Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144869.roa
File: AS144869.roa (raw, json)
Hash identifier: wqiIK7uZPDu2pFaZRRl1SDYUqzTbxJAKHjUOSEFPka8=
Subject key identifier: B2:C4:B7:96:15:C3:F6:F7:2F:9A:7C:E5:DA:F4:30:53:07:68:73:93
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 23798392D59324B347332FC30C711794EA90CC28
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144869.roa
Signing time: Fri 22 May 2026 02:48:07 +0000
ROA not before: Fri 22 May 2026 02:43:07 +0000
ROA not after: Fri 21 May 2027 02:48:07 +0000
asID: 144869
IP address blocks: 240a:a8ab::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:79:83:92:d5:93:24:b3:47:33:2f:c3:0c:71:17:94:ea:90:cc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:43:07 2026 GMT
Not After : May 21 02:48:07 2027 GMT
Subject: CN=B2C4B79615C3F6F72F9A7CE5DAF4305307687393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:df:3c:28:54:53:e2:4a:d0:21:cf:b5:dc:
f1:23:78:d6:00:4c:02:11:da:31:5d:7d:e8:92:74:
63:53:52:a4:cd:fc:f9:9d:17:b0:73:23:7c:29:3e:
db:6d:4a:ee:0c:b0:c7:0b:5b:bc:18:e8:b3:84:b9:
06:9e:2c:e8:7d:4e:2b:9e:02:6f:45:71:ee:68:ea:
95:07:80:79:07:a2:99:f9:08:b2:60:d4:70:cf:91:
4f:3a:ee:98:ba:9b:be:d3:1a:36:b8:b7:5d:d3:ed:
60:e7:b4:43:09:ef:f5:6d:8a:ac:51:e2:bb:f8:68:
0a:a4:59:cd:55:d5:18:be:5e:6b:4d:aa:29:90:6a:
cc:9c:f9:76:4a:fd:2f:57:96:40:b2:bd:b2:59:75:
26:68:4b:59:13:4b:97:db:64:e4:1a:54:4a:aa:f5:
86:47:88:29:12:e6:cb:7b:fd:b2:9b:e3:bc:ea:a6:
28:e8:36:48:16:2d:19:c1:e0:16:ea:1b:97:d8:9a:
5a:5c:6c:1b:66:10:95:2f:9d:60:bd:10:bb:26:0f:
dd:79:74:42:a7:85:c3:94:02:2e:18:be:d3:67:2b:
cc:c8:3c:4f:3b:65:a2:21:c8:c3:23:f0:54:cd:59:
4f:99:07:20:1b:78:14:33:88:51:41:b7:08:4d:3c:
58:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C4:B7:96:15:C3:F6:F7:2F:9A:7C:E5:DA:F4:30:53:07:68:73:93
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144869.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8ab::/32
Signature Algorithm: sha256WithRSAEncryption
1b:d1:94:88:18:75:b3:9d:a0:a3:63:df:9e:6d:46:e1:8c:28:
79:77:12:93:16:90:7a:3a:66:e5:e3:aa:6f:34:ce:99:8f:29:
cd:18:1a:64:bd:24:75:32:d1:6d:8c:1f:05:82:a5:18:c0:b8:
a7:89:17:12:a9:32:94:62:c6:b6:e1:6c:0a:b4:04:af:fe:32:
0c:f7:d5:34:3f:ee:0f:14:d2:82:9d:0d:0b:0f:74:31:20:bf:
58:5e:fe:a9:52:1c:39:4e:12:e8:9d:db:64:d2:5f:db:27:5d:
08:62:32:11:14:8c:c5:e4:a5:dd:8b:da:0d:4d:2c:19:0b:1f:
d8:02:e7:62:27:3a:69:ee:cd:91:37:96:f4:f2:7d:08:55:1b:
0b:a4:4f:71:b0:f3:6a:e5:58:f1:a9:32:0d:56:82:69:62:2b:
8a:8b:89:84:99:5e:dc:8d:7b:08:90:27:77:0c:b9:f9:ca:75:
4c:5b:2c:ab:c3:d0:62:2a:e9:51:0a:6e:80:ca:00:67:f5:9b:
98:fb:3f:fe:b8:1b:5c:1b:5d:4c:37:cb:6c:5a:ad:54:39:1d:
88:b3:26:e2:ec:50:0f:77:8e:4b:27:2a:cb:07:93:af:4f:9c:
58:b9:04:37:ea:e4:47:df:f9:15:49:b0:68:cd:b8:f8:9c:e0:
94:c4:c7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:47 2026 by rpki-client