Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144911.roa
File: AS144911.roa (raw, json)
Hash identifier: iiFPKAAZRc7G8YSOBn8lCXl3QlG9o5nwuxHuKX1gNh8=
Subject key identifier: B0:C6:E3:8B:3E:D1:23:85:21:9D:45:A0:F4:C9:62:CA:4A:06:6B:BA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 498F1B5C07C7403E2BFA9E5544BAB134690F1B85
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144911.roa
Signing time: Fri 22 May 2026 06:58:13 +0000
ROA not before: Fri 22 May 2026 06:53:13 +0000
ROA not after: Fri 21 May 2027 06:58:13 +0000
asID: 144911
IP address blocks: 240a:a8d5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:8f:1b:5c:07:c7:40:3e:2b:fa:9e:55:44:ba:b1:34:69:0f:1b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:13 2026 GMT
Not After : May 21 06:58:13 2027 GMT
Subject: CN=B0C6E38B3ED12385219D45A0F4C962CA4A066BBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:18:21:cd:ca:4f:bd:f5:3e:8f:09:8c:05:
84:36:28:b7:3d:02:2b:8e:92:4d:e0:64:15:6d:4b:
ee:95:b2:c7:2e:b0:0f:bc:23:a2:2d:27:6b:d7:11:
bc:71:1f:3e:93:0f:07:2d:40:ab:12:eb:1b:29:ac:
1a:20:08:af:b6:c5:3a:6e:4d:ab:9e:2d:6f:fa:c6:
90:c9:33:ca:38:3a:7a:f2:fe:0a:03:0b:ad:ae:35:
ae:b1:0d:2c:c9:d4:67:d2:a1:68:57:85:01:c6:ff:
c9:cd:08:33:f4:12:bc:34:0d:a4:31:4e:d4:d2:7e:
9d:46:12:2d:65:75:bf:4b:e0:a1:c6:0c:f1:bd:c1:
37:7b:5e:30:31:00:0f:b0:a1:02:f5:3a:5a:1d:fd:
1a:bc:c8:41:88:9f:39:a2:b8:6d:2d:3a:75:65:9a:
1c:21:1f:23:72:22:a0:cc:ab:36:bc:70:0a:fe:e7:
38:a3:97:1c:96:18:be:89:f4:96:7d:29:7a:5b:92:
36:25:6a:0f:38:36:6b:f0:e8:cc:14:97:50:e6:5b:
b5:83:b3:5b:f0:e5:e3:07:7e:ae:05:39:77:28:04:
fe:03:59:12:34:81:e4:51:72:99:d9:a3:9b:50:6d:
c2:4e:11:bc:b4:e2:2a:a1:df:d6:59:f9:91:e7:32:
3a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C6:E3:8B:3E:D1:23:85:21:9D:45:A0:F4:C9:62:CA:4A:06:6B:BA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144911.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8d5::/32
Signature Algorithm: sha256WithRSAEncryption
59:78:69:ca:69:7c:2a:d0:40:d8:ba:6e:41:85:cb:85:de:00:
86:f4:d3:b7:26:03:a5:a2:ac:10:74:40:96:d4:06:f3:69:cd:
fa:a7:49:41:e7:bb:e2:4d:9d:46:d6:b2:31:99:38:2e:6d:b3:
7b:16:cd:e4:93:dd:02:14:af:db:97:ad:12:c2:7d:5b:6f:5b:
59:91:0e:bf:86:74:b3:75:01:53:4b:a5:17:44:ba:20:58:a7:
f6:e8:cb:61:85:a5:5c:59:04:41:b4:71:52:8a:0c:71:91:b9:
3a:1a:24:28:77:ab:75:d2:53:88:f5:0d:ab:e7:cf:e6:a6:d8:
9a:ec:bc:51:5d:35:80:a6:bf:4b:29:67:3d:32:c1:ac:89:17:
56:5e:15:9a:9f:b1:d7:d9:a8:d7:72:12:cb:ef:5d:09:1f:85:
a2:f6:ab:b6:c1:62:9f:b6:d4:1c:76:f0:11:41:45:7b:f9:53:
72:87:4e:59:45:7d:f4:5f:0c:1c:10:9f:84:f2:48:da:98:7a:
08:91:6f:dd:8c:69:54:93:ca:1e:51:49:20:3b:e9:6c:f2:0e:
fb:5d:5e:39:54:c7:2d:2e:89:eb:14:66:88:33:45:7c:87:15:
54:61:99:af:58:7c:e9:e9:41:d8:81:a0:8b:5c:a8:e9:2e:75:
a5:9f:76:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:49 2026 by rpki-client