Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144874.roa
File: AS144874.roa (raw, json)
Hash identifier: Jv1l4++ufA1e7ZPAV/VWevcjiktl5JsErGgixcBTheo=
Subject key identifier: 5E:2D:08:E7:BB:F0:20:1F:26:17:BE:BB:41:D8:F2:19:61:1B:7B:8E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1D6226BE811D955BB88174051B12910C5DF04C11
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144874.roa
Signing time: Mon 25 May 2026 03:19:23 +0000
ROA not before: Mon 25 May 2026 03:14:23 +0000
ROA not after: Mon 24 May 2027 03:19:23 +0000
asID: 144874
IP address blocks: 240a:a8b0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:62:26:be:81:1d:95:5b:b8:81:74:05:1b:12:91:0c:5d:f0:4c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:23 2026 GMT
Not After : May 24 03:19:23 2027 GMT
Subject: CN=5E2D08E7BBF0201F2617BEBB41D8F219611B7B8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b1:ed:84:85:1c:43:8e:0b:29:a2:45:18:81:
13:df:8f:8e:9e:d9:ac:4d:96:3d:79:ef:d9:88:d8:
bc:8c:a6:ff:c9:94:10:9b:16:d7:9b:cb:f6:e8:2b:
e5:04:e3:6f:3a:48:a4:db:98:7e:ad:1a:cb:b0:0f:
ce:e0:36:ce:d9:ae:c0:39:43:7d:06:a3:53:45:98:
6f:2c:47:49:65:27:ff:cb:91:51:9c:77:2e:a8:75:
52:ab:64:3a:f2:d9:36:b6:c6:5c:9e:28:5d:5d:d3:
59:b1:f2:f1:1d:22:0a:26:4c:61:13:f8:6f:d3:31:
b2:e2:1f:67:4e:52:30:54:c6:5b:27:ba:77:77:9e:
c0:2c:59:ce:66:fb:ee:d0:93:4c:fd:46:3d:e8:05:
f6:75:92:cf:93:02:42:84:9f:06:91:ec:9d:c9:f8:
1e:ac:6a:0d:29:c7:af:f4:74:3c:2a:42:21:5c:b8:
0e:1e:29:c4:f8:42:55:04:dd:99:9d:22:37:81:d0:
5f:17:a3:92:87:f5:a3:ff:f8:ba:63:21:a2:79:d3:
eb:34:48:19:7b:24:93:29:04:33:64:9c:f1:20:5c:
cb:6f:49:69:bd:39:b8:0c:0f:a1:5d:4d:d5:a9:1c:
08:38:af:fc:00:d4:81:99:ee:02:e3:f4:19:89:18:
9a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2D:08:E7:BB:F0:20:1F:26:17:BE:BB:41:D8:F2:19:61:1B:7B:8E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144874.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8b0::/32
Signature Algorithm: sha256WithRSAEncryption
aa:10:da:23:9d:ac:b9:e7:63:9a:17:fd:a1:8c:56:da:fe:6c:
58:36:8d:50:15:51:30:1d:47:2b:4b:07:2b:9a:be:87:0e:3a:
a6:83:15:28:89:12:b6:3a:02:1f:1b:30:1d:d5:7b:8b:2d:66:
5f:2b:23:b1:0a:c8:39:09:3b:39:89:8e:55:ea:52:ed:90:e2:
be:21:35:fc:1c:92:b5:d3:cd:8f:42:e2:b6:02:3a:9a:3d:8e:
cf:53:40:fa:5f:50:0f:e4:41:2e:78:e2:d3:c3:bf:5d:7b:de:
25:fe:88:d7:46:33:d5:fc:25:25:a3:26:ee:c4:b3:a5:b8:fc:
31:c3:f4:c5:36:72:98:77:36:fc:55:f9:3f:3e:3b:42:67:e9:
f8:7e:70:c0:1b:88:60:10:1e:89:ff:2e:fa:50:81:bb:a3:65:
78:a9:97:a8:7e:29:99:b1:cd:b4:f1:d9:ea:bf:c0:7d:37:4c:
57:16:32:53:4b:8b:11:79:85:82:0b:b9:4d:40:24:0d:a0:40:
dd:c1:80:f1:2f:53:54:0c:6c:73:06:0d:73:02:c8:cc:d6:8e:
9d:fe:96:a2:c1:d5:67:ed:ac:d6:63:44:e0:ce:49:7a:85:01:
c5:b0:88:cd:e9:d7:df:ea:bb:49:bf:bf:42:94:f5:a5:11:ae:
aa:d7:96:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:37 2026 by rpki-client