Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144917.roa
File: AS144917.roa (raw, json)
Hash identifier: SuSDysQaoblAefXXABK4qlBxgzdvmGR5qCCSCWy+AJg=
Subject key identifier: DC:AE:B0:A6:48:14:4C:7A:34:7F:F4:0A:D3:85:7E:52:9C:D8:E3:B5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 54E2B29ECD1AF4625C73027AA9DDE99765BD3D82
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144917.roa
Signing time: Tue 26 May 2026 01:13:19 +0000
ROA not before: Tue 26 May 2026 01:08:19 +0000
ROA not after: Tue 25 May 2027 01:13:19 +0000
asID: 144917
IP address blocks: 240a:a8db::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:e2:b2:9e:cd:1a:f4:62:5c:73:02:7a:a9:dd:e9:97:65:bd:3d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:19 2026 GMT
Not After : May 25 01:13:19 2027 GMT
Subject: CN=DCAEB0A648144C7A347FF40AD3857E529CD8E3B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6b:91:bd:da:b7:62:a8:f2:f8:ab:1f:69:a6:
fb:f4:4c:f8:74:65:34:a0:87:a9:b0:ff:d5:c4:49:
a5:de:6f:e6:2b:b4:54:11:a8:0d:56:49:47:69:2f:
0f:92:3f:da:96:b0:e9:63:54:c5:35:17:3f:3e:8b:
23:ad:3c:d9:da:d6:7e:9d:c5:b7:4c:3c:f4:27:7a:
56:d5:2a:26:bf:1d:6a:be:53:90:05:93:35:ad:c2:
3d:fa:c7:4a:83:64:d6:c2:91:32:67:83:e4:5c:07:
8b:fb:8f:fa:16:7b:ac:61:6b:d7:f4:23:40:f5:e7:
df:a5:5a:e5:1e:38:67:75:1b:68:38:ee:5e:58:25:
5f:8c:fa:93:73:51:f9:74:43:14:3d:5b:f6:45:8b:
f4:e6:05:35:77:c1:fd:03:2d:61:ae:ed:42:09:2e:
62:b9:af:a8:54:7b:af:bd:be:8c:f3:4e:6b:1c:23:
b1:07:98:d4:46:20:93:e6:97:2e:4a:38:31:79:a8:
09:a5:fb:f0:e2:fd:3f:d2:49:5a:e0:cb:59:88:df:
10:9f:11:65:09:4f:a5:64:63:43:fa:e6:b8:02:ff:
c7:ae:81:a4:42:4d:68:f5:04:e9:82:40:70:51:88:
2c:a4:61:4b:df:a2:56:35:3d:5f:a0:1f:dd:6f:c3:
c8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AE:B0:A6:48:14:4C:7A:34:7F:F4:0A:D3:85:7E:52:9C:D8:E3:B5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144917.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8db::/32
Signature Algorithm: sha256WithRSAEncryption
b4:d4:e1:b1:06:01:ee:a6:55:04:70:a5:e3:d3:b3:3b:21:29:
fc:db:f7:82:1d:0d:a0:8d:8e:6d:52:2b:71:42:d5:2a:a4:38:
48:8a:1a:b2:86:dd:ad:3f:44:5b:d5:32:76:42:89:ca:28:91:
6d:b7:de:0d:ad:ae:d3:73:3a:f6:69:6d:b2:87:99:cb:51:0a:
c8:42:4e:9d:80:4f:2e:cf:d9:65:54:66:d0:ed:6d:e7:44:32:
44:45:e0:41:a6:d9:43:9c:f9:1e:c7:c7:a7:aa:5a:fe:6b:96:
9b:ff:a1:a4:d0:22:92:0c:fe:52:80:68:dd:7d:38:ef:96:03:
f1:35:02:02:c9:d0:79:68:2a:8a:4f:63:4f:12:06:af:12:b4:
b4:d2:31:4f:af:26:59:97:19:30:27:38:bd:dc:0d:db:df:3b:
10:97:0a:b5:8c:4b:06:d6:82:3d:7b:09:97:96:21:ff:ae:db:
f2:25:f0:c0:24:48:26:40:54:1d:4f:59:76:0f:81:6a:86:03:
b9:26:ad:d1:4d:b8:ba:97:8e:66:b0:a4:27:4d:9f:c2:b8:50:
aa:3d:ef:79:5c:a8:c2:76:5c:6e:93:1a:20:51:0d:65:be:82:
e7:e4:43:fe:cf:be:f2:f9:49:30:08:4a:48:00:a3:db:5c:9b:
f0:cd:29:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:17 2026 by rpki-client