Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144807.roa
File: AS144807.roa (raw, json)
Hash identifier: MnSCnelDcsBvlI8gcIGix5+8/J1uCZupkCj/Rxidk10=
Subject key identifier: 35:DB:BD:0A:F2:10:1B:F0:65:C3:F8:B3:35:EE:CD:15:9B:57:29:BE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 137D1BEA2FB9DE4BD0F3B6A837D8CB6E97700693
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144807.roa
Signing time: Fri 22 May 2026 02:47:35 +0000
ROA not before: Fri 22 May 2026 02:42:35 +0000
ROA not after: Fri 21 May 2027 02:47:35 +0000
asID: 144807
IP address blocks: 240a:a86d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:7d:1b:ea:2f:b9:de:4b:d0:f3:b6:a8:37:d8:cb:6e:97:70:06:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:35 2026 GMT
Not After : May 21 02:47:35 2027 GMT
Subject: CN=35DBBD0AF2101BF065C3F8B335EECD159B5729BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ba:ab:0c:19:6b:8c:ea:91:8e:b7:b9:af:f1:
d3:2b:23:59:2a:91:68:67:54:2a:e6:f0:4c:db:ef:
b6:be:ed:6e:10:dc:52:71:19:03:76:be:d8:8f:f5:
aa:94:7b:7e:1e:67:46:f0:a6:0b:ec:97:4f:88:fb:
f1:0b:3c:86:85:2d:64:cc:a2:d8:1a:ab:44:8d:ec:
49:2f:f7:ab:94:fe:ae:0f:a5:82:f2:01:10:21:99:
08:51:6b:b4:b1:4b:6b:23:1c:65:ce:b8:ed:4a:12:
e1:0d:ca:1c:56:15:a0:8a:a4:ae:0e:1d:27:12:63:
9c:c5:af:be:7a:2f:88:17:34:89:1e:fe:d8:03:a0:
09:14:90:55:23:8c:b1:71:d3:33:00:47:d6:78:3b:
2d:ca:34:3e:e2:f6:8c:f3:09:60:36:0c:39:b8:c3:
99:aa:1d:d1:85:37:c6:4c:b5:fc:bb:6a:df:08:5c:
9c:14:29:68:e2:b4:4c:45:21:af:7b:a2:28:86:22:
33:1d:86:dd:db:bd:35:da:cd:f1:e2:15:dc:de:0a:
48:51:8e:35:6c:0b:ae:24:aa:af:88:00:57:a7:44:
b1:51:66:b2:77:cd:54:a1:51:61:df:9f:61:e4:96:
83:cd:ea:3c:f8:9b:45:7c:a1:f8:92:13:22:e6:d1:
c0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DB:BD:0A:F2:10:1B:F0:65:C3:F8:B3:35:EE:CD:15:9B:57:29:BE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144807.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a86d::/32
Signature Algorithm: sha256WithRSAEncryption
26:4e:46:d6:ae:92:88:3e:f4:a9:8f:72:ed:f4:42:c5:de:5c:
7a:7d:ed:f3:88:29:24:29:29:95:17:1d:f2:03:4d:d1:32:44:
b6:f0:b8:69:8c:db:6f:64:6a:18:9c:62:43:f1:32:e4:b0:f3:
55:7a:a8:89:32:71:2b:05:17:29:f9:a3:d0:21:0b:52:74:cd:
c3:e7:d3:22:24:fe:9b:30:02:4e:10:52:94:0d:77:ca:e4:f5:
69:12:1f:7a:ab:bb:e4:03:5e:3c:1f:8a:cc:56:a1:77:54:ac:
b7:9a:0b:61:17:07:4a:e0:e8:9a:6e:44:dc:22:c3:fd:bc:71:
17:fc:5a:ca:ab:87:3a:17:32:08:b5:b6:d6:48:64:59:2d:6e:
8e:c4:af:1f:7d:e9:76:87:c2:d4:e7:d3:8f:0b:37:27:4c:02:
30:f8:90:28:d2:c9:94:3c:c4:ee:9c:e7:d2:74:76:e5:a9:97:
90:14:bc:31:fe:47:b9:d0:01:7d:de:6a:d3:29:c5:81:4c:53:
02:01:d2:16:f2:14:ec:2a:d9:3a:e5:7f:7e:ab:12:79:78:c0:
3c:03:ab:57:16:73:75:24:12:6c:39:7f:a3:81:c1:41:22:6a:
1e:43:c7:44:53:79:f5:4f:f2:4e:ac:1e:a7:0b:7d:bb:70:f1:
be:db:39:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:58 2026 by rpki-client