Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144844.roa
File: AS144844.roa (raw, json)
Hash identifier: WzWdJpw+r9oSOghqa0ovBUA4Jftz3Ev1ZQa0Wk0jiqU=
Subject key identifier: 1E:64:C1:C9:4C:F7:BC:E1:3D:A4:44:0B:94:65:32:27:B1:D4:90:7A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 35E5090C435967354F38D1E51B93579C99E72E61
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144844.roa
Signing time: Fri 22 May 2026 06:05:26 +0000
ROA not before: Fri 22 May 2026 06:00:26 +0000
ROA not after: Fri 21 May 2027 06:05:26 +0000
asID: 144844
IP address blocks: 240a:a892::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:e5:09:0c:43:59:67:35:4f:38:d1:e5:1b:93:57:9c:99:e7:2e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:26 2026 GMT
Not After : May 21 06:05:26 2027 GMT
Subject: CN=1E64C1C94CF7BCE13DA4440B94653227B1D4907A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2c:b9:ff:27:15:83:69:61:76:9e:ff:c5:1f:
02:c7:14:72:c3:83:68:3f:e2:0c:99:7a:f9:26:92:
37:b9:2f:76:0c:99:ed:70:00:2c:b1:27:26:a9:a0:
67:e1:a4:a0:4a:11:10:c9:37:78:af:67:97:9c:a9:
96:ba:46:67:96:85:d1:60:c3:2b:13:fb:35:f2:24:
55:b5:84:97:85:8e:56:e2:63:03:92:31:3b:da:20:
4b:cf:23:81:00:8e:31:de:09:e0:4d:e3:1e:47:94:
da:7c:5f:91:87:10:a4:59:a7:d6:15:df:a6:21:c9:
19:f7:5f:a2:43:36:a5:a7:91:84:bd:18:b0:d5:47:
af:cb:89:6d:b7:5d:97:f1:9b:41:64:5a:f3:d3:67:
74:69:42:34:fe:54:42:35:00:c5:be:5e:e2:d4:94:
b7:bd:df:60:3e:81:63:2a:38:a2:59:3d:2c:68:83:
4c:76:ea:92:1a:94:70:bb:4a:6b:59:b3:f5:8a:02:
60:cf:32:61:7b:5a:85:3b:19:d5:25:9f:b2:c6:df:
fa:dd:ed:21:0f:66:08:67:f4:c5:0c:8d:da:40:e1:
01:a9:fa:e8:0b:6f:b8:b8:87:78:a7:1d:7c:ad:59:
d0:c1:9f:5e:5a:3c:50:c6:52:b2:10:6f:d6:e6:a3:
08:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:64:C1:C9:4C:F7:BC:E1:3D:A4:44:0B:94:65:32:27:B1:D4:90:7A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144844.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a892::/32
Signature Algorithm: sha256WithRSAEncryption
24:97:d7:d3:d3:de:77:33:22:55:b4:7d:6a:58:83:13:85:6b:
a3:78:b2:8b:d4:6c:e6:a4:9c:25:d9:94:57:9e:73:c3:31:82:
0a:98:9b:9a:41:ca:95:08:27:b6:53:e6:38:c5:7f:69:e2:53:
6e:c1:58:bb:96:f0:d5:cc:26:25:db:09:ea:e0:28:ad:36:1c:
2f:4a:ea:28:34:01:d1:dc:8c:85:cd:07:2f:f8:ae:32:95:2f:
53:16:da:6f:1f:f1:b2:b3:40:9b:bf:b9:fb:d0:27:2f:17:36:
ba:08:38:5f:7a:cf:de:65:35:a7:27:12:9b:78:f2:a0:d1:be:
a2:b5:69:a6:68:aa:08:00:dd:3c:7e:37:65:eb:ba:0a:74:1e:
f7:7a:50:e6:31:34:93:5a:25:8e:e7:69:95:2f:78:ea:59:81:
ac:d0:0c:24:ba:56:20:72:48:87:a7:46:a7:8a:e1:e9:8c:e9:
19:08:99:31:3f:ae:55:03:79:e6:26:b9:10:ab:f6:b5:44:e3:
8f:4d:10:ff:1b:8d:19:c1:ba:d3:67:f8:5c:1b:f6:d4:cd:0c:
61:0c:7e:bb:9b:85:54:e1:b8:4c:b1:f9:fc:e6:85:1c:82:31:
b0:52:78:ec:c0:50:7b:d1:8b:93:e3:53:c2:f6:99:fe:ff:df:
1e:6d:c0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:26 2026 by rpki-client