Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144939.roa
File: AS144939.roa (raw, json)
Hash identifier: IA7oMsg7B94v75jVajra3VqOco6VSJ5ZZrK/WTIfjmk=
Subject key identifier: BC:F1:08:A8:D1:07:2C:A5:84:5D:95:D9:57:44:9E:59:26:C5:B0:B9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 045D229895EFD0BA63BF71413DBE046066CF2680
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144939.roa
Signing time: Fri 22 May 2026 07:40:56 +0000
ROA not before: Fri 22 May 2026 07:35:56 +0000
ROA not after: Fri 21 May 2027 07:40:56 +0000
asID: 144939
IP address blocks: 240a:a8f1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:5d:22:98:95:ef:d0:ba:63:bf:71:41:3d:be:04:60:66:cf:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:56 2026 GMT
Not After : May 21 07:40:56 2027 GMT
Subject: CN=BCF108A8D1072CA5845D95D957449E5926C5B0B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0b:ec:5d:05:16:37:06:d5:1c:d0:de:f6:c6:
b8:50:13:7c:61:ee:02:a7:ec:4a:7d:0e:75:a7:c6:
54:03:c2:85:63:38:1f:92:a1:4a:fc:58:77:54:05:
df:ad:98:94:db:fa:21:e1:1b:60:c5:5c:ff:97:c1:
4e:ce:72:7f:cd:69:da:c2:5b:0c:67:59:2a:77:7e:
c9:2b:fa:5c:37:18:4f:55:38:de:63:5a:8d:cd:bb:
d6:06:b3:ce:7e:99:95:f0:ad:f2:6c:df:20:16:dd:
2e:7a:87:c0:e6:64:a4:38:81:d5:56:fd:97:4b:43:
ac:fd:c3:83:da:dd:95:48:e8:4f:c1:d8:23:09:bd:
17:6b:05:87:5c:9a:6c:2b:d2:7f:7d:5f:60:09:3d:
7a:4b:50:db:e7:41:66:ea:81:69:47:e7:91:4d:72:
2d:93:e2:45:5c:f1:d2:20:48:ad:d2:04:77:ca:33:
26:9f:ef:e4:6d:f4:17:10:82:4b:c0:1b:0b:87:00:
30:f2:e3:ae:24:82:cd:08:fc:36:6c:f1:67:bd:cf:
bd:0f:74:cf:09:76:ab:b5:10:d9:42:d2:8d:0d:4b:
c7:20:d2:35:0a:1f:fd:9d:7d:b4:e2:50:84:84:fc:
2f:a8:1f:61:8f:70:ae:ac:f8:02:90:f3:3c:b4:7e:
7a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F1:08:A8:D1:07:2C:A5:84:5D:95:D9:57:44:9E:59:26:C5:B0:B9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8f1::/32
Signature Algorithm: sha256WithRSAEncryption
7c:1b:6f:45:c1:b7:91:a6:83:aa:a6:0b:1b:de:9e:bd:25:2d:
42:18:58:52:5d:a6:e3:0c:00:0e:95:d9:43:9d:fb:57:cc:8a:
4f:8b:90:86:d1:6e:d8:a1:9d:93:24:c7:65:f7:d4:f8:4f:f5:
bd:3f:1e:80:9e:1e:ce:13:b1:14:9a:8b:29:32:17:94:02:69:
aa:2d:db:1e:31:f3:32:63:8f:00:5e:b2:2c:ba:49:f4:bb:68:
5b:f7:6d:3a:bb:6c:06:00:ee:70:74:18:80:14:bc:78:48:d9:
d6:59:05:2a:25:46:13:22:b6:80:63:bc:e8:af:a4:76:13:fe:
50:3e:50:15:45:df:39:f8:2e:97:3e:35:11:40:ca:36:2a:d6:
0b:af:4f:ee:87:6f:3f:d4:1d:02:25:18:b8:27:23:3f:75:cd:
b5:f6:0c:c8:e8:c8:ad:c4:56:9b:18:51:a6:0e:38:12:0d:17:
86:e0:c1:1e:af:22:7a:c9:3c:11:c3:a6:2a:d4:aa:28:4c:33:
b5:27:47:c1:c6:58:72:b2:22:02:7b:65:ea:4b:16:2e:ed:df:
12:49:f2:9f:e4:67:9b:ed:a2:e3:3c:e9:4e:ab:2b:6f:77:b0:
4b:bb:bb:a1:62:ea:45:c0:45:bc:4f:5a:f2:0d:b1:14:80:c1:
5d:be:e9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:39:29 2026 by rpki-client