Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144798.roa
File: AS144798.roa (raw, json)
Hash identifier: vxgytFMo4LYMptCj6952CtfX3pnPASCERNITCEFf+1U=
Subject key identifier: 96:00:C5:52:84:6B:5E:86:C1:52:27:74:CE:A5:A1:29:E7:BA:86:8C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 71C4D50E7DE4AB04FA091EBC46AC982590302034
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144798.roa
Signing time: Fri 22 May 2026 06:05:23 +0000
ROA not before: Fri 22 May 2026 06:00:23 +0000
ROA not after: Fri 21 May 2027 06:05:23 +0000
asID: 144798
IP address blocks: 240a:a864::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:c4:d5:0e:7d:e4:ab:04:fa:09:1e:bc:46:ac:98:25:90:30:20:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:23 2026 GMT
Not After : May 21 06:05:23 2027 GMT
Subject: CN=9600C552846B5E86C1522774CEA5A129E7BA868C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9b:ce:39:24:29:07:d5:04:1b:c9:4e:c1:50:
4b:10:0a:00:7f:bd:4c:25:57:48:83:14:bd:ab:ee:
dc:ee:56:92:01:b6:11:1b:9a:7e:62:0d:d5:e3:1d:
d2:58:7e:3f:c5:82:3b:ea:60:23:ea:23:f9:53:e7:
2e:ea:f0:da:86:e5:b1:c8:09:10:79:24:b5:a4:dd:
44:a8:f0:fd:c0:50:a1:6c:f1:ae:5d:3f:ac:3a:d3:
40:0b:e8:f1:a8:b2:39:3f:0a:0b:e4:25:91:73:5b:
4d:f9:97:99:d7:0e:a4:9e:88:06:02:3a:ed:6e:ce:
72:72:79:60:c9:e6:43:1b:60:2b:e9:60:9c:d9:c5:
1e:ca:94:f0:10:e5:74:20:05:3a:c0:60:d3:8c:af:
d9:e5:a0:93:2c:f8:d8:ab:d9:cd:bb:7f:35:a6:6e:
72:92:c1:18:f5:15:86:96:ff:a7:1c:14:9d:64:6c:
1b:a6:dd:49:af:3f:01:52:4a:d0:b2:62:2b:dd:cf:
52:22:d1:fe:a4:90:19:d7:04:67:0a:70:24:48:94:
fa:18:aa:e2:6d:5f:70:13:29:c7:e6:dd:2f:73:fb:
75:fe:60:c3:13:2c:b6:96:b9:57:d0:f9:86:70:99:
d4:7b:76:a6:06:8f:47:9b:27:7b:83:43:a2:87:6b:
a9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:00:C5:52:84:6B:5E:86:C1:52:27:74:CE:A5:A1:29:E7:BA:86:8C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144798.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a864::/32
Signature Algorithm: sha256WithRSAEncryption
a8:14:f3:9a:d1:29:4f:06:43:b1:38:cd:7f:80:cf:85:49:36:
97:d9:1a:8c:24:2c:9e:24:f6:54:95:52:fb:dd:2b:7e:74:d0:
f0:36:ff:f0:4c:26:51:94:12:8b:f5:bb:e2:0e:ae:48:64:9c:
74:81:96:9f:e2:3c:d9:44:e4:31:60:45:44:93:ed:42:a6:35:
76:95:fa:81:4d:8b:ad:5b:f6:ae:3a:e9:83:47:cf:c3:f2:5c:
b3:4c:c1:9f:a6:45:6f:bb:4c:79:df:5c:78:2b:ba:63:04:42:
19:f0:9e:96:cc:07:70:5c:ca:a0:c2:38:46:22:29:10:9a:12:
f8:8b:b9:e9:90:23:f2:59:3b:06:ef:79:d3:ac:ba:71:4f:99:
38:20:ad:4d:c0:fa:f2:36:3c:64:a2:17:87:0f:fc:74:3c:ea:
93:3b:8f:18:5d:82:0e:08:5c:78:78:01:d4:cc:f8:fd:ba:a1:
a9:95:e9:5a:71:6e:db:7c:32:9e:c9:f8:25:14:85:f6:e1:8e:
ef:f9:a6:67:e7:96:11:97:41:c8:a8:fc:34:e3:fb:58:03:27:
02:e1:eb:13:48:73:06:52:35:e9:88:c9:57:e7:16:a2:ee:8e:
0e:e3:58:cf:87:8a:a1:6c:f5:6e:46:68:8d:12:9a:0d:42:75:
60:7e:0c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:59 2026 by rpki-client