Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144833.roa
File: AS144833.roa (raw, json)
Hash identifier: 9wx10wMAEKivgLaMvXIqCQyd6HoASDFLkjClselzIJ8=
Subject key identifier: C6:D4:DD:9D:35:3B:D3:87:97:5D:F0:1C:E2:82:DA:41:3E:C7:70:43
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1C1CA26C7FD911EDF5F3E976F7B800B51ABF4FB8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144833.roa
Signing time: Fri 22 May 2026 07:32:35 +0000
ROA not before: Fri 22 May 2026 07:27:35 +0000
ROA not after: Fri 21 May 2027 07:32:35 +0000
asID: 144833
IP address blocks: 240a:a887::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:1c:a2:6c:7f:d9:11:ed:f5:f3:e9:76:f7:b8:00:b5:1a:bf:4f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:35 2026 GMT
Not After : May 21 07:32:35 2027 GMT
Subject: CN=C6D4DD9D353BD387975DF01CE282DA413EC77043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9e:28:9f:1d:ea:bc:df:4b:96:8c:23:84:2f:
5d:82:c9:e3:2d:3e:6c:80:cc:bf:b5:a5:89:d1:25:
95:85:4f:84:20:5b:ae:27:0f:96:82:d6:12:14:52:
b5:14:48:bd:0e:da:90:c1:c0:1a:cc:9c:df:77:11:
47:d0:49:bd:37:76:18:e0:05:d2:17:58:b2:0a:0d:
c8:7e:63:43:c4:57:c4:47:b3:31:d5:0c:6f:db:23:
38:f7:5e:a2:ed:1f:af:0c:41:b0:69:3b:3c:b9:b0:
07:ac:d1:65:32:01:b0:f9:7d:69:e5:db:e1:12:67:
ab:42:ce:47:aa:3e:b7:60:25:76:a5:7e:fe:e1:ec:
bf:04:b7:79:90:06:db:d1:39:6c:19:45:07:17:2b:
5e:d1:22:a0:2b:03:68:d5:3a:7d:5b:be:e1:0d:ac:
b4:0a:87:62:68:58:0a:9d:23:8b:f8:9c:58:03:0b:
e1:af:fb:53:78:d3:ce:dd:6b:c3:2b:59:d6:0f:a4:
0d:eb:6d:67:66:b6:0b:f0:b5:04:c8:5d:9a:1d:e6:
44:1f:06:85:dd:4e:17:4c:17:f2:e2:c8:67:88:27:
ae:87:4f:b2:d1:3f:5c:1f:90:76:ea:55:ad:f5:c7:
2d:e1:66:bc:72:a2:6f:73:65:b9:17:ce:80:6d:e4:
7e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D4:DD:9D:35:3B:D3:87:97:5D:F0:1C:E2:82:DA:41:3E:C7:70:43
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a887::/32
Signature Algorithm: sha256WithRSAEncryption
3a:09:5f:6f:fc:14:a6:e8:45:11:9e:76:0f:77:2d:0c:9c:be:
dc:20:c4:bc:39:ec:92:80:9c:f1:0b:6c:df:61:f2:0f:2c:dc:
e2:4e:be:65:19:98:55:a1:5e:cd:2f:54:ee:c5:41:01:5e:b1:
28:b8:0d:0d:e3:9b:b3:ea:8d:ba:5f:17:36:a8:30:39:d7:9b:
a3:21:08:05:81:44:87:d0:ab:b5:5a:8d:e9:e3:f1:6f:13:d4:
07:a1:9c:23:af:fe:69:a7:ed:c8:7d:2f:cf:65:56:cf:ea:89:
35:46:2b:60:f4:24:6c:3d:00:71:89:63:27:5e:c2:ca:fc:a2:
49:b4:65:b8:e1:5f:78:ae:51:34:cc:e7:81:45:a0:66:cf:18:
ff:59:60:cd:fe:c6:8b:b1:db:2c:8a:bb:fa:78:83:2c:a1:63:
0b:19:38:5a:59:33:3a:03:44:bc:31:ae:b6:67:38:bd:6b:ff:
be:c7:1b:93:a5:20:b6:de:82:59:ac:8d:21:fd:96:1a:d5:53:
0f:84:c7:2c:58:75:17:79:ab:f7:b6:10:9c:98:c0:d9:44:25:
17:f8:60:1f:56:d1:bd:6e:01:d7:a0:da:0b:84:95:86:ef:ae:
f5:83:04:6c:6b:29:86:01:57:d7:36:bf:0e:73:f0:3d:87:06:
9a:e8:04:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:00 2026 by rpki-client