Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144843.roa
File: AS144843.roa (raw, json)
Hash identifier: o61GOfa/2qBbJSlNFd5+bV8ZIAAH+678WOWHGWRkqJY=
Subject key identifier: 52:34:77:47:E9:EB:B1:1C:96:3A:12:61:7E:97:C1:01:2D:5E:C6:93
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0439698B5013E414ACA33F7CD83927D1B12AF415
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144843.roa
Signing time: Fri 22 May 2026 04:26:48 +0000
ROA not before: Fri 22 May 2026 04:21:48 +0000
ROA not after: Fri 21 May 2027 04:26:48 +0000
asID: 144843
IP address blocks: 240a:a891::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:39:69:8b:50:13:e4:14:ac:a3:3f:7c:d8:39:27:d1:b1:2a:f4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:48 2026 GMT
Not After : May 21 04:26:48 2027 GMT
Subject: CN=52347747E9EBB11C963A12617E97C1012D5EC693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ba:e1:06:df:04:99:f1:06:3e:7a:cb:55:31:
ce:c8:3f:ec:49:2f:55:a2:90:94:95:a6:a3:67:1b:
5b:65:25:73:81:c4:be:68:b6:a2:34:2a:fc:4e:a6:
7b:1e:66:19:0b:ad:45:2a:e4:4d:3c:cd:fc:93:4a:
a8:df:9b:f3:b6:26:43:da:d8:f3:4e:16:95:ac:0d:
95:32:54:f8:7b:dc:da:2c:9f:e3:72:c4:26:c6:1e:
cf:19:fc:9b:cb:2f:07:92:dd:e6:ad:13:0e:98:d5:
84:be:b0:57:4c:6b:0e:00:9b:69:0f:df:ed:ea:74:
d4:6a:76:b1:0d:c5:47:e0:34:07:8f:0b:1b:d2:a4:
67:fc:59:fa:4c:96:50:54:bc:ad:c3:61:ea:0b:2f:
cd:cb:bd:4f:a9:5c:dd:e8:43:a4:81:f7:46:c3:89:
98:b2:6a:47:e6:75:f7:51:c5:21:f9:e0:72:7f:08:
98:25:8a:1e:b8:d5:ee:a6:ca:c3:f1:ae:df:cd:57:
b6:45:c4:4c:a5:be:6c:39:87:bb:20:08:22:f9:cf:
f2:8b:28:a3:2e:95:49:dd:86:86:6f:b1:00:86:bf:
71:2d:a3:fa:0e:5b:1d:15:e3:66:c4:cd:2a:5f:40:
ab:2f:06:3a:31:f1:16:a7:a9:4a:cb:d5:f5:45:6a:
f7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:34:77:47:E9:EB:B1:1C:96:3A:12:61:7E:97:C1:01:2D:5E:C6:93
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144843.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a891::/32
Signature Algorithm: sha256WithRSAEncryption
9e:6f:2e:aa:bf:4b:2e:c7:ad:a0:e6:e1:33:e1:97:d2:25:08:
2a:53:22:c2:84:93:84:16:6f:a5:db:8e:fd:b5:cb:89:3e:c8:
7f:29:70:15:7a:19:71:2f:10:b9:aa:67:36:24:fc:96:0a:20:
42:77:db:6e:70:c7:20:2c:0f:84:87:46:bd:32:29:4e:6a:4a:
99:6b:27:49:55:4a:31:d4:23:30:96:b0:3d:bb:10:e7:5e:19:
4f:4d:95:b2:7b:ac:98:d0:f9:ba:9b:5c:9c:1d:59:74:b7:8a:
5a:c0:b3:08:e6:d9:ca:03:f5:9e:5e:cf:b3:b9:89:19:97:1d:
13:ba:0d:e0:d9:27:3d:c1:15:65:8d:61:3e:0b:e0:c7:91:91:
2e:8e:35:99:53:da:b3:24:0e:fd:0c:ac:36:43:7a:54:8c:a8:
df:fe:50:26:b8:a5:c1:04:2a:f6:87:a1:a9:c5:c9:46:1e:b4:
d9:ac:35:15:a1:11:6a:cc:64:36:6c:d7:93:a1:2e:8f:7c:5e:
1a:f4:7b:53:2f:9d:c7:db:41:42:86:95:77:36:71:b8:ae:72:
58:2a:0b:06:5a:f9:cc:be:b2:93:d6:be:56:d0:e6:50:43:83:
36:17:6a:38:72:c8:02:af:a8:05:ed:91:a1:2e:f9:3d:18:c0:
25:85:13:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:25 2026 by rpki-client