Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144937.roa
File: AS144937.roa (raw, json)
Hash identifier: Ed++eTAjZZk0aaht/DRiV0xKtfA63eBm+kmHXwJfUlI=
Subject key identifier: C3:20:A7:15:34:06:9A:B6:F2:7B:D9:BE:10:BB:03:37:75:0B:F4:5E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 369D7982A3961EC9464BF8758B399643D90298CC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144937.roa
Signing time: Fri 22 May 2026 07:24:52 +0000
ROA not before: Fri 22 May 2026 07:19:52 +0000
ROA not after: Fri 21 May 2027 07:24:52 +0000
asID: 144937
IP address blocks: 240a:a8ef::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:9d:79:82:a3:96:1e:c9:46:4b:f8:75:8b:39:96:43:d9:02:98:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:52 2026 GMT
Not After : May 21 07:24:52 2027 GMT
Subject: CN=C320A71534069AB6F27BD9BE10BB0337750BF45E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:5f:42:5d:69:af:dc:f3:f1:fa:25:9f:de:
c5:bf:db:2a:97:16:db:2d:fa:ad:a8:c1:86:ce:28:
3f:7d:4e:2b:a7:4b:05:72:1a:c3:6e:36:49:f6:e7:
5f:4d:e1:fd:8a:0f:da:64:60:42:05:03:af:d3:c2:
7c:4f:cb:05:e3:ad:5b:4a:ce:99:14:ce:1c:a9:a4:
94:de:dc:72:d1:25:7a:38:44:24:4b:c8:26:1e:c8:
04:31:ae:00:0d:2d:c6:05:ff:6c:03:2d:cb:87:07:
3d:1e:64:4a:1c:06:64:c9:38:2f:6c:68:cd:8e:b7:
da:1e:b0:d4:eb:d6:3b:0c:98:ba:98:16:2f:61:6f:
f2:72:6b:0a:da:e0:27:23:79:31:10:05:8f:15:41:
ac:8c:9d:6a:a2:30:fc:b2:19:71:ab:fa:33:f9:cf:
32:7b:fb:a5:33:15:d4:58:12:e2:b4:7c:a0:91:b0:
f3:3e:a9:95:69:d7:34:0e:79:36:31:45:56:34:fc:
ba:6b:9d:b1:fa:10:65:87:96:c6:c6:14:4e:31:fd:
fa:57:b0:8b:47:c8:36:dd:42:f5:a9:69:27:46:b0:
4f:f8:35:3c:1e:58:a5:db:99:a1:4e:90:61:c3:1b:
4e:7a:ee:dc:3d:db:2d:63:0c:04:2e:e3:2d:4e:0e:
cb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:20:A7:15:34:06:9A:B6:F2:7B:D9:BE:10:BB:03:37:75:0B:F4:5E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8ef::/32
Signature Algorithm: sha256WithRSAEncryption
00:d6:67:b3:a2:9f:02:40:c0:47:b1:29:45:cf:7b:fd:9a:21:
4a:60:76:cd:ab:71:a2:0c:f8:fb:09:84:6b:8a:5b:b6:ee:2c:
89:72:a7:c3:77:bc:ac:00:f7:d0:c4:b5:dd:e8:66:c0:40:83:
9b:21:f9:1b:cb:59:b7:65:86:a0:3e:41:51:78:a0:03:fc:f4:
4d:36:6c:74:b6:1d:99:22:5b:ac:0d:d3:00:b3:58:ee:dd:02:
cf:ef:63:1e:ce:87:a5:e4:13:75:f2:b2:7e:6b:47:52:f3:e2:
43:9e:12:e2:66:8f:0c:86:63:70:63:e1:a6:6b:ba:82:8c:f7:
98:8b:74:38:99:6e:c0:12:9d:c8:a8:44:2e:68:f9:d4:21:66:
31:13:b3:33:45:c6:4a:fc:c7:9a:c0:44:5e:65:92:76:9b:85:
80:9a:5d:f0:e1:6c:8e:79:c7:dc:5e:a0:fe:32:b3:71:6e:cb:
d3:14:80:96:9a:2b:24:42:08:4d:c5:16:bc:e6:6a:2b:30:5e:
53:a9:bd:f0:24:8b:35:c4:f6:9f:b6:96:f8:f1:14:0b:02:16:
49:3a:25:3c:b5:bc:6a:34:63:d6:a2:b5:74:60:40:6b:7b:c5:
67:d4:85:83:53:c8:85:f0:c7:3f:b8:64:0b:ab:2c:34:55:d3:
86:6d:51:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:23 2026 by rpki-client