Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144827.roa
File: AS144827.roa (raw, json)
Hash identifier: 1ddJ8OAV3/ns3FSqH/jLdaJ4a4ly6syPzMGnzfF2fl8=
Subject key identifier: F0:F6:A5:B7:67:1D:F5:F6:91:CD:EC:BE:70:44:4B:A3:52:CF:6F:E7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 463ABF6321FF76CD15DF33532727E6341F5AE66C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144827.roa
Signing time: Tue 26 May 2026 06:12:33 +0000
ROA not before: Tue 26 May 2026 06:07:33 +0000
ROA not after: Tue 25 May 2027 06:12:33 +0000
asID: 144827
IP address blocks: 240a:a881::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:3a:bf:63:21:ff:76:cd:15:df:33:53:27:27:e6:34:1f:5a:e6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:33 2026 GMT
Not After : May 25 06:12:33 2027 GMT
Subject: CN=F0F6A5B7671DF5F691CDECBE70444BA352CF6FE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:70:63:78:c6:a3:0c:4c:6d:56:4e:fe:2f:
17:76:90:d7:b7:c9:ef:8c:e0:21:07:62:d3:02:14:
da:af:97:16:71:33:6a:b2:1d:ea:2f:e5:d5:56:0c:
05:8d:8b:e8:13:bc:a5:ca:ee:b4:fc:38:df:07:96:
e5:35:6d:23:56:4f:34:7c:ec:86:af:0e:2f:43:cd:
c7:05:52:70:22:a8:2c:d7:07:4b:95:de:65:3d:1d:
9a:44:5c:24:b3:7f:59:42:e4:37:9f:5a:81:48:89:
c5:1b:e7:a9:96:9c:7f:99:e6:80:42:23:ab:1f:13:
d0:89:da:78:4d:9b:ad:e7:c7:73:b4:3c:90:27:cb:
24:85:fd:6c:84:8c:2e:fe:e9:6b:5f:49:72:b2:6a:
10:f8:03:1c:30:fc:05:ab:12:33:2b:ff:02:fd:84:
2f:ab:02:05:15:a2:eb:21:b1:da:67:d6:a2:6f:8c:
bc:61:73:9f:7f:ec:c1:94:b7:4f:50:73:34:d2:e6:
d0:2d:f8:4f:60:81:d2:95:a7:36:ad:1e:91:aa:b4:
f7:4f:89:3b:06:42:e7:21:5f:91:89:2a:50:e7:2b:
43:63:97:aa:9e:78:67:ce:8c:7e:50:19:a1:32:85:
20:50:96:d1:13:1f:52:e3:c8:91:e3:25:18:7d:de:
81:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F6:A5:B7:67:1D:F5:F6:91:CD:EC:BE:70:44:4B:A3:52:CF:6F:E7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144827.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a881::/32
Signature Algorithm: sha256WithRSAEncryption
31:84:35:88:04:0e:4a:8d:4b:b0:16:0c:95:99:4a:37:d6:9e:
7a:f7:0d:51:c2:b2:a0:99:80:2a:57:4e:f3:9d:3b:7d:27:5b:
94:da:fc:cb:68:47:87:a8:98:45:32:b2:6d:73:11:4c:c1:be:
29:78:65:02:a1:6f:a2:3c:94:6f:77:2c:22:b2:5e:fa:f2:41:
f1:29:53:39:08:1a:85:38:32:e2:20:c8:d1:74:76:f6:1e:f9:
1f:b8:89:ad:41:dd:21:08:55:54:1d:6a:ff:8f:a0:00:c9:40:
04:ed:cd:12:97:f7:62:6b:97:e5:18:8d:80:91:3d:67:12:92:
79:19:db:38:a3:10:52:0c:ae:ad:44:e4:b6:66:16:c1:93:b3:
fd:72:96:e9:e9:39:96:c1:58:a6:af:a4:36:8e:0a:52:6d:a7:
9d:5e:70:c1:51:b8:07:5d:ad:3e:2d:f4:ca:c3:57:bb:45:52:
82:3a:10:96:08:9d:1e:2d:70:12:24:21:35:44:0d:42:ba:55:
09:05:5b:43:11:c3:cc:1d:5d:57:fe:c1:83:56:1b:2b:48:63:
dd:62:24:94:d4:e9:0e:25:c5:1c:38:c3:60:1a:d6:01:03:36:
6f:29:47:05:f0:7c:98:9b:3f:29:f8:c7:ab:2f:05:1e:fd:61:
db:7a:68:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:02 2026 by rpki-client