Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144910.roa
File: AS144910.roa (raw, json)
Hash identifier: ix96HDcsJwln/t7OgDCkewyGRwqF6su5AQRfhEmCogo=
Subject key identifier: 71:24:5F:FC:27:36:16:DC:A3:09:D4:98:CE:F2:F9:8B:39:70:AB:A9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 570DBF23FD3148317AB79C1440BDF346E5945D65
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144910.roa
Signing time: Fri 22 May 2026 07:32:24 +0000
ROA not before: Fri 22 May 2026 07:27:24 +0000
ROA not after: Fri 21 May 2027 07:32:24 +0000
asID: 144910
IP address blocks: 240a:a8d4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:0d:bf:23:fd:31:48:31:7a:b7:9c:14:40:bd:f3:46:e5:94:5d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:24 2026 GMT
Not After : May 21 07:32:24 2027 GMT
Subject: CN=71245FFC273616DCA309D498CEF2F98B3970ABA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1a:45:b8:a5:4c:83:ec:0b:33:a8:6e:55:6f:
43:ce:4a:72:b5:93:57:94:ec:5e:c9:dd:60:b4:ce:
a9:fd:18:cf:13:b6:40:97:0a:39:50:fc:cb:92:32:
bf:88:4e:a1:2b:b7:02:b7:c1:b5:e1:14:00:65:00:
19:0d:c8:fe:29:95:11:25:bb:7a:8b:98:a7:c4:c9:
13:f1:ca:7c:3e:20:83:2f:0e:28:c0:f1:e0:21:a8:
70:d3:7f:7a:ab:37:3c:69:b2:d6:dc:ac:4f:9b:98:
0f:d1:8e:ec:8b:7d:b8:5b:a8:20:71:2e:b4:ab:c7:
52:42:7f:8d:3d:ba:73:18:df:98:96:4c:30:30:b9:
b6:75:d7:b6:92:9d:72:95:7c:8b:da:3e:59:38:16:
dd:d7:b1:10:ca:f5:ff:10:4f:ae:3c:37:40:48:9b:
73:44:b6:4e:88:3b:ea:b5:8f:f1:0b:a4:ca:aa:41:
40:3c:cd:8a:24:52:30:8f:eb:3c:a5:01:b5:79:19:
30:11:a7:02:0d:76:a7:b4:21:1c:f8:4c:a5:f5:3d:
1e:3f:7b:2e:51:e4:20:fa:4a:c7:37:ae:85:ec:d0:
6c:56:88:67:d8:18:f7:8f:08:bf:4d:7b:b2:c7:bf:
ce:ab:ff:7a:c9:c5:ea:d4:e7:e8:d3:59:39:8c:f9:
74:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:24:5F:FC:27:36:16:DC:A3:09:D4:98:CE:F2:F9:8B:39:70:AB:A9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144910.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8d4::/32
Signature Algorithm: sha256WithRSAEncryption
73:e6:2d:95:5b:87:ae:3d:29:32:e5:e0:64:25:5b:b5:f8:1d:
84:df:12:b9:17:18:aa:f1:f7:11:ac:f6:db:a5:37:14:11:ce:
a0:1d:45:b7:29:eb:47:32:31:ba:b5:ef:fa:f8:5e:d5:d9:52:
ce:d3:bd:ab:19:97:c8:eb:06:04:bd:e9:4d:c7:41:5b:6d:dd:
4a:9f:b4:ad:8f:ab:88:34:60:96:dc:f8:65:23:d8:91:73:52:
20:bd:c6:1e:af:9c:bb:85:56:fa:65:b8:a3:34:8a:d9:72:45:
62:2b:4d:71:5a:1b:bf:0c:1e:d9:95:b4:09:15:69:a3:d7:79:
99:28:a5:f5:ea:25:06:9e:7a:bb:da:bd:a7:f5:25:46:ec:6d:
f5:19:c5:08:17:32:ec:98:91:17:ef:9e:d8:82:44:49:b5:ff:
d3:73:a9:01:05:e2:3e:66:22:30:87:4c:1f:d3:10:1e:d1:bc:
5c:f7:ee:f4:68:05:b6:f0:65:34:b1:13:b8:bd:27:ec:14:cf:
ac:e6:09:3b:13:1f:59:5d:ed:2b:e1:d8:b1:99:ca:2f:33:2b:
fa:e5:5f:cf:4b:4a:fa:3f:de:50:83:45:80:32:fb:39:d1:97:
ab:c5:26:99:a8:c1:24:10:20:ce:6e:4f:6b:12:d4:f6:99:f3:
59:1f:1d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:09 2026 by rpki-client