7:8c:14:06:f2:f5:49:8e:c1:af:79:d5:
9b:3e:ae:a6:8b:88:0e:14:63:03:47:90:dc:6e:5c:6b:7c:03:
4f:d1:63:e3:ed:79:ff:85:b1:ce:35:fa:0a:39:ed:2e:dd:3b:
a6:0d:59:f2:a1:f6:e8:7c:5a:5c:12:f9:2a:a9:87:dd:27:89:
14:ec:93:c2:03:cd:a3:a6:48:7b:6e:a7:0f:53:03:de:03:38:
5c:b1:11:d2:f4:9e:76:a2:ce:5e:76:06:21:f0:04:56:82:bc:
bf:96:cc:d7:a5:7b:d3:c7:b1:f7:15:f8:65:3b:7a:ed:d1:4f:
9c:d2:ea:54:45:6a:62:c0:c9:1f:b5:ac:12:f3:e4:42:b6:b9:
f9:18:25:8a:fb:7f:cc:da:45:4d:22:f6:8e:3f:2d:c3:3a:46:
5a:4d:d4:65:51:b1:f1:d7:5c:49:0d:7e:29:a3:d1:a4:36:5c:
1a:31:e0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:51 2026 by rpki-client