Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144850.roa
File: AS144850.roa (raw, json)
Hash identifier: TkSkZNw9ae7GJ/mfn3uda53utUeaEGVwpTVepFyJLQQ=
Subject key identifier: 09:EF:49:1D:F6:42:FD:84:67:D3:90:65:3C:E7:94:8C:98:CF:86:FD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 423EBCBF0FB7E48D89F0501B845EDE7901FAC09C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144850.roa
Signing time: Mon 25 May 2026 01:51:18 +0000
ROA not before: Mon 25 May 2026 01:46:18 +0000
ROA not after: Mon 24 May 2027 01:51:18 +0000
asID: 144850
IP address blocks: 240a:a898::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:3e:bc:bf:0f:b7:e4:8d:89:f0:50:1b:84:5e:de:79:01:fa:c0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:18 2026 GMT
Not After : May 24 01:51:18 2027 GMT
Subject: CN=09EF491DF642FD8467D390653CE7948C98CF86FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a6:bc:39:a1:6b:89:72:40:fd:af:cc:6d:ce:
09:70:43:a6:cb:77:70:98:58:36:d6:23:10:ff:df:
b9:fb:ed:00:a6:a2:e9:43:8b:d4:f4:89:9c:5c:31:
9d:25:39:46:3c:1a:cb:37:2c:99:71:5e:1f:4b:6e:
2a:cb:2d:b1:bc:e6:16:37:02:63:f9:5a:27:4e:f8:
1b:c2:ef:e0:1e:ec:a5:bd:97:a7:8a:f8:15:8b:f3:
f4:e7:0d:81:a9:8b:f2:3c:4b:90:d6:11:59:58:05:
5d:26:83:9e:29:4f:da:ee:fe:e6:44:44:e4:54:c1:
37:29:e9:45:aa:f6:76:c0:bc:a0:ef:49:5e:02:f6:
10:2b:f5:dc:4c:1c:8e:e5:87:c8:e1:eb:3f:04:83:
d0:56:54:83:ce:eb:9e:87:0f:3d:02:3f:05:c5:e4:
33:d1:e1:1b:e3:18:22:b0:86:ca:50:92:e0:18:67:
a5:9d:f8:c5:0f:53:e5:fd:e9:75:e4:2f:1d:49:bd:
57:f6:a2:c9:97:92:05:a0:19:46:dc:59:5f:f5:67:
4e:f4:ba:77:e0:12:e9:92:4f:26:28:3e:dd:2b:88:
7d:f2:4e:6a:c9:d0:5d:3a:5d:2b:31:94:e1:b6:5c:
e8:78:c0:c3:d6:63:fa:94:e9:ef:5d:74:81:1a:61:
2a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EF:49:1D:F6:42:FD:84:67:D3:90:65:3C:E7:94:8C:98:CF:86:FD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144850.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a898::/32
Signature Algorithm: sha256WithRSAEncryption
1e:20:65:19:e8:31:42:f1:7b:3b:63:64:5c:a0:28:72:33:86:
6d:62:b3:bc:2e:6c:67:46:f9:73:a3:cd:d4:67:8c:2a:83:c2:
d1:ee:9a:86:88:94:9b:b3:0a:12:80:82:19:96:ed:2d:b8:04:
ce:ab:67:55:45:d6:ae:4e:41:32:64:c7:31:79:6f:b2:ca:49:
79:3c:2f:e1:24:6d:fa:3d:0a:a7:d2:2b:88:f6:29:26:b6:3b:
30:7d:d9:8c:37:97:71:1c:8e:ca:5c:2b:7e:9c:eb:1a:83:ff:
73:63:b4:19:0e:9c:31:56:87:cd:fd:9f:cb:06:bf:ce:e7:d2:
d8:f4:83:5b:e1:80:11:65:26:3f:49:d7:7a:05:cb:28:0e:aa:
da:89:ce:0a:d6:61:00:2d:22:69:3f:63:6b:3a:d4:a2:03:ab:
14:a3:c6:36:9b:e3:ac:13:69:17:96:9c:bb:0f:8f:52:8e:a5:
1a:52:24:3b:a8:ec:50:d7:ee:44:c7:bb:d6:dc:3f:32:38:dd:
ba:b4:66:b4:99:4a:dd:9e:0b:4c:a7:6c:2c:13:d7:db:49:a9:
c9:8d:15:67:79:43:4a:d9:32:b0:33:ba:fc:db:50:76:a3:91:
7e:07:a1:fa:6f:1d:f6:76:a3:6f:84:8d:7c:1f:88:03:d5:55:
e9:36:19:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:41 2026 by rpki-client