Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144907.roa
File: AS144907.roa (raw, json)
Hash identifier: yHmmh0QfqO7inU4zId2JOF+3uYmdbfomcmw+rHDaows=
Subject key identifier: 07:0C:8A:34:EF:4B:7A:5A:F3:6B:4A:F3:CB:5B:49:07:AB:CA:ED:91
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6910166B3A9A453A7628101F92A555FD528A0171
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144907.roa
Signing time: Mon 25 May 2026 06:49:12 +0000
ROA not before: Mon 25 May 2026 06:44:12 +0000
ROA not after: Mon 24 May 2027 06:49:12 +0000
asID: 144907
IP address blocks: 240a:a8d1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:10:16:6b:3a:9a:45:3a:76:28:10:1f:92:a5:55:fd:52:8a:01:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:12 2026 GMT
Not After : May 24 06:49:12 2027 GMT
Subject: CN=070C8A34EF4B7A5AF36B4AF3CB5B4907ABCAED91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:93:a7:75:21:16:d8:b2:64:7e:c6:b6:5f:65:
83:7c:fb:7b:43:b2:0f:ba:24:e8:ac:a9:9d:af:7a:
9b:42:5f:8f:5d:7a:e1:b5:e3:0d:66:71:3d:98:13:
11:80:f5:a9:61:00:ee:aa:dd:bc:5f:3b:46:cc:0e:
d6:15:67:b2:02:85:19:ad:d0:83:1f:43:27:83:a1:
91:28:97:eb:5c:f0:71:31:cd:be:6c:40:af:20:df:
1f:85:99:73:c3:0f:38:b0:2c:97:83:4c:5f:b6:97:
a8:01:22:a7:6f:9f:ee:05:b3:16:97:00:d0:81:97:
1a:a4:17:c8:ff:5f:1d:78:f2:89:6d:63:af:f6:bf:
8d:86:a6:4d:8c:1e:61:6e:28:c2:3f:ae:a5:69:70:
d9:a9:39:c4:a0:99:34:6b:d3:da:81:49:04:b4:4c:
17:05:e4:f2:93:34:37:fc:79:97:be:f0:bd:de:8e:
a4:cf:f7:88:34:84:be:43:83:12:72:19:99:5e:4d:
84:2b:b7:71:f0:c9:3e:ad:07:21:c6:91:c1:3d:17:
54:cf:83:4c:db:44:52:b5:29:9d:9b:07:73:0f:80:
e8:4e:74:5a:17:ab:84:b9:1a:9a:62:3c:e8:e8:ff:
5e:c5:82:54:ad:7d:b0:31:92:0c:a0:b1:81:60:a2:
96:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0C:8A:34:EF:4B:7A:5A:F3:6B:4A:F3:CB:5B:49:07:AB:CA:ED:91
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144907.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8d1::/32
Signature Algorithm: sha256WithRSAEncryption
56:ce:42:f5:74:6d:73:7c:45:17:a2:6c:aa:02:fd:35:90:7b:
de:a3:89:9c:79:dd:77:82:bf:ed:69:f9:9b:b7:47:45:69:0e:
a2:3a:41:f5:a4:28:c3:24:1a:c5:47:9c:b4:a1:71:03:cb:fd:
14:45:eb:2d:42:36:98:8f:b7:cc:34:cb:60:f1:aa:b0:5e:ea:
3e:6f:1b:77:c9:7a:2c:44:58:02:48:cb:04:ce:c8:7c:15:55:
0d:42:c6:c5:5e:c0:bd:44:e5:95:87:26:f1:6c:b0:6e:9f:0d:
8e:f9:a6:68:79:f0:a6:00:af:f2:07:b6:8f:46:da:1f:ce:c8:
94:44:8d:74:12:5a:5d:91:67:10:74:61:6e:ea:24:39:02:7c:
8c:f0:36:f0:ae:06:40:e9:2f:b5:6b:37:c6:d4:f7:da:14:d2:
76:ed:4a:36:de:12:09:fa:c0:60:a6:cb:d3:63:b6:b0:ca:c6:
c7:e1:6e:d4:b1:e5:51:4e:86:6c:03:b5:50:5f:9b:53:3f:a5:
24:4b:ef:78:62:fa:a6:d7:8d:0c:6c:5f:c9:76:77:fe:b8:27:
19:7f:75:ff:33:ac:58:91:f5:e4:ca:c8:f1:30:fd:25:79:06:
28:50:a2:95:cb:40:ea:2c:ed:4b:5d:31:ea:d5:d8:65:fa:fc:
97:ff:9a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:46 2026 by rpki-client