Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144885.roa
File: AS144885.roa (raw, json)
Hash identifier: szlqi5niwWq/AFHxvlHXIPv66KHhr9sgtjjdJgNrwxE=
Subject key identifier: A1:9C:E6:4E:FD:0E:04:3C:EC:F9:6F:6E:E7:9E:B7:0A:80:85:D6:AB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 32AA9B1F8C3AC88F91F377096C0B8DF658AD74A3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144885.roa
Signing time: Fri 22 May 2026 06:27:54 +0000
ROA not before: Fri 22 May 2026 06:22:54 +0000
ROA not after: Fri 21 May 2027 06:27:54 +0000
asID: 144885
IP address blocks: 240a:a8bb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:aa:9b:1f:8c:3a:c8:8f:91:f3:77:09:6c:0b:8d:f6:58:ad:74:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:54 2026 GMT
Not After : May 21 06:27:54 2027 GMT
Subject: CN=A19CE64EFD0E043CECF96F6EE79EB70A8085D6AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:35:67:38:59:85:af:70:06:b6:f1:db:c8:fe:
34:cb:80:cc:b0:4c:d4:1a:ea:fd:81:d6:a1:76:4a:
06:5e:7d:c3:e5:0d:90:bb:9f:fb:fc:a0:e1:95:a0:
f7:f2:53:30:9a:9c:ab:b0:ca:86:5d:2c:cf:d2:11:
83:f7:fd:ce:0b:a9:8c:17:ec:89:2c:43:c9:43:25:
3a:11:01:80:3d:9f:a6:0d:f6:ac:0e:89:68:f4:8c:
05:84:16:4b:2a:02:0e:43:65:b1:32:ab:5e:a4:49:
3c:fc:73:92:1e:a6:e2:3c:70:55:72:12:9f:88:ce:
5b:aa:57:fc:c8:fc:9a:6c:ac:32:d0:ad:ab:b8:c0:
46:21:9a:d8:f2:df:ed:92:8a:2d:f8:3d:fb:20:78:
6f:d1:de:6f:fe:d8:de:1a:3d:1b:7d:f8:2c:23:17:
24:59:72:cf:6a:9d:be:76:87:e9:b9:67:42:05:6e:
fb:8f:cf:ae:66:37:98:37:a6:27:85:10:03:51:28:
fa:e1:7c:cc:dc:c7:46:db:ab:36:b0:ff:d5:5f:3e:
9d:ce:ad:d0:99:27:42:2f:30:34:86:94:67:b8:df:
6a:76:28:84:3a:15:51:ad:ad:72:71:1e:01:77:db:
41:19:70:98:72:15:91:c2:8b:a0:0c:19:df:cd:ec:
b5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9C:E6:4E:FD:0E:04:3C:EC:F9:6F:6E:E7:9E:B7:0A:80:85:D6:AB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144885.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8bb::/32
Signature Algorithm: sha256WithRSAEncryption
aa:50:a1:3e:c6:d1:a7:27:da:3d:9a:29:6a:b1:5d:14:41:79:
67:c7:13:13:d9:42:a0:4f:e5:b3:48:ae:11:de:87:10:08:43:
c1:cf:66:f8:bf:d3:5e:8e:f4:de:5b:9a:bc:2b:38:3e:d9:bc:
0e:3d:f5:5a:02:35:bf:42:5b:71:7d:03:56:1e:28:05:85:c4:
ed:e3:5a:58:82:ce:e4:07:cb:40:a2:4b:97:c9:94:c8:84:58:
92:2e:1d:c1:3a:93:53:29:4f:85:0e:05:4c:d1:8d:a4:80:00:
d4:2e:b6:f8:c0:24:f8:8b:bc:0d:2b:af:ae:ef:e3:ce:76:fb:
61:79:cd:4b:e9:0c:b7:93:55:1a:46:7e:b3:62:9e:17:7a:7a:
bb:a0:03:fa:ba:17:a3:fa:6a:2d:4d:fa:d2:19:3a:5e:1f:b0:
11:2b:14:f2:62:70:34:27:5f:1b:8c:49:1e:ad:2c:54:0f:7f:
48:3e:b2:ba:44:09:d9:e0:06:54:ba:1f:ad:ee:14:40:86:17:
fd:e0:41:ac:08:29:f3:e8:b0:3a:bb:e9:54:b5:97:32:5f:a8:
2b:85:f7:8e:0d:f2:7e:8c:06:18:83:27:f5:8a:fb:b3:8e:53:
9b:32:ea:83:14:2e:00:fb:65:95:68:0f:99:41:6d:4b:36:48:
07:d7:5e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:30 2026 by rpki-client