Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144818.roa
File: AS144818.roa (raw, json)
Hash identifier: wvpSxHhyEqiFvvq99z6orJbAHfwJxctwp7xXBj5r868=
Subject key identifier: 29:5B:7B:14:69:A2:ED:36:8E:D1:A5:E8:A0:EA:7C:94:A0:59:77:A1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 391884B0E93339AEB1F041AD16E8F30DB4EAF29A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144818.roa
Signing time: Mon 25 May 2026 01:38:00 +0000
ROA not before: Mon 25 May 2026 01:33:00 +0000
ROA not after: Mon 24 May 2027 01:38:00 +0000
asID: 144818
IP address blocks: 240a:a878::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:18:84:b0:e9:33:39:ae:b1:f0:41:ad:16:e8:f3:0d:b4:ea:f2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:00 2026 GMT
Not After : May 24 01:38:00 2027 GMT
Subject: CN=295B7B1469A2ED368ED1A5E8A0EA7C94A05977A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8e:59:9f:0a:8d:50:2d:5d:a2:fa:fc:70:4d:
fa:6d:a8:13:a3:a2:05:32:56:a8:5c:32:c9:35:8d:
6e:57:27:34:f2:0e:e9:34:cf:69:b6:e9:95:a9:44:
b3:d6:69:e6:ce:11:97:62:97:6a:ba:52:61:95:d5:
a5:1e:e9:96:ea:90:f7:95:d8:e1:f7:d3:e5:49:4e:
c6:49:08:bd:95:cb:37:f0:a4:8b:71:1d:fa:6b:62:
1c:43:32:11:1d:2a:d3:c9:c6:4a:bf:df:56:5e:dc:
bb:04:dd:6a:09:23:47:8a:7c:cc:3c:12:e7:9f:35:
66:52:b2:92:f6:d6:0a:9e:57:77:bd:76:c0:27:c0:
36:a5:84:97:52:e0:8f:46:71:d4:82:85:b3:84:1b:
a3:61:0d:95:ac:1c:29:91:28:d4:bd:e8:d6:c8:54:
c7:62:8d:87:a4:fe:a9:78:74:a7:78:69:7a:46:44:
eb:a9:29:58:7b:e0:57:a7:95:42:72:30:90:84:79:
39:26:0e:ef:71:0a:4f:76:de:5e:21:97:ea:e6:7d:
c8:28:76:31:22:b5:b5:31:ff:a4:45:44:c9:ea:6d:
52:f4:73:60:2c:72:84:b1:09:dd:8f:ee:ef:82:f9:
bf:ac:55:1c:87:18:38:bb:f9:2f:8b:6c:f7:0b:9f:
e4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5B:7B:14:69:A2:ED:36:8E:D1:A5:E8:A0:EA:7C:94:A0:59:77:A1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144818.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a878::/32
Signature Algorithm: sha256WithRSAEncryption
3d:d9:a0:21:e0:5e:40:b8:d1:6b:bd:59:00:0f:e0:5a:80:81:
c5:9b:68:f2:fd:81:66:c8:68:a6:fd:56:bf:10:b6:d7:69:14:
61:c5:58:9a:80:50:f7:0c:cd:ab:f6:bc:86:f1:9a:0a:c6:82:
a1:1a:3e:c6:59:5f:54:aa:b7:98:2f:0c:78:dc:fc:2f:96:c5:
5b:51:c8:11:ca:30:b8:93:e6:eb:a6:8e:5f:93:fc:ab:e1:05:
e4:a6:4f:50:6a:8b:d6:a0:68:9c:2e:0c:85:be:15:57:58:dd:
91:05:c1:f3:e5:3e:e4:d4:df:c7:81:5b:66:66:ca:02:7e:a9:
ba:64:60:ea:28:4a:6a:e7:9e:ef:c7:9c:89:d8:65:7e:5b:66:
02:54:05:1a:d2:c2:bd:47:39:d2:5f:80:70:21:3e:54:31:50:
21:12:c3:41:c6:4e:e5:80:1c:e4:9e:2a:49:3a:9d:12:21:20:
6a:7c:83:eb:07:16:d0:62:a6:58:92:b3:9d:9e:c6:e9:19:5f:
25:0f:6f:6d:9d:87:b3:18:db:01:59:04:36:21:8b:72:26:60:
73:15:d9:0b:56:ba:bb:d1:4f:17:2c:6f:3f:43:15:7e:33:96:
e5:bc:f5:5e:b6:80:f3:53:0b:f6:bf:cc:0a:34:44:b5:0b:92:
71:6f:b7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:07 2026 by rpki-client