Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144841.roa
File: AS144841.roa (raw, json)
Hash identifier: ObLovAlHITGbTsQH0QIeR4AhAZmWrtl7z2VZOQEQasw=
Subject key identifier: 42:51:4E:9A:D9:1A:0B:EA:A9:77:FC:BC:62:29:FF:03:D6:AD:DD:E7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4830C7183D657B051E2C3F24DB571DD5B57EB9FA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144841.roa
Signing time: Fri 22 May 2026 07:41:24 +0000
ROA not before: Fri 22 May 2026 07:36:24 +0000
ROA not after: Fri 21 May 2027 07:41:24 +0000
asID: 144841
IP address blocks: 240a:a88f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:30:c7:18:3d:65:7b:05:1e:2c:3f:24:db:57:1d:d5:b5:7e:b9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:24 2026 GMT
Not After : May 21 07:41:24 2027 GMT
Subject: CN=42514E9AD91A0BEAA977FCBC6229FF03D6ADDDE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9b:3b:75:5f:fe:6f:9f:d9:d6:34:70:1f:87:
0b:d4:38:cb:98:e5:e6:69:7e:b3:05:ff:ba:ee:e1:
8f:0d:6a:17:eb:aa:3c:14:36:e7:a5:45:7f:0a:88:
34:36:66:20:ca:4a:3e:e4:88:e1:fc:95:1f:1c:cb:
89:66:a2:7d:0c:cd:e6:a0:57:25:1e:ea:7b:29:79:
c9:da:bb:c5:65:12:af:2f:c7:59:e7:3b:48:32:dc:
d2:3a:8e:64:ae:35:24:6f:43:1a:1e:ff:c1:e8:29:
bf:39:9c:26:a4:27:75:ba:76:d7:e0:a4:7f:4e:8c:
fd:9e:da:f1:8b:46:18:37:6a:69:cc:9f:aa:fe:73:
62:9e:f4:3b:14:34:b3:94:0f:a1:76:b2:09:da:e1:
d7:49:aa:e4:8c:0f:a5:ba:71:96:b4:8b:6d:a4:59:
02:e0:3d:89:f4:42:4e:80:c9:30:24:e3:fd:e3:5b:
9a:e9:29:6b:0c:e9:27:4a:ac:28:a9:e9:ff:79:63:
56:90:46:82:6d:2e:da:22:ee:0c:b5:bb:f6:b4:49:
9d:43:3e:b6:8e:af:7d:b7:04:50:57:b9:76:c4:3d:
63:83:32:56:04:b0:99:2a:7f:a0:a9:6f:0c:ae:24:
76:c5:dc:41:51:0a:a7:9a:14:34:90:dd:3c:12:65:
9c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:51:4E:9A:D9:1A:0B:EA:A9:77:FC:BC:62:29:FF:03:D6:AD:DD:E7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144841.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a88f::/32
Signature Algorithm: sha256WithRSAEncryption
83:38:26:fd:b4:49:6b:38:71:f2:6f:44:3d:5e:cc:bb:5c:58:
5a:55:63:a1:50:ee:9b:ab:b9:08:c1:21:71:5e:33:bb:37:a4:
e3:a5:78:24:ea:46:69:19:bc:71:b6:de:5a:f9:7b:23:32:07:
7b:1b:fd:74:78:88:a6:ff:43:9f:bb:de:df:dd:49:af:77:f2:
f9:7e:52:5d:1e:6a:bd:34:02:50:2f:b0:8d:2f:65:cd:ae:d1:
2d:47:64:42:4e:69:35:5a:fd:7a:a5:17:8b:e9:ed:9b:67:0b:
e6:b5:74:ed:f5:ca:26:e3:97:be:7e:c0:14:c7:ad:e9:5e:19:
7b:5c:da:2e:e2:e8:dd:bd:cf:3e:4c:0b:e0:31:c0:29:2b:21:
2c:82:51:d6:ff:4b:e0:40:f0:7b:5e:a4:b7:7c:40:2c:11:15:
2e:41:0c:28:3a:05:d4:8d:61:20:dd:bb:0e:56:68:a0:8c:b4:
f6:15:04:29:8e:a9:18:60:77:0d:27:4c:41:fb:66:f8:38:46:
bd:cd:b6:4b:ce:a3:69:ac:e8:b6:d4:1f:6d:10:08:23:74:d2:
92:d6:7b:6f:d2:6d:44:7e:5c:a8:04:c8:92:e4:d2:83:f0:fe:
e9:e2:c6:c4:f4:e7:26:72:ae:5c:5b:ec:f7:5a:eb:59:6e:af:
06:7b:8c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:59 2026 by rpki-client