Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144900.roa
File: AS144900.roa (raw, json)
Hash identifier: 3U3DlxpxbquEanPRj01k7fwVFAgmB7dOzu8CXvh9kmQ=
Subject key identifier: 4E:B6:24:7D:FE:07:A8:46:C1:BA:DD:C1:D2:81:10:28:68:36:83:4B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7E3074ED2B44FB82EEEA26B2B1610FE46E0E8371
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144900.roa
Signing time: Fri 22 May 2026 06:58:52 +0000
ROA not before: Fri 22 May 2026 06:53:52 +0000
ROA not after: Fri 21 May 2027 06:58:52 +0000
asID: 144900
IP address blocks: 240a:a8ca::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:30:74:ed:2b:44:fb:82:ee:ea:26:b2:b1:61:0f:e4:6e:0e:83:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:52 2026 GMT
Not After : May 21 06:58:52 2027 GMT
Subject: CN=4EB6247DFE07A846C1BADDC1D28110286836834B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:8c:9e:c1:e8:0f:02:f6:cb:f9:ca:01:65:
c1:11:d8:2e:a8:36:07:0c:0e:aa:4e:15:9b:df:4b:
23:06:d1:3a:97:64:26:f4:03:04:ff:bb:2b:01:16:
36:74:a0:ae:ac:d9:47:f0:78:83:9a:8d:52:27:d5:
fc:a5:d7:01:38:41:35:7f:4f:aa:fa:be:1c:13:3d:
36:d4:a4:65:ec:33:c1:45:1c:e8:59:1a:d2:1b:02:
b8:80:8f:da:7b:00:20:b5:2b:87:61:ed:11:bc:9c:
28:91:e5:03:e5:30:8d:ee:bc:e7:4c:4d:36:3d:c0:
ea:e9:84:e9:08:8f:1a:20:08:e5:d5:40:02:00:84:
29:5c:5a:75:1c:e2:3b:9a:a8:e8:23:a1:c3:46:e7:
4c:86:78:7b:03:59:48:f9:85:51:ff:b5:bd:47:a0:
95:62:a6:90:9e:bb:c8:93:55:31:50:fb:03:e1:75:
dd:53:97:cc:99:06:f3:11:c8:16:38:7e:70:1d:ae:
a0:54:95:ef:c3:e2:ba:6d:52:3e:ac:0f:d3:1c:f0:
37:2c:f4:4a:f0:00:3c:e7:4d:6b:11:2f:4f:c2:04:
3f:32:1e:b9:07:78:63:88:88:a0:c3:ad:3d:89:dd:
e0:1b:ac:51:02:8f:27:d4:d1:07:de:e1:02:2d:b1:
69:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B6:24:7D:FE:07:A8:46:C1:BA:DD:C1:D2:81:10:28:68:36:83:4B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144900.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8ca::/32
Signature Algorithm: sha256WithRSAEncryption
95:15:5c:0d:75:03:ff:4e:7a:73:4a:06:25:05:af:cc:e5:a6:
4b:b6:57:09:b4:7d:16:a0:41:c0:92:70:13:3a:94:23:9e:0d:
49:1d:b4:24:31:97:32:b1:1e:d8:bb:30:59:57:72:62:5c:90:
8c:f8:52:fd:af:f4:07:48:60:ab:3f:d0:df:eb:14:11:ab:e5:
89:30:eb:af:a6:6b:90:7b:de:4d:f6:f2:fe:85:70:96:84:34:
e5:ee:c0:e9:2d:9a:71:ce:97:e9:42:15:91:40:a2:85:c5:91:
ed:8c:ec:2e:95:ed:99:70:26:fa:55:cc:0e:6f:bf:5d:c8:ed:
b3:d8:29:7f:8a:07:3c:06:ef:ea:d0:e3:6e:2f:5a:94:45:31:
b7:e9:41:9e:ad:74:1c:16:4d:a2:1d:e7:40:f7:57:f7:52:b7:
86:3b:d1:50:05:f9:07:be:a0:47:3d:a9:be:d7:f7:e0:3d:cf:
f5:1a:1d:0b:91:cf:5f:bc:f2:4c:94:9d:64:35:ff:5b:31:ae:
49:db:4d:5f:88:9c:6c:bd:35:ef:fc:99:80:0a:6c:67:36:58:
12:11:ca:94:c0:5e:3f:a1:9e:87:ee:07:2c:fe:b0:f1:8b:3e:
e1:ae:28:54:4a:1d:c3:8f:f6:a2:7f:f3:6f:74:5f:7a:9d:f8:
ce:33:a7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:40 2026 by rpki-client