Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144886.roa
File: AS144886.roa (raw, json)
Hash identifier: 6I7PHFS2YUeoGzT1jd6KnJQTmC9ARdY8fFjXdO7/CTI=
Subject key identifier: 86:8D:C2:F9:BD:B9:26:31:95:FE:B0:EA:EB:C1:4A:B2:6D:37:3C:6E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 03C77A2A8305ED512D6EEB4DE59D31FCCD92C874
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144886.roa
Signing time: Fri 22 May 2026 06:28:04 +0000
ROA not before: Fri 22 May 2026 06:23:04 +0000
ROA not after: Fri 21 May 2027 06:28:04 +0000
asID: 144886
IP address blocks: 240a:a8bc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:c7:7a:2a:83:05:ed:51:2d:6e:eb:4d:e5:9d:31:fc:cd:92:c8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:23:04 2026 GMT
Not After : May 21 06:28:04 2027 GMT
Subject: CN=868DC2F9BDB9263195FEB0EAEBC14AB26D373C6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a7:d2:fd:ca:ae:09:44:14:43:7f:71:18:9a:
dc:16:df:67:c9:ad:20:f2:45:43:c5:ed:35:44:24:
33:f5:97:94:53:43:8b:cd:19:97:ea:b1:cd:ae:a5:
b5:90:a4:c5:9d:b0:3c:f8:17:eb:83:47:80:da:ad:
63:47:11:22:76:e6:14:3e:1f:f6:ca:20:7e:a8:2c:
26:68:c8:b1:15:80:d0:48:08:fd:08:61:d9:ec:e9:
1b:65:58:5a:4d:7a:e3:43:9a:26:06:3d:f3:ef:08:
46:5e:04:a0:d4:5c:f6:92:a6:1e:f4:19:39:d5:14:
dc:cd:c2:9e:60:81:97:9b:53:ce:7b:25:43:07:b3:
ba:7f:ed:26:ff:fb:1a:a0:87:9b:95:be:32:37:c9:
0a:a9:54:b3:05:ee:83:a5:37:2a:fb:fb:bf:0f:fe:
96:e4:82:71:bd:cb:5c:e6:fd:5c:66:99:e3:10:95:
00:41:5a:28:3f:57:98:de:09:11:42:a7:81:83:19:
7b:9c:0b:93:47:f7:46:e1:71:42:6c:c3:07:93:80:
b9:9e:cd:1c:26:18:f0:8c:04:47:0f:2a:5a:be:00:
68:b2:1c:bb:f0:c4:75:50:22:83:54:d1:de:1e:b1:
14:6a:ea:64:ae:60:89:f8:d4:f2:72:7d:db:87:41:
ae:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8D:C2:F9:BD:B9:26:31:95:FE:B0:EA:EB:C1:4A:B2:6D:37:3C:6E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144886.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8bc::/32
Signature Algorithm: sha256WithRSAEncryption
69:61:c9:44:27:6a:9a:cc:cf:6e:f9:8a:c3:bb:01:93:07:0d:
e1:73:a0:2c:59:28:6c:ca:74:d4:b2:ee:b9:81:91:59:33:4c:
43:04:d0:7a:12:66:74:b1:c2:d6:07:f3:20:5e:61:84:9a:ce:
b2:9d:05:3f:9e:d1:6b:4c:28:f1:82:57:92:cd:9c:69:70:cd:
b1:2e:53:96:ce:6e:2d:e1:85:13:11:02:82:ea:36:55:8c:31:
fa:75:65:5f:4b:e3:bf:f5:4d:2c:ea:67:9a:9c:9c:ee:a6:fc:
75:bf:f4:4c:ed:3f:3a:f7:3f:54:20:1f:f1:36:4e:7d:69:67:
fe:d4:84:7f:3b:8c:b2:e3:55:f7:f5:fb:e9:ef:a4:5f:51:47:
43:b9:28:9b:44:56:97:f0:12:a5:25:bf:66:9b:e5:3e:52:91:
f1:bd:44:68:3e:dd:e9:18:17:e6:00:52:e3:5c:cd:09:3d:ca:
e5:6c:a4:b4:1b:19:f0:7a:7d:b9:e8:32:86:05:72:a8:ca:e4:
fc:62:ad:a1:b7:3e:db:7a:0d:e5:bf:e5:a9:31:71:57:a0:b7:
4b:56:05:05:27:b0:ca:05:8b:0b:4f:a9:93:70:68:2b:1e:2a:
f6:e0:e2:ec:80:ee:bf:b0:ef:29:59:92:fb:c5:77:b2:04:58:
db:04:5f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:51 2026 by rpki-client