Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144834.roa
File: AS144834.roa (raw, json)
Hash identifier: 84uECXu8i6ysaw9oyWVm1PsF80KV/tu+KloG9xYms1s=
Subject key identifier: 05:3C:55:C7:A7:97:F8:90:B9:5E:68:0D:FC:D6:C6:8E:83:45:DF:C3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2C959259A3CCA4BF54B7C9871ED8221527C3F317
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144834.roa
Signing time: Mon 25 May 2026 06:28:13 +0000
ROA not before: Mon 25 May 2026 06:23:13 +0000
ROA not after: Mon 24 May 2027 06:28:13 +0000
asID: 144834
IP address blocks: 240a:a888::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:95:92:59:a3:cc:a4:bf:54:b7:c9:87:1e:d8:22:15:27:c3:f3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:13 2026 GMT
Not After : May 24 06:28:13 2027 GMT
Subject: CN=053C55C7A797F890B95E680DFCD6C68E8345DFC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:ed:55:d4:93:5f:f8:e6:e6:35:c9:7a:8b:
6d:dc:f0:5a:81:3f:84:d9:4e:c2:4b:29:38:94:e5:
ba:b4:b9:48:2e:c7:bb:66:71:da:f7:24:f7:f4:2e:
3c:84:5a:67:3e:47:f3:0c:e5:98:27:32:82:93:79:
87:71:94:02:5e:e8:84:3a:2a:7e:d1:4e:76:9f:84:
b3:81:a9:74:b8:41:30:80:cb:af:a9:c0:95:b9:5c:
f7:d3:b7:cb:69:70:ee:b1:7d:d1:2b:93:c9:f2:c2:
51:40:69:3d:38:b0:2b:1e:14:40:51:80:91:ca:a7:
36:2f:86:65:fa:96:42:e9:86:ce:cd:30:68:a8:70:
c1:46:5f:c3:6d:06:32:5b:5c:5c:a5:9b:0d:24:dc:
ba:0a:39:08:ac:ac:f4:a9:77:76:9c:52:20:40:e7:
71:21:e1:3f:44:e7:c8:3d:70:4c:71:c5:f6:18:df:
84:3a:a0:cd:ca:2d:dd:79:47:33:eb:da:31:d1:c7:
ce:03:9d:51:d4:d9:3b:11:ff:60:c6:b1:06:0f:f6:
ca:7d:46:63:63:c2:33:8a:f0:91:79:ae:32:71:cf:
25:1b:e3:cf:86:45:e0:55:d3:47:ff:cc:d7:7a:73:
ae:b3:78:ec:1b:f9:f8:1e:32:ed:4c:a1:86:ea:1b:
b4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3C:55:C7:A7:97:F8:90:B9:5E:68:0D:FC:D6:C6:8E:83:45:DF:C3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a888::/32
Signature Algorithm: sha256WithRSAEncryption
0f:bb:fc:d5:96:68:71:a3:de:f8:a6:8d:cc:f6:72:c9:47:da:
0d:fd:b9:c7:18:fd:84:11:a2:8e:e4:fa:9b:86:89:90:7d:f4:
3f:56:b9:7b:c1:e8:97:a9:00:3c:b7:05:e6:05:e5:b3:08:0d:
ef:08:42:f5:67:f1:1a:ef:21:be:d6:de:9e:3e:7c:71:55:de:
5e:bb:e2:d9:78:fe:a9:0b:df:0b:d2:f4:61:52:4a:b1:ed:6e:
2e:25:ca:c6:1a:c2:98:aa:11:62:21:32:4f:ae:46:10:95:b1:
05:5f:8b:00:0b:a8:f1:ad:8b:8e:29:f8:52:e2:47:b4:ad:7c:
f1:3b:52:d7:9f:b1:21:0e:7f:b5:b3:40:9f:5d:56:dd:99:87:
50:c0:96:65:ee:c3:cc:9a:99:cd:14:d8:31:f6:16:e8:d9:55:
e7:9d:ee:b7:3e:1e:71:42:25:68:4c:83:c5:b8:7f:3a:30:06:
db:c4:dd:24:de:37:0d:6d:4d:0a:50:dc:d6:c8:f4:76:0a:29:
f3:91:bf:44:7e:6b:25:0c:4a:5a:c6:7b:53:4b:2c:30:a6:81:
90:63:c1:73:34:30:53:79:93:d4:14:b4:a5:f8:3b:b7:4b:71:
c8:d9:3a:9b:cb:e3:85:18:af:1b:a6:3c:08:da:5e:30:30:25:
64:76:a2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:13 2026 by rpki-client