Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144893.roa
File: AS144893.roa (raw, json)
Hash identifier: Pz7lZQo4UC9JEvLtghRGMVQ+OtDlF3zpYCnccEow0W4=
Subject key identifier: CA:18:05:6E:BC:FA:B3:81:8F:2D:16:53:90:2D:72:68:26:0B:A1:61
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6D23097D767A3C1542C99265D36966837336F173
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144893.roa
Signing time: Mon 25 May 2026 06:28:34 +0000
ROA not before: Mon 25 May 2026 06:23:34 +0000
ROA not after: Mon 24 May 2027 06:28:34 +0000
asID: 144893
IP address blocks: 240a:a8c3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:23:09:7d:76:7a:3c:15:42:c9:92:65:d3:69:66:83:73:36:f1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:34 2026 GMT
Not After : May 24 06:28:34 2027 GMT
Subject: CN=CA18056EBCFAB3818F2D1653902D7268260BA161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:47:95:b1:7c:03:d8:dc:8b:06:68:f5:a0:c8:
09:a5:91:00:50:f9:42:51:5f:a6:7c:5f:0f:d6:11:
37:d1:91:59:a8:cd:e5:d7:6e:e5:2b:a1:9b:a0:e1:
70:45:c1:c7:d1:6c:28:83:fb:e5:cd:ff:a4:e1:57:
cd:eb:12:89:74:8e:5f:97:75:ce:d0:92:77:cb:58:
80:53:a1:9b:8d:ad:4f:0b:fc:01:93:51:08:28:7e:
76:d2:23:b6:2f:5e:3e:cd:08:1a:6a:9a:bf:45:71:
37:56:5b:32:d4:86:66:a2:74:24:f4:62:49:bc:9f:
ba:3e:24:02:1d:51:0a:a6:67:a7:d0:20:95:20:ee:
43:49:9d:0b:ae:eb:72:ba:8e:0d:71:04:4d:56:d3:
71:8a:a1:08:17:56:b8:73:71:9f:bc:3b:4f:ad:5a:
c4:2a:0a:8a:8e:3e:fa:cf:e4:ec:d4:85:e4:56:a8:
51:50:dd:d9:a1:fa:55:15:2c:0e:fb:2e:57:77:cc:
d4:3b:c7:f0:0e:66:41:54:99:7f:60:4f:3d:83:09:
52:44:bd:51:47:7e:cd:0f:33:2b:de:ed:87:ea:34:
f5:86:a8:e9:c9:c2:26:56:26:7e:df:6a:26:a2:00:
42:0c:fd:c0:2a:6b:1d:8e:59:a9:a1:c8:e1:f5:58:
b5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:18:05:6E:BC:FA:B3:81:8F:2D:16:53:90:2D:72:68:26:0B:A1:61
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144893.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8c3::/32
Signature Algorithm: sha256WithRSAEncryption
13:88:dc:e1:74:6f:f4:97:e8:eb:87:4d:a4:02:59:da:41:ca:
9f:b2:ab:a9:f1:d0:8a:d0:90:9d:71:75:3b:bf:68:1a:30:ca:
d5:34:60:65:14:86:51:8a:35:b3:98:fd:28:8a:29:27:4e:39:
cc:c5:b0:f1:5e:d8:37:54:4a:70:f2:f8:08:9f:84:21:1d:a1:
9f:56:69:d1:92:ee:90:f2:11:c4:ae:2c:3f:19:5d:b6:74:f0:
ae:3e:34:9e:89:c7:82:93:34:28:14:75:5c:c5:ef:94:85:86:
6a:6e:bc:6e:8a:0e:d8:d0:f9:37:64:c1:99:49:e1:b8:1b:d7:
97:19:24:a5:57:b7:08:af:ae:26:6a:d4:db:88:48:89:58:b5:
c0:e5:d6:01:dc:1e:03:61:b6:85:6d:64:e7:00:9d:72:d1:f1:
1e:42:03:52:5d:30:99:d6:96:bf:6e:1c:20:17:89:a7:b2:1b:
d4:b6:0f:ed:ef:bb:ad:71:b5:28:95:55:75:2d:52:a7:18:e9:
58:6d:e5:1e:39:31:bd:50:18:49:fb:8e:65:62:26:ff:e9:8a:
b9:a1:10:4b:3e:fa:d0:e1:e1:fa:ac:21:43:e2:de:ce:9e:55:
33:15:26:0b:f6:a2:34:37:98:d7:bc:52:a3:90:a7:9c:e8:15:
fe:c9:04:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:28 2026 by rpki-client