Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144805.roa
File: AS144805.roa (raw, json)
Hash identifier: /XYNnzSeytkWzG0bLMeBP/tdXI1+gw27ZYMZALNBhhs=
Subject key identifier: 37:FD:6F:EB:87:9D:27:79:7C:07:E0:0D:98:AD:A7:48:BF:9D:22:1B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 17E7024B3F1D6A93BC22EA8CADBF0382845DF5FD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144805.roa
Signing time: Fri 22 May 2026 06:58:34 +0000
ROA not before: Fri 22 May 2026 06:53:34 +0000
ROA not after: Fri 21 May 2027 06:58:34 +0000
asID: 144805
IP address blocks: 240a:a86b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:e7:02:4b:3f:1d:6a:93:bc:22:ea:8c:ad:bf:03:82:84:5d:f5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:34 2026 GMT
Not After : May 21 06:58:34 2027 GMT
Subject: CN=37FD6FEB879D27797C07E00D98ADA748BF9D221B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:7e:dd:bf:c0:b7:0a:62:4c:b3:9c:7a:3a:
c2:2b:95:2b:fe:39:f8:75:eb:0d:ad:54:e8:11:bf:
d7:61:a4:03:f0:87:06:ff:73:b7:4b:f7:a9:8d:c8:
4a:f3:04:0f:6f:57:59:ac:df:ac:12:9c:61:ec:83:
37:22:19:10:00:d0:e8:fb:03:83:b8:37:5f:c0:98:
76:10:52:c9:25:35:07:8c:77:d3:93:85:c9:52:fe:
27:8a:21:cd:b3:fe:bb:98:14:35:a3:6e:ed:42:be:
9a:22:e4:1b:7f:cb:a5:f6:35:21:db:07:7a:35:c3:
0d:90:90:ed:0e:6a:0a:c4:3c:e8:74:ee:d6:73:46:
44:df:9a:3b:b9:a7:4a:e3:9c:5d:bc:40:1b:a8:2d:
ea:69:58:7e:82:be:04:14:7b:ca:7a:09:43:0a:a5:
c3:ed:04:be:43:bc:34:82:88:78:50:49:da:87:6b:
8e:b3:da:a9:8b:15:56:a7:c3:03:9c:bb:b2:74:fc:
d6:78:e9:5f:bc:d4:cc:10:d7:6c:1c:9a:31:32:8d:
45:a4:62:e2:0e:d0:da:7e:e3:f1:8c:8b:ee:43:4f:
e2:2f:ba:25:12:9a:43:c7:6f:f5:b3:b2:01:8d:34:
29:07:18:7c:9c:31:6b:2b:22:3c:31:5b:5e:fe:6b:
0e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FD:6F:EB:87:9D:27:79:7C:07:E0:0D:98:AD:A7:48:BF:9D:22:1B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144805.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a86b::/32
Signature Algorithm: sha256WithRSAEncryption
0d:a3:1e:ec:2d:86:15:7f:9f:14:34:82:6a:69:f3:a5:53:39:
82:2a:95:e9:50:b4:50:47:41:5a:fc:a9:65:8b:88:74:c3:d2:
7a:81:97:6a:68:62:9c:d6:bd:fb:e7:44:1d:60:7f:ed:e0:9a:
45:1d:3f:0c:f6:b9:e6:5a:94:98:70:99:03:a3:7e:f8:01:5f:
2f:eb:0d:34:c7:3e:7b:7a:99:80:be:a3:a0:3a:01:58:c6:16:
0b:50:9b:11:fc:32:f3:a9:52:13:33:a2:48:4d:78:73:c8:cf:
3e:1b:fb:70:2b:72:ce:25:d8:8c:0b:38:aa:48:9f:5d:3c:49:
47:20:a0:05:a1:c1:37:a1:ee:e4:f5:9f:cf:d6:64:04:39:10:
7d:10:ec:96:19:56:24:5e:94:75:7a:b4:8a:e7:e9:b3:ab:4e:
6f:01:12:5c:f6:81:d9:8f:96:b0:c2:8a:8a:6f:37:ef:5d:54:
e8:a2:ce:48:39:14:ba:95:dc:6a:25:8c:33:e7:9f:9f:b1:30:
c3:c9:c2:d8:4f:50:b3:bb:0a:c1:28:55:6f:ec:1a:c6:e8:88:
29:cb:f9:25:fc:9a:4b:df:e3:79:d0:70:8a:f2:ed:52:39:fb:
4a:f8:a9:64:68:42:23:72:3f:2e:d2:f3:ac:b8:e6:fe:43:2b:
4b:9d:f9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:17:34 2026 by rpki-client