Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144921.roa
File: AS144921.roa (raw, json)
Hash identifier: Mcu/BWZ8z0Dw0loyA5wj8mROYh5F/O1haiGlG4LNIwY=
Subject key identifier: A6:31:50:10:72:EA:1D:44:99:8E:72:E0:D6:D3:5D:0C:99:A0:4D:06
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 597719CDB98415F1DDEC278F7CC27520FDE03BB9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144921.roa
Signing time: Fri 22 May 2026 06:58:30 +0000
ROA not before: Fri 22 May 2026 06:53:30 +0000
ROA not after: Fri 21 May 2027 06:58:30 +0000
asID: 144921
IP address blocks: 240a:a8df::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:77:19:cd:b9:84:15:f1:dd:ec:27:8f:7c:c2:75:20:fd:e0:3b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:30 2026 GMT
Not After : May 21 06:58:30 2027 GMT
Subject: CN=A631501072EA1D44998E72E0D6D35D0C99A04D06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a4:96:87:29:8b:b8:46:e0:84:eb:48:d1:32:
db:d9:12:b2:78:89:40:1f:10:8f:50:19:dc:5a:43:
64:18:45:7f:08:62:3d:03:29:b8:ea:d2:f6:de:80:
bd:3f:03:3f:2b:52:db:ca:89:4d:24:2a:39:a6:55:
19:a0:09:8a:7e:b7:2a:99:96:a4:d8:1e:3b:d9:2e:
cd:c4:b5:32:4f:b3:27:af:92:06:a3:fd:54:3b:3b:
21:eb:74:e9:b3:39:3c:53:85:48:75:bc:84:e6:3e:
ef:b4:5e:fd:6d:cb:0b:aa:6c:37:a7:b7:1d:5c:c8:
41:f9:69:87:c2:e7:24:29:f4:60:92:38:0f:0a:00:
20:9d:37:77:22:22:01:31:8c:45:56:9f:71:25:96:
af:07:3f:04:92:dd:53:28:78:69:b5:5f:bc:4f:a7:
40:c8:b6:ac:ba:f8:81:f4:e8:51:e4:c2:2b:6b:40:
4b:0c:b1:37:b4:69:95:2e:ea:e1:ac:5d:98:db:60:
b5:85:0e:9b:1e:69:19:82:6c:ae:f0:24:52:46:f5:
0c:cd:54:e6:ba:55:66:6f:ad:76:09:75:4a:56:8b:
bd:db:62:1a:9d:5b:20:dc:35:32:b9:7e:f7:8c:8e:
63:8f:69:a7:e3:42:41:54:7c:f3:12:b5:94:f3:68:
28:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:31:50:10:72:EA:1D:44:99:8E:72:E0:D6:D3:5D:0C:99:A0:4D:06
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144921.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8df::/32
Signature Algorithm: sha256WithRSAEncryption
b5:7a:c0:5f:14:47:46:71:39:d5:cf:51:4e:93:e7:8d:e8:4c:
53:ed:7a:a5:06:9b:c8:89:25:84:54:f9:21:56:7b:6e:ce:31:
32:de:da:1d:6c:e0:b3:ef:da:0b:1b:7c:7d:c5:bb:e8:b6:cc:
62:a0:ba:1e:b0:3d:fa:9b:2c:80:58:94:eb:34:86:ec:b6:60:
17:a9:f6:f7:5e:89:48:b2:66:46:87:67:44:4a:77:fa:30:58:
8d:43:16:6f:c8:77:05:63:75:1c:2d:91:e8:80:1c:d7:d7:3f:
23:25:8d:40:61:e5:1e:ac:b4:34:31:72:81:0c:e8:18:54:d7:
f4:d7:bc:99:a0:67:4c:ef:5e:8b:48:78:9e:77:2a:18:22:9c:
89:fa:8d:a8:88:cb:9e:4e:1f:e5:be:c5:45:27:ef:2f:f8:17:
40:75:7e:00:d0:e9:2e:18:8b:fe:52:2f:33:31:32:bf:15:72:
c0:cc:af:98:36:f9:b0:a5:b9:04:43:6c:59:9b:4d:10:ff:76:
fe:91:f3:bd:57:a0:e0:ea:66:6c:97:5e:f7:c8:00:94:43:a7:
d6:96:a4:3b:74:85:0d:c2:f8:2d:e2:c0:63:9d:9c:77:29:2c:
b2:13:76:cf:e7:df:4b:7f:8f:b5:8f:cf:44:32:56:09:6e:73:
ad:2c:60:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:56 2026 by rpki-client