Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144884.roa
File: AS144884.roa (raw, json)
Hash identifier: YZN3VnCZEL7nz7ibgwPgVf0zDHnfhuxeqqWSI17LYTU=
Subject key identifier: 6A:01:FD:11:2B:5B:46:4E:E0:25:DB:81:BE:F5:2D:0F:50:D7:F9:FF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5CAEB05F84B198857A1EEEEC92A8803A5CFDF367
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144884.roa
Signing time: Mon 25 May 2026 06:28:34 +0000
ROA not before: Mon 25 May 2026 06:23:34 +0000
ROA not after: Mon 24 May 2027 06:28:34 +0000
asID: 144884
IP address blocks: 240a:a8ba::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:ae:b0:5f:84:b1:98:85:7a:1e:ee:ec:92:a8:80:3a:5c:fd:f3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:34 2026 GMT
Not After : May 24 06:28:34 2027 GMT
Subject: CN=6A01FD112B5B464EE025DB81BEF52D0F50D7F9FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:78:c0:b5:03:20:14:6e:74:a1:48:92:38:83:
65:c3:5a:8b:9c:65:08:23:89:1b:6e:35:f6:c2:fe:
93:0e:b1:af:cc:33:09:8b:7c:91:ac:f8:64:c1:3c:
61:ab:ba:11:74:b4:cb:c9:e0:f4:34:df:0c:25:97:
34:52:2f:d2:1e:3a:c8:aa:6a:95:fc:40:75:c7:da:
8e:6c:bd:16:95:e4:39:99:8a:4d:43:d1:b8:d4:4b:
ed:54:8a:f9:e1:18:ab:28:87:58:c5:4f:d0:ff:ae:
31:e4:ee:64:1f:0a:c0:f7:38:a3:7e:54:c8:32:74:
1c:34:98:46:f1:62:75:26:e8:45:47:e4:1b:58:37:
2c:e8:88:52:e6:0b:02:3c:ef:39:5c:5d:b6:21:1a:
f9:3c:41:66:cf:5b:df:d3:f8:3a:92:3d:85:d2:26:
e2:cc:7b:3d:b6:28:21:8a:2e:20:b7:44:23:8e:0c:
19:4f:23:bf:ff:6c:c6:f7:71:49:ee:33:a9:55:34:
4d:3a:47:69:15:0f:3e:6d:9e:a9:b1:e5:0b:f1:3e:
b2:ad:dd:15:71:ae:f6:a0:38:09:f7:f7:27:70:8e:
1f:e3:e2:42:a5:03:5d:c6:0e:2e:72:a6:9d:c3:ee:
9e:8d:08:2c:a1:5b:ab:a3:16:f2:e4:52:4e:42:93:
5e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:01:FD:11:2B:5B:46:4E:E0:25:DB:81:BE:F5:2D:0F:50:D7:F9:FF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144884.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8ba::/32
Signature Algorithm: sha256WithRSAEncryption
60:d6:cc:a0:54:11:cd:f8:e3:87:7f:83:25:c0:99:b6:3d:43:
a3:0c:1f:69:10:26:5c:1f:ae:73:19:96:75:1f:85:d7:af:c7:
f7:26:dc:60:b8:8c:f7:92:52:06:23:0b:aa:63:13:56:4d:0c:
97:06:97:a7:36:16:cd:57:7b:19:47:7f:48:fe:9b:b6:8c:20:
d4:b7:81:b6:63:ba:d3:fa:d4:57:b9:01:01:08:b3:ad:83:0e:
67:65:55:da:7c:a8:02:34:1c:8a:7e:83:1b:2d:c2:12:b4:2c:
9d:ae:b4:25:b0:66:d7:67:33:e3:a6:50:1b:de:69:e5:5f:20:
12:45:c8:b7:6d:79:c3:48:b4:40:ff:07:80:c1:ba:91:89:eb:
e4:60:24:ba:86:4d:cb:e2:c3:c0:e4:02:8d:86:a2:aa:8a:9d:
5e:66:58:63:6e:a1:ed:65:cf:24:34:d8:22:b2:35:af:93:f8:
e5:8c:ad:72:92:ed:de:40:17:1e:c0:ad:35:50:ef:41:db:9b:
25:3f:42:25:02:04:0c:24:c6:89:10:9c:e1:52:03:a6:12:92:
d6:04:ce:41:29:14:96:fe:a0:97:c9:98:b6:0e:53:20:1e:9c:
4d:db:bc:e2:39:5a:a4:31:c5:8e:9c:42:45:54:fc:6e:83:4d:
fd:7d:12:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:53 2026 by rpki-client