Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144873.roa
File: AS144873.roa (raw, json)
Hash identifier: bKY0uABaJW41kbqUtQs9ZhQWmtnOBDsXSYZI9iTgb14=
Subject key identifier: 4A:DD:41:BF:36:95:65:16:69:55:44:B5:BE:4D:8F:67:AE:69:34:2E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5546321FB6655A2CAC2EAF14377EED1F90FF64AA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144873.roa
Signing time: Tue 26 May 2026 06:12:59 +0000
ROA not before: Tue 26 May 2026 06:07:59 +0000
ROA not after: Tue 25 May 2027 06:12:59 +0000
asID: 144873
IP address blocks: 240a:a8af::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:46:32:1f:b6:65:5a:2c:ac:2e:af:14:37:7e:ed:1f:90:ff:64:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:59 2026 GMT
Not After : May 25 06:12:59 2027 GMT
Subject: CN=4ADD41BF36956516695544B5BE4D8F67AE69342E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:47:aa:10:e5:55:f3:2b:d5:63:8d:6e:0e:
67:e5:5d:73:b5:4e:3a:cb:d2:6e:21:d3:48:1b:f2:
7e:27:aa:8b:a9:c1:ff:b2:db:96:b9:a8:0a:36:95:
1e:57:15:a6:13:b8:70:1f:6c:68:41:9e:f8:32:a5:
15:aa:d3:e7:5d:27:d6:d7:89:cd:1a:27:4f:89:9f:
4d:f7:72:00:f6:2d:08:ce:38:d6:74:8f:5f:f5:01:
b3:0c:07:83:f1:77:71:29:da:f5:80:09:4c:b0:09:
d7:a6:33:d7:51:19:5f:d7:17:9c:94:64:a4:a7:a0:
81:b8:22:17:1f:17:22:28:f8:27:59:1a:fb:00:77:
be:38:57:a6:88:17:58:8f:89:b0:12:88:f2:1e:93:
c2:25:c5:bb:13:b4:93:61:25:fe:a3:ff:93:e6:ce:
29:e3:48:b8:c2:6c:85:de:5e:d6:9e:8c:8a:50:68:
e7:db:ff:19:1b:ef:7b:92:68:0f:87:4b:61:c0:10:
dc:ae:36:b9:77:c1:2d:b3:64:d9:76:4e:8f:d7:a4:
e0:40:7d:ee:e0:be:ef:ef:8f:6f:62:22:55:3e:5b:
c4:75:2c:0a:a3:c4:b7:3a:f6:13:c8:41:75:93:4c:
6d:5c:c7:18:95:0a:99:86:8d:9d:10:0e:96:e6:c6:
90:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DD:41:BF:36:95:65:16:69:55:44:B5:BE:4D:8F:67:AE:69:34:2E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144873.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8af::/32
Signature Algorithm: sha256WithRSAEncryption
3f:23:33:92:e1:31:41:aa:67:a6:00:47:5a:55:0a:6c:b8:41:
37:2c:49:74:9d:a2:bc:95:c6:10:26:9e:8f:54:46:d4:34:75:
60:12:ed:92:bf:b8:31:fe:65:df:2b:48:a4:25:78:53:13:7d:
5a:c2:81:2d:a8:8a:35:91:a5:5b:ec:a7:6a:05:9a:34:2d:53:
ad:33:49:56:9a:b9:22:95:e2:a4:fe:fd:b3:a5:54:85:e2:e3:
5a:a0:fb:af:87:47:cd:51:12:7f:fe:da:66:81:5c:85:15:a7:
1a:08:fe:da:d2:57:b0:e8:76:e0:2e:82:78:11:91:58:09:ca:
ec:30:82:dd:3e:c2:2a:3a:9e:70:19:c5:99:0d:aa:29:c1:c0:
b3:14:e4:9b:f9:f9:65:2b:ac:3d:b3:a1:f1:3a:cb:6f:5d:d5:
05:ff:9c:f7:69:5b:4c:cf:eb:b1:09:2b:2d:05:6b:66:cc:be:
32:36:2e:23:b6:8a:c1:31:a8:d5:89:7f:3e:b3:07:f8:72:ca:
2d:d4:94:93:c0:b2:cc:83:df:ca:82:ec:91:80:c5:f3:1a:68:
37:46:8d:22:e7:1e:c1:af:31:5c:41:ba:e6:48:3f:b4:80:e4:
0c:d4:1b:1f:99:a9:2d:de:ac:f6:c6:b5:3f:4b:28:73:cd:5b:
49:08:34:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:59 2026 by rpki-client