Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144872.roa
File: AS144872.roa (raw, json)
Hash identifier: 4zs1RMLt44tcEU+FI9QOnK8v9b92Qqv0ZvKMRG4Z2So=
Subject key identifier: 43:96:F2:C2:25:BD:97:DB:63:2C:58:51:95:12:59:FB:AA:52:BF:E0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 31B48B15FF31238DD192DBBD0E0AEA264B30F438
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144872.roa
Signing time: Mon 25 May 2026 02:22:46 +0000
ROA not before: Mon 25 May 2026 02:17:46 +0000
ROA not after: Mon 24 May 2027 02:22:46 +0000
asID: 144872
IP address blocks: 240a:a8ae::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:b4:8b:15:ff:31:23:8d:d1:92:db:bd:0e:0a:ea:26:4b:30:f4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:46 2026 GMT
Not After : May 24 02:22:46 2027 GMT
Subject: CN=4396F2C225BD97DB632C5851951259FBAA52BFE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:38:2c:c7:25:66:e2:07:bf:fb:92:a0:00:d5:
23:38:e7:0b:e9:57:90:be:83:0a:c0:c4:2c:38:69:
1a:36:f5:26:cc:e5:01:da:77:95:5d:12:63:8a:01:
b1:bc:d6:e0:95:e8:fe:c9:60:2b:6c:81:33:54:8e:
33:ee:e0:9f:8a:25:44:72:3f:70:4d:aa:cd:04:ce:
da:4a:ce:62:2f:33:a1:0e:31:c4:c5:82:5b:b7:ab:
e1:38:bf:3d:87:51:15:78:48:66:20:0b:b3:3a:3b:
01:c0:01:25:7c:4a:6c:48:7e:f9:55:04:61:e5:e7:
ae:0c:d8:48:17:5a:30:f9:8b:27:c1:76:44:4c:2e:
a1:82:e3:26:62:a7:73:f7:b3:e6:11:8a:65:46:1d:
d4:58:a8:23:05:31:44:47:41:a6:e3:61:66:7e:89:
c5:85:1e:b5:2d:fc:c7:52:86:25:8b:6c:07:6e:47:
28:92:7c:c3:f7:ff:dd:2d:fe:84:a4:f3:9b:73:08:
c3:0c:47:84:f6:08:6d:fb:8b:6e:b1:c7:3f:8b:3b:
8a:4c:f7:9e:47:78:77:09:24:ee:3c:4a:66:22:e0:
69:ea:eb:2a:19:73:54:88:d1:5c:8a:38:04:ff:8d:
87:30:00:36:57:e1:54:e0:c0:61:bc:71:d8:69:03:
8d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:96:F2:C2:25:BD:97:DB:63:2C:58:51:95:12:59:FB:AA:52:BF:E0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144872.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8ae::/32
Signature Algorithm: sha256WithRSAEncryption
27:2c:c5:e6:cc:f7:b0:89:9b:4c:10:6f:c8:96:cd:81:69:7c:
fa:da:21:b7:6b:3e:46:7b:22:a9:d1:b9:53:a2:63:a6:c4:da:
c5:63:e7:a8:ff:64:30:df:78:49:3d:94:d4:3e:da:e7:cd:e8:
6e:21:ab:75:b0:92:7b:a6:fb:37:ab:6e:26:23:73:ac:61:6a:
9b:bf:f6:3a:35:9d:24:48:c3:71:81:db:c2:a1:90:ed:83:74:
ce:a1:e7:c5:b2:79:0b:d1:20:88:05:83:71:7b:68:aa:6f:50:
d6:28:4a:9d:2a:33:18:3e:8d:aa:71:9d:3f:1e:30:27:79:02:
f8:ae:cb:27:4e:04:e7:21:f2:72:eb:99:b2:38:50:61:df:c0:
cf:2e:80:48:35:87:60:f5:97:ff:2f:cf:12:bb:ae:be:ef:af:
7a:86:d8:13:c1:fb:e4:e7:bb:03:37:cc:5e:fd:0c:be:ad:46:
bf:57:5b:5d:35:ff:5d:ff:9d:08:27:60:f8:bb:ac:2f:d6:95:
bc:2b:39:9b:a4:76:ca:e6:98:67:9c:6b:d0:56:a9:7e:e7:a1:
6c:73:7a:6b:3e:22:ea:98:b1:56:8b:6f:f3:6b:7c:95:3b:11:
49:1d:5e:a3:5b:e4:b6:4d:b0:cb:14:0e:ec:ae:67:6a:9e:6c:
36:13:5b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:42 2026 by rpki-client