Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144797.roa
File: AS144797.roa (raw, json)
Hash identifier: Gtcaa4rGbog5tOXH/yGrPL8sKTGOfrV/Vtswm/551fI=
Subject key identifier: D9:B8:F0:11:65:4C:51:0D:5F:10:B8:9E:A6:A4:0A:30:7E:FD:27:1A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0A2A9FDFCD38351597F4E74A279A0EF99201C776
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144797.roa
Signing time: Fri 22 May 2026 06:58:12 +0000
ROA not before: Fri 22 May 2026 06:53:12 +0000
ROA not after: Fri 21 May 2027 06:58:12 +0000
asID: 144797
IP address blocks: 240a:a863::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:2a:9f:df:cd:38:35:15:97:f4:e7:4a:27:9a:0e:f9:92:01:c7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:12 2026 GMT
Not After : May 21 06:58:12 2027 GMT
Subject: CN=D9B8F011654C510D5F10B89EA6A40A307EFD271A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:22:fd:9d:de:36:25:7b:a8:f2:98:e5:bb:ef:
79:77:ba:7e:42:88:9a:bb:26:e7:df:f0:b2:db:84:
c8:0b:39:3b:60:79:28:d1:2f:d7:79:3e:24:32:5d:
7a:9f:0c:9d:f0:d4:48:a7:9c:61:30:c1:2f:88:5c:
51:ee:d0:7e:e4:8f:85:cb:ae:93:50:35:77:44:e5:
9d:21:63:b5:0e:fd:4e:f5:64:30:f4:5b:11:54:1c:
0e:12:40:de:f6:a6:c5:30:eb:e3:87:1b:63:83:72:
2b:6e:c7:f9:d2:6e:51:36:d3:dd:98:07:99:4a:88:
50:05:06:58:18:41:d1:e8:8c:b5:31:ac:05:f6:92:
3a:75:46:f3:5c:a9:04:97:40:29:6a:87:71:10:87:
47:fa:0a:80:e5:1e:8c:b1:7b:61:ed:4c:50:e8:a3:
16:99:d7:f0:af:3f:3c:8c:ce:19:25:02:a3:b4:b1:
7d:37:e2:82:e2:84:33:f4:9a:c9:a2:68:10:2e:80:
ce:1b:a3:76:e2:8d:7c:18:ff:1c:70:bd:2a:78:43:
e2:09:88:f1:0b:78:e1:a7:20:6a:5f:fa:31:d6:ba:
8a:06:8d:a2:85:15:e1:20:68:f8:26:a9:09:8f:3a:
0d:f7:77:42:d4:05:fa:d2:4a:95:21:7a:cf:ab:45:
2f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B8:F0:11:65:4C:51:0D:5F:10:B8:9E:A6:A4:0A:30:7E:FD:27:1A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144797.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a863::/32
Signature Algorithm: sha256WithRSAEncryption
78:8d:4b:e5:05:f6:8c:1e:e7:00:de:e6:d5:0c:72:6c:b8:00:
20:c1:1b:39:aa:ba:ce:04:2f:00:93:c0:c3:29:8d:75:d5:60:
d4:cc:56:46:c1:39:da:b3:bc:11:f6:ec:3e:e0:66:26:ea:d4:
41:92:a3:25:15:ec:41:ce:0d:16:a3:93:51:16:35:99:30:db:
77:88:df:57:c3:0b:85:87:99:61:2c:b7:ae:42:a5:8c:ef:a1:
6b:d3:f6:12:96:3e:ed:47:4e:d0:dd:fe:ef:79:be:ee:a3:6a:
18:b4:c0:15:ad:c5:76:48:6c:c5:ad:d2:63:38:bc:eb:08:8a:
f8:9f:c2:69:5c:37:71:a8:23:69:c3:d8:78:31:c0:db:73:ff:
39:fd:79:ed:bb:54:96:5b:16:22:98:99:c3:33:32:47:79:83:
ab:bf:e1:87:a2:0f:96:7b:d5:83:b9:8e:1f:e9:ec:b6:87:06:
b5:c3:f2:90:05:dd:34:11:84:ea:ae:65:21:ca:c8:91:e0:91:
ab:3f:9b:dc:28:a1:7a:95:22:d6:d6:d9:6c:98:52:df:13:43:
a5:e8:f4:62:ad:e4:79:28:a7:d0:01:ab:ec:89:74:c3:2b:ea:
c1:94:e2:fa:c3:16:1e:50:9b:8e:28:7c:f9:0a:bb:1b:31:82:
5b:fa:48:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:10 2026 by rpki-client