Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144892.roa
File: AS144892.roa (raw, json)
Hash identifier: S+zWcIpR9dWt/uQzyBjiWlZLMzkcXdJwmSADlQxL1cE=
Subject key identifier: C1:13:FF:29:FC:34:5D:D4:4C:4A:8D:0C:08:AD:C2:3B:FF:F7:E9:8F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5D448F6C1133CA5BDCDFA58606BE128E9C520B9C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144892.roa
Signing time: Tue 26 May 2026 03:16:50 +0000
ROA not before: Tue 26 May 2026 03:11:50 +0000
ROA not after: Tue 25 May 2027 03:16:50 +0000
asID: 144892
IP address blocks: 240a:a8c2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:44:8f:6c:11:33:ca:5b:dc:df:a5:86:06:be:12:8e:9c:52:0b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:50 2026 GMT
Not After : May 25 03:16:50 2027 GMT
Subject: CN=C113FF29FC345DD44C4A8D0C08ADC23BFFF7E98F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:dc:43:be:05:51:e9:df:ba:42:ec:c7:5c:
48:82:43:c5:af:d3:c3:99:14:72:89:75:c2:b6:34:
53:23:a5:cd:c0:dd:20:06:44:16:ef:5c:92:70:01:
af:d5:d4:e2:cb:1c:8a:91:bb:12:e8:d8:e4:aa:02:
23:56:3e:5f:4e:eb:03:2f:1b:82:22:77:a8:e2:d0:
a2:f2:a4:26:3f:e7:2d:c9:ad:66:32:8c:f0:fd:c9:
3f:bc:e3:67:47:4d:34:73:ab:cc:7e:c0:47:1e:9d:
1e:77:95:2c:d8:5b:90:45:4c:30:da:2f:04:20:7b:
97:14:f3:52:4e:8c:91:91:53:a0:2b:f9:42:bd:5d:
55:cd:7e:d1:91:6c:2d:c0:b9:6c:30:01:fa:cc:ef:
a4:0e:34:96:5e:83:8d:c1:24:7b:15:d3:37:95:19:
15:c0:2f:5b:13:a8:7c:ab:01:71:8d:d2:67:4c:b3:
41:56:29:47:47:6e:0a:8d:ea:3c:80:23:ab:39:df:
f2:ce:b4:21:bc:d8:e4:4d:c7:71:ce:dc:e4:28:6b:
9f:cf:73:29:46:74:cb:b6:36:60:fa:cd:18:fd:e5:
a3:c8:c5:ad:3a:2c:8b:3a:7d:05:35:0b:5a:5d:f3:
d0:a6:fc:23:89:b7:2f:a2:23:9c:16:55:e5:a3:64:
83:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:13:FF:29:FC:34:5D:D4:4C:4A:8D:0C:08:AD:C2:3B:FF:F7:E9:8F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144892.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8c2::/32
Signature Algorithm: sha256WithRSAEncryption
37:53:38:7a:47:b3:2b:8c:7f:9e:ec:1b:f6:3b:2b:1f:f5:15:
33:30:20:13:c5:10:db:7c:86:a0:03:c0:a4:e0:e6:f2:75:68:
2b:86:ef:da:72:58:44:7f:4a:5b:57:d7:ab:22:ba:fd:66:14:
8b:e0:4f:3f:bf:96:98:3d:6a:c5:63:e1:6e:f6:db:57:ce:3d:
05:4a:11:1d:4e:43:94:17:79:d8:07:10:54:66:c0:6f:4e:bf:
58:51:f4:5f:cb:f6:c3:4b:91:f9:9f:b9:cb:13:fe:27:37:d6:
64:d0:23:4c:ea:92:8a:80:f8:49:cc:fe:06:83:3c:20:68:b5:
1d:e7:b2:c7:ff:b3:43:37:fb:3c:e4:45:38:0c:82:29:e0:43:
bf:ff:9b:fc:38:e0:58:2d:2a:51:89:70:af:73:f1:63:3a:da:
71:60:75:9d:50:97:1d:f3:bd:a1:a6:73:56:ee:00:65:46:09:
fe:48:1d:7d:0a:33:62:a6:79:7b:b6:b7:c2:29:9d:05:f1:87:
f5:79:b4:1b:2d:8e:42:72:86:f6:03:8e:37:f7:e3:67:36:17:
6d:fc:76:3c:c6:51:05:38:55:98:35:ad:5c:e2:f8:14:a1:20:
38:4c:5d:b4:a8:c4:4a:f7:07:5e:4b:46:1b:42:bf:60:9f:ca:
37:b9:2b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:58 2026 by rpki-client