Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144855.roa
File: AS144855.roa (raw, json)
Hash identifier: aZuN/9B62lYBNzwX3iroiJx4zhee/TItIkRys3hH9s0=
Subject key identifier: 84:3B:CD:15:0F:FD:2E:93:6D:CF:C0:6E:B1:1D:9D:9F:41:00:27:24
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4CFA3501BFC9A64CC93E0189566CF64DF6342487
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144855.roa
Signing time: Tue 26 May 2026 02:35:21 +0000
ROA not before: Tue 26 May 2026 02:30:21 +0000
ROA not after: Tue 25 May 2027 02:35:21 +0000
asID: 144855
IP address blocks: 240a:a89d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:fa:35:01:bf:c9:a6:4c:c9:3e:01:89:56:6c:f6:4d:f6:34:24:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:21 2026 GMT
Not After : May 25 02:35:21 2027 GMT
Subject: CN=843BCD150FFD2E936DCFC06EB11D9D9F41002724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a5:21:7c:c9:cb:79:53:70:51:bc:e2:ab:97:
b4:cb:6f:7f:9d:2a:8a:dd:d1:fb:00:dd:97:1b:a3:
99:c1:1c:37:b2:f9:0e:bb:5d:06:3f:f8:26:49:23:
be:9d:77:73:ba:2a:fd:f1:d6:4d:0c:f3:f6:01:22:
d2:5f:7a:46:c8:b6:80:16:8f:e2:4c:3a:0f:35:00:
ea:7e:0c:ad:19:4d:bf:e7:24:41:9c:8e:ac:c5:16:
67:08:80:24:63:6e:84:3b:3c:cd:cd:e6:30:e9:ee:
85:3a:42:d9:4f:c5:e4:10:48:4f:c5:ce:25:a9:bc:
f3:cc:14:0f:c1:59:c4:f3:aa:f5:41:62:48:12:4a:
00:fa:cc:e7:bf:3f:18:1f:1c:4b:a9:4e:5f:c7:22:
9d:fd:f1:da:8a:d8:af:6e:76:8d:02:68:f9:64:d7:
7c:f9:b3:44:c4:a5:81:a8:6d:52:9f:7b:36:d8:13:
e0:17:33:cd:0e:a1:95:f5:16:fb:7b:fa:e4:4b:ee:
81:a4:49:4a:07:0a:dd:0a:59:b5:d5:bc:ae:05:6e:
4a:97:e3:32:f1:38:39:d4:3c:9e:4c:87:80:fc:e0:
8e:d7:bd:73:72:f7:83:87:d9:09:e3:26:f4:c0:c0:
10:c9:3a:3d:ff:0a:5b:30:97:29:33:34:38:65:04:
e0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3B:CD:15:0F:FD:2E:93:6D:CF:C0:6E:B1:1D:9D:9F:41:00:27:24
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144855.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a89d::/32
Signature Algorithm: sha256WithRSAEncryption
af:3a:da:32:50:8c:54:af:82:5d:04:58:a2:8f:e3:b3:e4:7d:
29:12:3a:b5:2d:8a:1f:08:27:ca:54:50:30:cf:1c:e3:48:63:
5b:fd:24:10:af:9c:00:86:b9:d5:76:75:35:b7:7c:fa:d5:da:
22:5b:97:2a:c8:6b:d5:e1:38:ba:27:e5:35:e7:92:67:74:93:
45:b3:ce:66:4f:7a:0a:cb:b7:d6:c5:28:1b:7e:89:b8:46:b3:
97:7a:85:b6:0a:a7:8e:fd:42:a0:c2:1f:29:7e:0b:d6:b0:a1:
de:fa:d8:76:72:d5:25:ad:36:7e:f6:e0:4f:6f:32:c1:1a:c8:
29:5e:99:b5:1d:b5:02:9e:8b:fe:7f:f5:28:18:1e:e9:fb:3a:
25:b2:0d:65:b4:fb:b1:ef:43:41:c1:fb:e2:ef:7e:55:04:c3:
bc:d0:f9:81:8c:f9:9e:db:7b:37:12:f9:02:ed:ed:3e:7e:32:
f6:b2:38:74:1a:33:19:a7:11:96:d7:e9:b6:18:60:d5:da:fc:
7f:da:12:a2:4b:64:a9:2a:90:00:97:9b:10:85:27:df:a2:5e:
fc:cb:2a:f4:fb:8f:bc:47:2b:7b:ac:df:bc:73:ac:e8:79:9e:
96:d8:05:dd:40:d7:ca:e9:13:9f:7a:83:01:8e:01:3b:7a:d9:
20:17:02:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:34 2026 by rpki-client