Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144838.roa
File: AS144838.roa (raw, json)
Hash identifier: Ogkk3qzrDpan7soE7i6ftg7LZdVdn4CUjVrwgSKyUyc=
Subject key identifier: F7:AD:BC:05:CB:4C:84:40:90:33:20:1F:A8:58:7D:55:64:19:36:0F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 67CAA2352852078A3F2F9356B2B9E6FD65DFFB11
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144838.roa
Signing time: Tue 26 May 2026 01:13:08 +0000
ROA not before: Tue 26 May 2026 01:08:08 +0000
ROA not after: Tue 25 May 2027 01:13:08 +0000
asID: 144838
IP address blocks: 240a:a88c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:ca:a2:35:28:52:07:8a:3f:2f:93:56:b2:b9:e6:fd:65:df:fb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:08 2026 GMT
Not After : May 25 01:13:08 2027 GMT
Subject: CN=F7ADBC05CB4C84409033201FA8587D556419360F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:61:6c:14:24:6f:ea:b8:e5:c0:1d:74:e5:88:
6b:f0:a8:5d:0d:11:a6:56:e7:d5:6f:29:25:91:4e:
30:b3:f2:c9:84:15:c6:9a:9b:04:9f:ea:74:e3:c4:
76:9b:d0:10:f3:fc:b0:92:31:83:d1:a4:90:55:54:
68:c7:0e:6f:1c:ae:b9:31:38:bb:e5:36:ff:c7:7a:
39:f6:35:77:0d:1a:73:43:2c:8f:80:22:a4:b3:bf:
02:0a:eb:9e:80:5b:f8:0d:5b:b0:86:55:d9:ec:08:
96:a5:27:fb:f0:ca:7b:71:32:99:95:92:17:a0:02:
a0:c8:0a:90:34:52:79:58:76:a8:3d:d0:e4:cc:c4:
c5:73:87:09:9a:cb:ab:d8:73:52:4c:9e:ac:64:f8:
c9:54:a1:61:ee:5e:02:b1:22:3b:39:16:30:8f:e7:
8f:78:ff:a3:be:49:64:bf:eb:ae:bb:83:d1:d4:3f:
32:bf:77:3a:28:61:9c:70:fc:9f:0d:b3:3e:8a:2b:
8f:9c:cf:1d:be:21:af:e9:2d:fe:e9:f6:d3:f0:f2:
a2:2f:2d:da:50:b9:59:99:2c:cb:b9:61:50:90:6e:
4e:59:76:ad:30:ce:61:7b:6f:78:21:2e:7e:76:85:
59:bb:dd:e2:50:8e:f2:d7:7e:e1:d9:37:7c:8d:a0:
ae:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AD:BC:05:CB:4C:84:40:90:33:20:1F:A8:58:7D:55:64:19:36:0F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a88c::/32
Signature Algorithm: sha256WithRSAEncryption
55:e9:17:25:8d:14:4d:ba:36:e7:be:73:a0:eb:5c:bd:a1:8a:
a4:86:35:eb:b1:9b:06:df:59:ca:c6:9a:60:9a:56:59:01:e0:
4e:ce:ca:8e:ed:63:6e:e5:41:95:e9:14:f2:6a:e8:d7:b2:b1:
55:54:c3:42:df:02:bf:08:a9:4a:0a:7e:55:64:6a:7e:38:2e:
b6:87:79:06:46:1d:57:05:7f:69:2f:8c:7c:7c:76:e2:d1:3f:
69:3a:e8:8d:8a:49:7b:8d:c8:c5:4c:a3:d2:ed:70:ad:e3:5e:
a9:62:7b:2f:d8:f5:31:1f:3a:31:36:cd:1c:f2:4c:7f:b7:42:
5f:3c:e4:09:31:70:88:bf:ce:7f:b9:2b:7d:74:3f:e0:11:27:
7b:7b:c5:87:94:b7:0b:03:62:ca:ff:c9:5a:b6:bc:f1:c0:8b:
47:02:0b:1c:f6:4d:d1:c1:76:f9:65:ca:07:3c:2f:f3:6f:cf:
dc:71:99:45:bf:ea:c4:87:5e:97:94:0e:d2:46:0f:fa:71:b9:
1c:55:2f:65:4e:79:25:15:1e:85:a8:d4:e1:a2:59:fe:ea:f4:
bb:6a:43:5b:86:37:57:52:0e:16:c5:c9:d2:d5:f6:39:78:3a:
ba:a4:ff:7f:14:5b:d6:81:81:b9:5c:f3:e4:38:10:d0:7b:d8:
55:27:6b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:20 2026 by rpki-client