Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144864.roa
File: AS144864.roa (raw, json)
Hash identifier: ISons2goel20oKq7OQ6gfMGn2PnS+57Krcf/ckSL/1E=
Subject key identifier: D7:C6:2F:D3:8C:DF:BB:01:E1:9E:06:02:C5:E1:BF:CE:5C:C7:35:5B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 43B8E19B9657E186696A60064EECC2DF947CE183
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144864.roa
Signing time: Mon 25 May 2026 03:19:17 +0000
ROA not before: Mon 25 May 2026 03:14:17 +0000
ROA not after: Mon 24 May 2027 03:19:17 +0000
asID: 144864
IP address blocks: 240a:a8a6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:b8:e1:9b:96:57:e1:86:69:6a:60:06:4e:ec:c2:df:94:7c:e1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:17 2026 GMT
Not After : May 24 03:19:17 2027 GMT
Subject: CN=D7C62FD38CDFBB01E19E0602C5E1BFCE5CC7355B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:e5:04:aa:25:c4:f2:6d:29:4f:a8:40:d0:
47:00:3b:30:d8:89:c7:24:d6:24:50:d7:fe:bd:23:
2e:6d:57:6b:69:dd:79:28:a7:19:07:47:6a:6d:ee:
80:6b:96:46:04:4a:db:15:34:6c:5d:93:95:84:66:
25:2a:3d:7a:00:b0:a3:4c:b0:55:1b:f4:fe:b6:d3:
05:0b:24:4d:a8:96:26:02:c7:48:dc:40:2c:ea:c1:
31:2f:38:d7:ab:2d:3e:30:bc:2e:e1:64:5e:9f:b6:
0e:94:6d:fc:6f:fd:44:70:0c:a4:04:79:0e:27:22:
b5:56:0b:51:07:9e:fd:46:c7:30:67:41:dc:fe:2d:
75:bb:91:f6:0d:20:59:15:89:2a:bf:a2:67:49:5a:
78:08:6f:b5:5e:50:8c:cf:b5:ab:11:de:da:36:9a:
c8:67:32:cf:cf:3d:77:45:a9:2b:d0:c5:fd:71:b6:
78:f2:b8:81:69:2d:73:c9:e2:79:ee:ed:cd:ca:18:
70:e9:d4:5a:1d:d9:d9:8d:13:da:5a:34:0e:f6:53:
73:ed:4d:5e:c1:7e:34:60:c3:53:7f:57:9a:f2:5a:
25:03:7d:9b:25:dc:03:6e:94:e0:5d:0b:c7:ed:c0:
bc:9f:5e:be:75:8b:e4:3d:58:db:78:f6:05:05:e0:
9c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C6:2F:D3:8C:DF:BB:01:E1:9E:06:02:C5:E1:BF:CE:5C:C7:35:5B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144864.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8a6::/32
Signature Algorithm: sha256WithRSAEncryption
ad:8f:c6:0e:f3:1d:4d:29:52:31:e2:cc:1d:ca:d7:e5:93:bc:
bf:57:94:a8:42:4f:81:4f:56:40:d1:c9:dd:35:7d:2d:41:6c:
92:30:71:f1:60:b5:6f:66:9b:42:e8:f0:2e:1c:36:cc:b3:fd:
fb:41:d1:0c:ae:d7:61:d4:87:28:ae:6f:44:c4:25:d3:84:33:
f8:f2:28:07:1c:dd:2e:1e:75:28:b3:37:f6:35:b9:c0:63:a1:
2b:52:44:8d:e1:3c:bb:71:86:78:1c:1f:c3:eb:d3:13:76:43:
88:c5:33:6d:51:3c:a2:2d:f2:c7:4b:ad:3c:c1:45:53:d4:eb:
58:3f:55:3e:66:52:20:34:50:7b:07:3c:6c:cc:7c:ed:ff:85:
08:61:04:9c:d3:56:b2:af:35:7e:21:37:45:cf:6d:1f:ce:d2:
1b:31:4b:28:bc:9f:e0:41:78:f6:a1:8a:11:f2:25:a1:a7:f9:
fc:35:f1:72:54:36:c7:5c:41:19:fb:d9:b7:3d:36:e5:a4:27:
1d:46:d3:cc:da:a7:44:ae:4a:b6:0f:27:7e:fa:26:a3:66:45:
a7:64:66:56:07:a0:a5:6c:12:ba:55:80:78:cb:d2:de:72:43:
a9:90:2e:68:d5:a3:77:5f:5f:4f:09:7a:5f:c2:38:3f:40:05:
03:c0:0b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:18 2026 by rpki-client