Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144925.roa
File: AS144925.roa (raw, json)
Hash identifier: JP/VIr8VagtPUZi3xVorwY03lHa0eChjEM7msUfykLk=
Subject key identifier: 5B:AD:35:AC:45:A8:07:2A:F2:C8:2E:08:B9:EF:BA:0B:AB:C6:BC:1B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3D9A289CFBE17077869FC6B307EE7866C8C2E95A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144925.roa
Signing time: Fri 22 May 2026 06:05:19 +0000
ROA not before: Fri 22 May 2026 06:00:19 +0000
ROA not after: Fri 21 May 2027 06:05:19 +0000
asID: 144925
IP address blocks: 240a:a8e3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:9a:28:9c:fb:e1:70:77:86:9f:c6:b3:07:ee:78:66:c8:c2:e9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:19 2026 GMT
Not After : May 21 06:05:19 2027 GMT
Subject: CN=5BAD35AC45A8072AF2C82E08B9EFBA0BABC6BC1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:c8:bb:88:b3:6e:46:3d:97:03:77:16:11:
5f:49:b6:25:b5:b1:3e:d5:e6:53:13:43:5b:ec:d9:
bc:57:63:65:ae:a9:67:38:f4:cd:9e:44:e1:85:a9:
e1:42:a9:21:05:2a:db:b4:a1:3d:eb:73:f3:da:75:
84:24:4d:81:85:ba:72:d8:c3:1c:d7:a1:9e:54:4c:
7d:b6:3d:84:29:f8:50:5f:d0:1a:33:38:a7:8a:fc:
c2:23:42:3f:db:fb:f0:6b:15:5f:5f:9d:66:10:c3:
eb:e1:98:2c:ff:2a:ab:e9:ce:80:fd:56:34:0d:c8:
0d:e0:51:79:dc:8c:db:f4:8e:ab:be:68:d0:3c:a3:
53:db:bd:6c:24:ec:a8:b9:f1:fa:73:29:08:c7:6d:
d1:fe:25:6c:00:d0:89:e5:79:d1:e6:35:46:b6:75:
5d:a1:3a:00:4c:03:a8:f3:ec:66:0b:7c:8c:5b:c2:
f0:5e:35:63:36:f0:f2:ee:ce:fe:4e:cd:76:95:02:
f4:5a:f3:97:21:b5:69:ed:ed:9f:41:bc:5a:4d:75:
1b:97:9d:8c:d5:4a:f6:59:49:8d:1f:a4:6d:db:a9:
e3:79:87:05:7f:ee:dc:ed:32:b1:6b:aa:9d:e6:8d:
0b:91:92:80:81:ff:f7:90:6e:5e:c8:cc:14:99:e8:
19:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AD:35:AC:45:A8:07:2A:F2:C8:2E:08:B9:EF:BA:0B:AB:C6:BC:1B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144925.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8e3::/32
Signature Algorithm: sha256WithRSAEncryption
65:7c:56:4d:e4:d9:8a:66:ae:f6:15:25:fa:b6:9c:7e:cf:35:
ff:7f:f0:54:4f:12:d2:1b:83:37:f7:6d:4c:a7:cd:3d:51:78:
f8:23:b7:36:e7:5e:12:58:aa:29:0f:0b:2b:95:39:ce:a5:94:
3a:fa:0c:f8:6b:e6:88:b3:49:56:17:c0:ec:bd:fd:59:c8:b6:
2f:27:6b:57:ca:47:2f:ec:9a:98:83:1e:0d:63:94:cd:72:ec:
ab:bc:fe:b7:1e:5c:f0:2c:96:10:98:ab:9e:86:80:d4:e7:31:
19:9d:5e:bb:73:4e:86:77:75:88:69:65:39:97:78:5f:df:f3:
6d:6e:bf:45:b3:62:c8:cb:e8:9b:75:fc:c5:04:e9:96:5a:6d:
3c:c5:a0:ae:ae:dc:82:67:43:89:c5:e8:cb:45:9b:d9:ff:dd:
8c:93:e2:f8:a3:52:3b:89:dd:db:c3:4f:ca:b0:b0:54:68:e7:
26:d8:e7:a0:12:66:e4:17:71:23:c1:6c:a5:c0:85:52:35:38:
23:9a:d8:0a:de:14:db:51:59:7d:e7:73:1b:27:f7:64:66:35:
3b:b9:5b:4d:26:45:70:9d:e1:e6:15:fa:ac:5a:b5:80:b1:a2:
71:4f:d2:c2:b2:32:34:e6:19:80:b5:bd:31:f9:dd:98:cf:c3:
0a:5e:55:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:20 2026 by rpki-client