Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144895.roa
File: AS144895.roa (raw, json)
Hash identifier: SdUuTi2czeUMEwADr5pUXl/dxZD/Tm3xoBiTomXTxvY=
Subject key identifier: CF:6F:30:70:F4:DF:A5:7E:DC:9C:98:D8:DB:35:2F:32:1F:7D:52:58
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 209EF849671A0976A8586BF804C7EC3AD5CA8E7A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144895.roa
Signing time: Tue 26 May 2026 06:31:06 +0000
ROA not before: Tue 26 May 2026 06:26:06 +0000
ROA not after: Tue 25 May 2027 06:31:06 +0000
asID: 144895
IP address blocks: 240a:a8c5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:9e:f8:49:67:1a:09:76:a8:58:6b:f8:04:c7:ec:3a:d5:ca:8e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:26:06 2026 GMT
Not After : May 25 06:31:06 2027 GMT
Subject: CN=CF6F3070F4DFA57EDC9C98D8DB352F321F7D5258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:dc:01:2f:34:6d:fc:19:a3:cf:dd:69:07:
93:cd:de:bd:58:29:23:c4:d1:19:19:9e:e9:20:c7:
eb:4a:0a:14:80:49:0b:d2:ae:5c:9c:db:c4:fc:63:
6d:67:2b:8a:15:72:73:61:f9:03:ad:f1:65:4f:45:
e9:ea:e8:16:78:13:a5:63:4e:a7:8d:37:11:a4:ac:
ad:32:35:b4:61:f7:49:60:c1:ce:89:67:f0:81:50:
64:16:b0:48:f7:dc:b0:d4:d5:c0:ad:84:f0:3f:e0:
99:75:25:f4:e6:a2:c6:a6:64:a6:f0:fe:95:76:37:
82:be:b5:14:49:bc:2d:e6:11:2f:bd:b1:ba:25:86:
cb:d7:2f:0e:db:ed:3f:5d:37:81:92:43:35:29:c5:
8e:ae:cf:f0:87:f1:c6:14:cb:b7:79:52:c9:70:3f:
01:60:64:66:bc:91:8d:9b:d9:fe:b4:fe:27:a9:d4:
ed:c2:06:1c:a7:ad:20:ea:61:08:64:2f:1e:e5:e0:
44:0c:8f:d4:f7:e0:e5:3f:c7:2b:c2:42:d5:f5:97:
73:fe:c7:af:c8:2f:bf:ab:07:6e:da:c6:91:86:42:
aa:41:a7:49:e6:be:99:39:29:54:97:47:c9:95:f4:
3b:20:6e:44:e8:78:d8:76:57:3a:2e:b1:5c:25:e7:
ab:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6F:30:70:F4:DF:A5:7E:DC:9C:98:D8:DB:35:2F:32:1F:7D:52:58
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144895.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8c5::/32
Signature Algorithm: sha256WithRSAEncryption
77:54:96:0d:17:45:44:52:4a:d7:82:5c:89:c3:35:81:2d:ab:
6d:3e:b7:21:52:31:9f:0f:cf:ac:fe:ac:13:b5:fa:d2:29:96:
46:2b:9c:19:b2:7b:e0:1b:7a:ea:16:9f:99:0f:2f:67:47:32:
66:66:2f:4c:ad:38:8b:47:95:79:71:1f:e7:06:f1:46:df:92:
4a:9f:ed:12:5f:8f:53:73:5f:07:ef:1d:df:f3:f3:39:f8:0e:
1f:fa:54:74:e9:b8:42:ac:67:64:9e:04:da:ad:42:95:e2:ca:
e8:72:c5:b0:b3:b0:88:d2:34:a9:60:cf:ef:04:6a:63:04:0f:
a8:9f:67:34:2a:88:23:ea:e5:a0:e0:87:fb:f0:e9:02:cb:01:
8f:fa:5d:d7:b9:c7:7a:25:7a:07:af:b9:53:09:b6:ca:b7:29:
e6:b7:3f:e4:a1:05:a1:fc:95:bd:7d:1b:6c:5b:a9:65:2f:9c:
8a:b2:15:7c:a4:fa:7e:66:9a:21:eb:19:63:0f:08:8b:f3:17:
2c:df:37:c6:6e:2e:b4:89:a2:06:38:46:e4:08:1e:07:e4:fb:
91:2d:60:bd:52:b9:4f:18:c0:da:b8:f6:38:f5:e1:d6:1a:cc:
a7:81:d1:30:14:c6:7c:d9:fc:12:d4:fa:7f:d8:db:62:3a:15:
9f:34:fe:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:44 2026 by rpki-client