Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144835.roa
File: AS144835.roa (raw, json)
Hash identifier: fH8W9gzadi4yaff2l3gFVrgAIgtphkAX0XZ5hPwHbWY=
Subject key identifier: 78:B5:E1:8F:48:3E:67:20:02:92:F7:3B:F5:39:53:26:03:B2:B2:2F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 46893A1109D2DDB317D13322308E66D696F1CFEB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144835.roa
Signing time: Fri 22 May 2026 07:09:09 +0000
ROA not before: Fri 22 May 2026 07:04:09 +0000
ROA not after: Fri 21 May 2027 07:09:09 +0000
asID: 144835
IP address blocks: 240a:a889::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:89:3a:11:09:d2:dd:b3:17:d1:33:22:30:8e:66:d6:96:f1:cf:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:09 2026 GMT
Not After : May 21 07:09:09 2027 GMT
Subject: CN=78B5E18F483E67200292F73BF539532603B2B22F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3b:ef:bd:f9:5e:13:0e:3f:de:fc:42:a2:99:
80:92:68:d9:4c:06:44:06:86:97:de:c3:38:1b:98:
08:24:33:c2:7c:2a:04:69:58:2a:c9:33:4f:2e:e0:
b3:78:d9:16:69:b3:cf:cf:af:50:90:d9:86:05:a7:
bd:fb:ac:49:75:6a:56:f5:43:f6:f3:38:9a:fb:63:
09:14:04:9e:ee:9d:01:3b:d6:80:bf:63:31:24:0a:
81:00:48:d4:94:6f:6b:9c:f6:57:8d:99:cd:c1:25:
27:40:5e:c8:89:ab:7d:64:e4:f8:ec:ce:21:44:65:
93:1b:01:3b:16:2e:eb:9d:ce:02:6a:1d:af:1a:6c:
f7:57:fc:5f:34:32:6d:ee:39:a8:05:49:41:cd:1a:
16:16:a0:9c:16:05:d4:c1:7b:f0:33:94:97:1d:06:
4d:c6:61:ee:19:22:31:5b:7c:4a:61:25:61:c6:a3:
12:3d:76:d4:ab:b9:de:77:2e:51:98:fb:e0:c8:d4:
b0:f4:76:97:bc:19:cc:de:ac:f8:b0:fa:43:a6:21:
07:b5:99:6b:e3:4c:ba:0a:09:c3:db:8f:60:36:50:
b4:56:4b:4a:bd:c0:61:a0:46:6b:50:6d:81:9e:74:
af:a2:30:ef:0f:2b:0f:6a:e8:2a:4f:10:21:1b:09:
eb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B5:E1:8F:48:3E:67:20:02:92:F7:3B:F5:39:53:26:03:B2:B2:2F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a889::/32
Signature Algorithm: sha256WithRSAEncryption
4e:43:2c:f6:bd:12:b1:6f:08:68:6e:6f:fd:bd:5f:49:3e:a3:
18:a6:0b:67:55:b6:a2:a5:62:fc:02:e7:96:5e:fe:e5:b3:ec:
c5:9c:ce:2f:3c:7d:7e:44:33:26:54:d6:f9:26:11:c6:ed:a9:
a9:2f:16:90:c5:87:f4:44:87:f2:82:3b:8f:ff:c5:e1:01:ef:
d5:99:81:b9:e7:2b:94:ac:1b:c5:ec:31:84:f8:72:4e:d5:01:
6b:45:1c:4f:24:6c:33:60:01:7b:b3:fc:23:5b:2e:78:63:7d:
2c:58:60:43:52:95:2d:5e:d0:2a:fc:3a:4c:44:db:c2:ad:d2:
d4:18:3b:48:5f:7c:7a:7d:88:16:60:e2:c5:5c:00:7d:b2:72:
e2:76:36:27:9c:bb:d9:fb:f2:d5:33:a0:f0:85:26:c1:c8:57:
d1:0c:2b:2f:e7:ec:31:56:ee:91:a7:c9:7b:8d:49:5b:28:66:
5f:e2:7e:24:ab:2a:41:7b:ef:86:e5:ca:dd:3f:0d:8c:0e:77:
18:49:ae:60:1f:90:73:b6:fa:3a:9b:49:b7:30:51:e5:7b:a7:
14:e1:b8:fb:ce:df:07:cf:03:9a:cf:77:4d:cd:d5:9b:c9:49:
66:c8:be:0c:b5:ee:92:1a:da:3f:5c:fc:ba:16:1d:48:ea:f5:
f3:5c:74:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:51 2026 by rpki-client