Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144903.roa
File: AS144903.roa (raw, json)
Hash identifier: lmv0cPuOsjlugwnGLT3VTwliEDk1DX75SuPvk01kOUA=
Subject key identifier: 34:4B:F6:80:AE:BE:22:0A:11:0F:A9:FD:1A:B4:D1:9A:BD:F9:FB:3B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 030871B4CE852B60A13157CA68EDA7F13FBA529D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144903.roa
Signing time: Fri 22 May 2026 07:24:40 +0000
ROA not before: Fri 22 May 2026 07:19:40 +0000
ROA not after: Fri 21 May 2027 07:24:40 +0000
asID: 144903
IP address blocks: 240a:a8cd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:08:71:b4:ce:85:2b:60:a1:31:57:ca:68:ed:a7:f1:3f:ba:52:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:40 2026 GMT
Not After : May 21 07:24:40 2027 GMT
Subject: CN=344BF680AEBE220A110FA9FD1AB4D19ABDF9FB3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a4:74:d0:2a:bb:40:6a:21:7c:f1:de:73:10:
b2:6e:f6:db:af:82:4c:4b:87:df:a6:cd:07:02:2c:
a8:1b:6c:7c:3a:35:6e:78:54:bf:b3:d6:a3:b3:a7:
c2:f2:90:0e:11:5c:2d:a9:6e:71:2e:81:a4:9a:64:
41:7e:ee:1a:f8:f8:6c:46:22:2d:11:48:2b:a4:47:
b8:76:1e:ee:26:ec:e2:05:80:06:34:48:02:a5:c7:
48:23:ad:44:90:8a:70:59:c4:6d:77:2c:f0:f4:d8:
9a:1c:9a:f7:08:7f:16:32:82:50:72:22:99:a5:80:
4f:d4:47:fe:e9:ab:28:03:69:38:66:25:c6:97:c0:
24:1a:8d:2d:94:c9:38:15:84:cb:3e:03:84:ce:43:
93:c9:bc:cc:8b:6b:f2:0f:13:bc:a1:79:e3:e9:18:
4e:47:13:5d:1a:5a:c6:71:e4:a5:e2:b5:ec:b4:ee:
32:f9:70:19:8b:25:e2:cd:76:1d:51:57:6a:4e:71:
62:25:18:ee:f6:fc:1d:10:17:dd:fd:52:42:cd:cd:
92:21:66:df:42:10:b3:88:90:9b:7c:eb:e4:30:1d:
98:1d:9a:ee:02:b2:14:ab:1e:ff:77:bb:fd:59:59:
05:bb:2d:c2:a9:13:30:94:16:83:fc:ab:91:e5:c9:
ca:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4B:F6:80:AE:BE:22:0A:11:0F:A9:FD:1A:B4:D1:9A:BD:F9:FB:3B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144903.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8cd::/32
Signature Algorithm: sha256WithRSAEncryption
13:81:e3:4b:1c:8e:21:8b:95:39:6f:ff:6c:58:01:76:22:0c:
a7:94:e8:72:82:72:43:84:f1:13:76:8b:e0:f0:02:9b:9a:df:
1c:d5:0b:58:d7:59:e2:47:2c:58:d5:a9:0f:fb:fe:35:85:a0:
0c:76:9c:b8:cf:25:11:2f:1d:69:a1:d9:24:c3:d1:4c:18:70:
2c:f4:42:47:4e:19:3e:58:01:41:de:da:c3:fe:41:10:0f:47:
7e:84:23:26:8c:35:bc:17:e6:f5:47:4b:cf:e4:c4:4b:40:a0:
40:28:1c:cb:82:d7:ae:58:fa:2c:59:7e:d4:86:82:79:ab:52:
af:68:a5:78:9b:a3:25:ca:93:90:b0:c3:b7:54:09:4d:8b:43:
f8:a9:ee:8d:d8:9a:a7:61:ad:9e:a1:30:d2:a6:7a:83:f4:89:
e0:ba:87:79:c0:98:e9:e6:84:de:23:f3:d3:57:50:92:1f:40:
bb:c9:67:7e:a4:29:5f:0b:d0:df:47:9e:aa:48:8e:1f:33:19:
62:df:62:a9:32:b3:35:b3:ae:b6:55:0b:8d:b7:50:95:df:78:
55:5b:67:14:ea:11:79:1b:9f:57:d2:c5:3d:82:db:a1:3e:77:
f5:40:64:05:63:3d:e5:b1:d8:f3:4c:26:4b:f9:b4:a7:3a:26:
85:11:2d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:16 2026 by rpki-client