Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144877.roa
File: AS144877.roa (raw, json)
Hash identifier: rm0EdvWwybHBT7U+HIZCou5g/ibup/6/GaysoKsozSI=
Subject key identifier: 59:22:13:F2:12:28:58:A8:60:95:A1:34:76:BB:87:82:24:D6:30:2F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 55C7F39E9E64F95E564BE329D7961197EE9F237F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144877.roa
Signing time: Mon 25 May 2026 01:50:58 +0000
ROA not before: Mon 25 May 2026 01:45:58 +0000
ROA not after: Mon 24 May 2027 01:50:58 +0000
asID: 144877
IP address blocks: 240a:a8b3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:c7:f3:9e:9e:64:f9:5e:56:4b:e3:29:d7:96:11:97:ee:9f:23:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:45:58 2026 GMT
Not After : May 24 01:50:58 2027 GMT
Subject: CN=592213F2122858A86095A13476BB878224D6302F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:22:09:3a:02:79:a3:22:39:d4:a3:2c:fb:
7d:be:0b:5f:a7:8c:cf:5a:fd:ef:9c:bd:9e:1e:e6:
70:6d:5f:bf:a8:9c:df:cb:6e:bc:d7:fa:62:20:6e:
ed:be:e6:06:69:1c:5a:12:ce:fb:19:17:25:ce:e0:
2d:b3:62:9a:d5:c9:a8:73:85:22:ed:77:75:ab:57:
e3:ec:53:7f:9c:d0:00:84:09:7a:e5:2b:ce:e4:d7:
46:99:d2:09:4e:10:35:70:bd:02:8d:bb:06:23:4d:
80:c0:21:64:b0:64:ad:b4:19:27:f5:27:a1:ed:11:
83:5d:9d:24:35:54:a9:dc:87:37:11:a5:d8:fb:a8:
f1:c3:2a:cf:ea:de:6e:9f:2f:22:97:1a:6c:95:7b:
5a:e6:32:0d:77:1a:c3:0a:61:63:42:d9:e2:78:92:
01:2e:63:5f:a4:d5:44:21:0d:23:a7:79:2e:87:aa:
f9:2b:24:27:08:44:0f:b7:27:a8:db:7a:1a:95:17:
5c:aa:df:b3:07:12:d5:b9:0a:87:c1:8d:f8:38:1c:
60:1c:d6:03:44:83:e7:27:8e:f1:38:e9:6e:14:d0:
79:f5:15:63:7b:2b:e7:e3:56:89:6b:45:28:f9:0e:
46:36:48:e8:bb:36:9c:4c:80:19:27:8e:69:79:83:
bd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:22:13:F2:12:28:58:A8:60:95:A1:34:76:BB:87:82:24:D6:30:2F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144877.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8b3::/32
Signature Algorithm: sha256WithRSAEncryption
8e:a6:0d:de:c0:4a:cc:f5:97:18:ed:f4:fb:0c:d5:da:2b:d0:
2a:52:70:aa:6f:68:95:7e:d8:0d:01:d2:ed:31:9d:1b:91:10:
ac:64:ca:5a:61:7f:ec:c1:5f:3b:b7:23:d6:a8:23:be:03:44:
d2:78:be:d2:57:be:0c:5e:66:6f:b2:cb:05:77:55:2d:6b:b3:
17:12:9f:67:37:30:4c:c5:d6:67:55:8f:74:da:09:6e:8f:b4:
78:c0:9e:0b:84:ca:0b:c5:c4:9e:36:54:0c:2d:31:41:63:40:
99:56:70:b6:a4:cf:27:5e:15:77:eb:13:e2:07:e7:69:a5:ea:
d8:d3:84:b9:bd:14:ba:62:36:b0:c7:57:c6:7c:11:f7:68:06:
6a:44:47:f4:1f:0d:41:99:ee:62:f9:ec:81:5e:39:c8:09:01:
f3:23:7c:eb:7d:a4:d3:0e:14:ae:9b:29:73:ce:2f:9a:b9:87:
10:ee:c3:d0:cf:b4:49:1d:10:6d:72:37:6f:35:cb:9b:00:8a:
01:16:3c:9f:33:cb:cd:f5:45:43:e5:9a:54:06:1e:00:2c:f1:
43:47:50:69:b1:4b:27:bd:57:ac:e1:fb:43:f6:01:59:e8:bd:
92:46:fa:42:37:36:0a:6c:e1:2b:27:51:7a:e4:4b:aa:32:1d:
f1:65:fc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:37 2026 by rpki-client