Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144854.roa
File: AS144854.roa (raw, json)
Hash identifier: 0ATf6mQiD7zwvaFk4LbGnRSxkk60nIgQaCMhTpzrAYk=
Subject key identifier: A5:16:71:13:4E:3B:B4:08:6E:BF:84:C4:64:68:F7:35:B7:18:21:03
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0BDB090A0CC1452C03563F92272C5332D127737F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144854.roa
Signing time: Tue 26 May 2026 02:34:52 +0000
ROA not before: Tue 26 May 2026 02:29:52 +0000
ROA not after: Tue 25 May 2027 02:34:52 +0000
asID: 144854
IP address blocks: 240a:a89c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:db:09:0a:0c:c1:45:2c:03:56:3f:92:27:2c:53:32:d1:27:73:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:52 2026 GMT
Not After : May 25 02:34:52 2027 GMT
Subject: CN=A51671134E3BB4086EBF84C46468F735B7182103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e5:af:da:bb:b8:54:b3:13:cc:66:7e:cc:b2:
46:41:d7:10:fc:cc:03:08:b1:44:85:cc:6c:11:4f:
2c:80:62:42:04:a8:d5:25:d4:c8:76:fd:f4:d7:15:
0a:84:3a:5e:50:db:56:2e:1c:2c:58:19:2c:ae:34:
a5:61:1e:bf:5e:40:25:0c:f2:81:60:74:6c:66:69:
79:c9:0a:7b:12:f0:f5:b2:29:e9:98:33:14:cf:5b:
de:3f:f3:ab:5b:05:a1:fd:96:0b:08:3c:34:eb:5d:
75:a3:e5:15:e8:e2:d7:e2:32:f9:d7:ec:ca:40:b3:
33:df:3b:0d:b3:e8:3b:9a:f1:0d:62:41:f8:13:65:
99:59:bd:df:6f:38:bc:dc:2b:24:88:c7:95:98:9a:
4c:58:a5:0e:26:45:9f:45:20:07:02:43:fc:e5:22:
b0:ff:79:db:01:e5:70:55:f7:37:23:c0:5f:d5:c8:
51:85:f1:ba:a9:4f:28:a8:7f:d8:63:7c:03:31:fd:
a6:0a:49:b5:44:a0:bf:63:ff:3d:83:cf:03:7b:43:
9c:c1:84:5b:52:c9:7e:46:d7:4b:22:60:4a:99:98:
07:9c:85:f9:39:f1:71:b9:ab:5a:b9:c9:b7:32:e8:
59:ce:94:22:f5:93:e2:ff:5a:7f:00:0b:4a:03:ff:
f0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:16:71:13:4E:3B:B4:08:6E:BF:84:C4:64:68:F7:35:B7:18:21:03
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144854.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a89c::/32
Signature Algorithm: sha256WithRSAEncryption
0f:dd:2d:24:d5:6d:e1:a3:f3:54:43:df:38:3f:93:75:90:ed:
b6:10:25:55:87:b4:9d:e5:b4:88:c5:44:f0:5d:40:fb:3c:a1:
74:f3:1a:fe:6e:8d:7b:8d:d1:10:b2:61:0c:58:70:a6:9c:1b:
7f:c1:7e:c6:b3:3a:db:96:73:0c:0b:26:9e:d1:2c:ba:aa:10:
77:56:ef:87:40:d5:58:8e:98:9b:55:21:35:ae:cd:ff:c3:a0:
6e:12:67:ea:57:0e:b0:e8:73:20:35:58:1f:32:75:f2:41:8c:
57:b1:00:d4:c7:b4:22:e0:ba:ca:f7:57:90:e1:3b:7e:3e:f8:
b5:7b:9d:19:61:84:35:f4:b7:17:1b:58:82:d3:86:15:e0:7c:
a2:8e:89:08:d1:19:a0:79:bc:77:a0:59:9b:d7:5b:78:97:6c:
04:f8:c4:5f:91:45:03:68:32:a1:8d:d3:0f:ea:f3:02:ea:f6:
15:3f:52:85:9d:29:38:99:cd:eb:82:15:ba:26:3a:65:95:6d:
75:30:4f:a0:69:13:3b:e0:8c:f6:19:48:2f:05:05:f6:ea:3f:
f4:7f:2e:3b:b0:8d:ba:31:61:11:37:c8:63:58:1c:52:c1:c4:
e4:be:3e:56:81:f3:2a:af:a8:cc:b2:11:88:e9:11:d2:d6:9f:
32:bd:6e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:42 2026 by rpki-client