Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144894.roa
File: AS144894.roa (raw, json)
Hash identifier: fHWSJbWe8nzxZlonEhe/tL0i9wzY9IsVGaTfSPfDdb4=
Subject key identifier: 11:D3:37:74:57:58:7F:A8:9D:AF:B0:23:9A:3A:AA:FD:E0:33:6D:03
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7185DAAE393F215E4409231FDA90E4EB48A91C94
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144894.roa
Signing time: Tue 26 May 2026 08:52:48 +0000
ROA not before: Tue 26 May 2026 08:47:48 +0000
ROA not after: Tue 25 May 2027 08:52:48 +0000
asID: 144894
IP address blocks: 240a:a8c4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:85:da:ae:39:3f:21:5e:44:09:23:1f:da:90:e4:eb:48:a9:1c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:48 2026 GMT
Not After : May 25 08:52:48 2027 GMT
Subject: CN=11D3377457587FA89DAFB0239A3AAAFDE0336D03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:da:ef:68:7d:e1:18:2e:9d:37:df:49:d8:98:
8d:d5:14:b4:58:05:e5:15:8b:ba:24:c9:6d:54:0c:
01:0c:ea:48:6b:f8:3c:1b:6e:89:d0:0f:6b:83:fe:
04:dc:ea:2b:b0:21:72:61:09:1f:11:e6:4e:97:47:
b4:f5:b8:78:72:e6:c0:96:80:75:bf:b3:d6:3c:c8:
53:33:36:9d:70:ec:68:6f:e9:df:5a:e9:3b:30:9f:
50:40:d6:34:3d:40:a5:fa:3b:17:94:8f:65:e5:1f:
b0:83:61:05:26:9c:ef:57:0e:d5:25:4b:25:f6:65:
2c:b0:6f:89:78:39:00:f6:00:ff:a3:5b:b0:cf:17:
90:1e:aa:fa:bf:87:8c:ce:0e:cb:46:7f:2a:c4:12:
6e:93:07:38:14:82:bb:d5:e5:62:7b:fd:a0:bb:34:
6e:01:aa:2c:0f:b0:3f:ef:5f:52:c2:f7:4e:3f:14:
96:71:fb:04:da:54:87:f4:8f:b9:d8:76:26:2d:46:
01:4d:8b:16:04:99:7f:c6:8a:46:5d:7d:dd:d2:ee:
03:e9:ec:dd:14:8d:c4:31:62:35:f8:0e:43:bb:72:
7f:76:a6:a3:e7:17:d4:d0:94:c8:b2:c8:ab:a1:08:
f8:13:7b:ae:df:61:d3:84:a1:d5:d8:09:2a:ba:e8:
46:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D3:37:74:57:58:7F:A8:9D:AF:B0:23:9A:3A:AA:FD:E0:33:6D:03
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144894.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8c4::/32
Signature Algorithm: sha256WithRSAEncryption
b9:a1:c4:9c:43:c6:1b:0a:d1:8c:4f:48:f7:48:8b:98:fa:85:
fd:67:06:43:f5:87:07:a3:cf:16:72:6f:46:d1:0f:50:6f:5f:
2d:0a:b1:f6:b1:cc:9f:9d:8f:32:2e:11:53:b3:d3:51:a6:fe:
9a:4c:90:6d:4f:e0:b0:4f:bc:ce:99:df:09:9e:12:6d:08:44:
b2:21:6a:14:32:54:7b:b9:88:18:e8:01:9e:f0:c1:a6:b8:58:
01:0d:2c:fd:e4:14:4a:69:fc:71:0b:ac:a3:95:46:c8:b7:8b:
f9:12:b0:ce:02:23:4f:77:9e:65:7b:13:b4:cc:0a:10:b8:6d:
92:fe:79:9e:0d:79:a7:c5:14:70:3b:19:46:cf:75:01:38:af:
8a:08:7b:83:bf:46:8c:5a:a3:93:53:e5:b3:9f:09:50:a8:f8:
fb:d0:be:25:fb:a3:7a:9a:6e:13:6c:d3:b1:e5:71:c3:18:3e:
b4:07:40:39:18:ee:91:11:87:fe:0e:2f:fc:06:de:89:3e:c0:
da:e3:03:df:a7:98:18:de:8e:04:3c:23:7b:6b:47:59:dd:f2:
04:9d:16:2b:4a:9f:e2:88:bc:aa:31:05:52:30:31:f8:20:a8:
1d:ff:98:be:98:1c:1f:81:b9:38:d2:4d:73:41:bd:e0:1c:25:
e6:39:3a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:02 2026 by rpki-client