Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144830.roa
File: AS144830.roa (raw, json)
Hash identifier: MkFRubKdOK3Npoo23ZdowKJ4Jg8H9EXs3sWZEKOkmAM=
Subject key identifier: BF:E5:9A:D4:AC:39:A1:51:E6:B9:57:9F:58:5B:06:C9:08:86:FB:74
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 53A64BC3D46623D85334A5254880D7740D55CF68
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144830.roa
Signing time: Fri 22 May 2026 02:48:10 +0000
ROA not before: Fri 22 May 2026 02:43:10 +0000
ROA not after: Fri 21 May 2027 02:48:10 +0000
asID: 144830
IP address blocks: 240a:a884::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a6:4b:c3:d4:66:23:d8:53:34:a5:25:48:80:d7:74:0d:55:cf:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:43:10 2026 GMT
Not After : May 21 02:48:10 2027 GMT
Subject: CN=BFE59AD4AC39A151E6B9579F585B06C90886FB74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e7:a3:8a:ee:cc:94:33:56:4e:20:4b:8f:93:
f1:27:6e:63:14:1a:2e:c5:87:e3:1c:8c:e8:16:58:
55:d7:35:7c:50:39:07:04:a9:96:37:61:7c:d5:b3:
3e:3a:e6:21:54:68:77:c0:7a:cf:8a:a3:48:a1:e0:
75:a8:31:d1:a8:da:9a:fa:ab:a7:fa:a8:e1:c0:7c:
2b:2a:92:7b:37:99:c0:36:89:3c:22:d4:40:ed:e5:
c6:1a:a1:e1:d1:6e:ba:d1:3c:0d:d6:20:31:3f:8f:
0c:ca:ce:4a:5f:67:25:f4:3e:ea:28:07:48:bb:c3:
55:79:8b:8a:5a:c6:a9:50:ac:11:cd:8e:c0:f6:a7:
c0:07:a4:62:54:d4:85:ce:a7:6e:c4:2a:36:92:c8:
13:13:91:8e:f2:93:37:1b:a0:53:74:29:07:e9:cd:
4c:30:7a:a8:1c:85:62:02:be:00:13:ea:b9:48:b7:
3d:5a:b2:5d:e7:04:f9:a3:b7:c5:23:c1:9a:cf:16:
da:e5:f8:97:e6:30:99:b9:b6:10:7d:19:fa:19:57:
43:9f:94:15:17:4c:e8:80:8f:2e:a2:17:21:74:8a:
0b:be:6d:b7:1e:2c:5d:5f:a6:18:41:c7:27:f2:6a:
fd:88:7f:a1:eb:03:68:f2:e4:6d:ea:a3:e9:d6:fd:
27:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E5:9A:D4:AC:39:A1:51:E6:B9:57:9F:58:5B:06:C9:08:86:FB:74
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a884::/32
Signature Algorithm: sha256WithRSAEncryption
25:da:43:6d:1a:29:97:e0:54:a9:d1:4a:56:6e:2b:ec:56:05:
da:13:68:52:8a:12:43:37:b8:a5:18:d4:ec:dd:4f:81:be:7b:
48:45:f7:f9:c4:67:6a:0c:11:81:aa:d7:9a:26:51:38:20:27:
a3:8a:55:00:02:e0:03:bc:19:5d:de:26:ed:2d:e2:cf:df:ff:
52:4f:d1:1e:21:a5:97:63:e8:0c:ca:ec:ce:1a:dc:61:42:dd:
e8:db:d8:b5:09:3c:6f:00:b6:74:96:e8:52:6d:94:05:9c:7f:
ab:e1:86:ec:58:6c:27:45:bb:44:9e:f4:73:f6:fb:f9:1e:28:
cc:39:52:31:07:cf:81:ea:c1:85:2a:16:a3:24:86:3a:64:27:
ac:8e:7c:c0:96:5f:2c:4f:a6:88:c3:7c:12:ff:94:d2:53:fa:
82:f7:75:e6:3a:26:8a:20:8e:f8:12:e5:9f:48:38:5c:70:b8:
43:53:6b:f4:c9:ad:31:6a:08:31:1e:18:91:8a:7d:0c:41:0a:
67:e2:77:09:6c:e9:0e:4d:2d:8b:15:03:8d:a8:fc:6a:d6:c2:
65:f6:aa:bc:69:2d:3e:0a:4a:cc:86:cf:c6:f2:89:5d:59:70:
7b:59:18:c3:3f:34:32:dd:bf:59:4c:c5:5a:43:63:9b:54:b7:
a2:9f:d6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:01 2026 by rpki-client