Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144883.roa
File: AS144883.roa (raw, json)
Hash identifier: pa8diEMnNN5v2VctB1zMNfjm5LR/3WtPZnjFLD9Sj1c=
Subject key identifier: B2:DE:8E:78:B1:D0:F1:A7:1A:00:80:F5:C6:81:D0:2D:91:46:2B:8D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 211625D29F790C15C317E96FD89333666EF5CE77
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144883.roa
Signing time: Fri 22 May 2026 04:08:28 +0000
ROA not before: Fri 22 May 2026 04:03:28 +0000
ROA not after: Fri 21 May 2027 04:08:28 +0000
asID: 144883
IP address blocks: 240a:a8b9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:16:25:d2:9f:79:0c:15:c3:17:e9:6f:d8:93:33:66:6e:f5:ce:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:28 2026 GMT
Not After : May 21 04:08:28 2027 GMT
Subject: CN=B2DE8E78B1D0F1A71A0080F5C681D02D91462B8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:56:e8:77:6c:81:d8:96:bd:75:d9:10:94:
52:69:7a:99:de:1a:ec:ea:50:0c:fc:1e:df:77:07:
27:35:d3:44:40:b1:14:5f:74:67:97:e2:62:9d:8f:
e9:4b:a0:b8:3a:1c:45:74:d0:c1:22:ab:91:aa:cd:
1d:ac:d7:d0:a6:c7:be:3c:2b:85:52:d8:93:d7:b0:
81:ac:50:5e:3b:50:70:3a:7c:55:ae:b6:84:9a:38:
e7:2a:9b:06:fa:c9:06:b3:45:43:6e:05:a9:eb:e2:
2d:b2:32:fe:75:c9:68:85:df:c8:2e:35:19:c2:78:
ba:96:52:5a:07:85:fb:86:3f:78:31:1c:08:d9:c3:
b7:2b:13:92:b2:5a:4f:fd:98:b6:c8:99:f5:b7:9b:
ba:ba:1d:cd:07:35:7d:41:e1:b7:e8:94:c4:7f:4a:
49:73:b4:e1:a5:da:48:59:31:ed:5c:9c:ad:11:4f:
be:16:2f:82:45:7c:0b:66:7d:14:a2:42:77:a0:53:
c7:63:12:b8:48:bb:28:6c:d5:95:34:61:08:c4:6a:
38:45:3e:54:0f:ba:de:91:6d:e9:fd:5a:e2:f5:ee:
88:90:ba:49:40:d9:ce:e2:6a:c8:07:18:30:8a:ff:
98:5c:ab:d1:43:7f:0c:6f:de:32:0a:20:58:2d:b3:
10:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DE:8E:78:B1:D0:F1:A7:1A:00:80:F5:C6:81:D0:2D:91:46:2B:8D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144883.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8b9::/32
Signature Algorithm: sha256WithRSAEncryption
7e:87:66:e5:ee:83:3a:26:c5:86:7f:12:03:3d:bd:56:07:80:
1f:f6:61:11:1e:2f:e6:0c:ba:5a:6a:fe:be:84:8e:93:dd:53:
21:6e:ad:a0:b5:82:b5:b7:93:41:33:1e:45:e8:cf:8a:a5:52:
4e:b5:35:4a:e3:26:4d:60:e2:07:6c:5a:51:c5:bb:b2:98:c9:
8f:c7:05:7f:8b:f1:bb:94:f9:61:55:ac:0e:2f:0f:e8:54:8a:
f3:fd:b2:44:e6:f4:f4:bf:9a:24:12:6f:82:57:1c:ea:7b:77:
ed:8b:cc:80:73:c9:c8:ba:24:9c:de:3d:b0:f5:55:72:d8:f4:
62:be:cd:67:13:5e:0d:d5:6e:77:fd:93:65:2e:c6:e4:59:ce:
1d:73:76:57:4b:6d:22:b0:63:bb:44:6f:ca:54:1e:6a:87:26:
da:9a:40:c6:5f:a1:e0:90:04:0f:36:da:2b:3d:de:24:b8:7a:
a3:68:4a:6a:37:46:a2:fb:3c:b2:28:a6:14:67:9d:cf:ac:43:
3a:fc:eb:3d:f1:71:b2:aa:61:1b:38:f4:ff:a6:05:8f:ec:e8:
ba:db:98:80:44:0c:c7:56:6a:48:7a:db:17:3a:4d:d2:dd:92:
26:65:96:4e:b0:54:e7:73:06:1c:8b:17:10:03:21:31:08:5e:
ba:3a:f8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:58 2026 by rpki-client