Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144943.roa
File: AS144943.roa (raw, json)
Hash identifier: S2218i/ZaDDH38b0nCOG/vVNty5aUC+Eqeu57DjUR94=
Subject key identifier: 53:38:05:17:65:93:D1:27:97:B9:7C:C6:89:1D:A5:7A:83:17:B8:AE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 31399D51A2C73F69924B0672FC5B72E1488B353E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144943.roa
Signing time: Mon 25 May 2026 02:22:40 +0000
ROA not before: Mon 25 May 2026 02:17:40 +0000
ROA not after: Mon 24 May 2027 02:22:40 +0000
asID: 144943
IP address blocks: 240a:a8f5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:39:9d:51:a2:c7:3f:69:92:4b:06:72:fc:5b:72:e1:48:8b:35:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:40 2026 GMT
Not After : May 24 02:22:40 2027 GMT
Subject: CN=533805176593D12797B97CC6891DA57A8317B8AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4c:3a:7b:77:4c:46:67:c6:2c:71:4a:68:d2:
16:47:a2:e8:b4:1f:6d:40:ec:29:ca:ee:07:10:86:
4e:35:54:91:06:9d:b1:bc:3a:ff:52:44:47:c9:24:
3d:d9:9d:7b:dd:f8:08:f2:fd:08:5e:93:31:57:03:
9f:dc:93:b9:a4:c0:8d:25:ed:bb:9a:23:7e:1a:a4:
63:9d:3f:01:ab:58:4b:5b:f5:7a:c4:08:8a:65:1e:
32:0c:4b:5a:e3:30:f0:e0:8f:2c:46:bc:a2:28:cd:
48:09:7b:b9:db:37:ae:04:cc:90:15:fa:92:e5:60:
40:38:b4:e3:b8:a2:8b:65:dc:0c:72:85:9e:b9:99:
f7:45:16:10:f6:4d:34:8d:b7:a7:5e:c5:85:a3:94:
cd:4b:7e:4d:04:6c:81:da:fb:a7:95:20:12:dc:ad:
67:ee:ac:a1:26:cf:a6:ff:1a:fd:0e:d0:5d:ed:61:
80:62:43:f5:03:77:ab:b3:58:0f:5a:64:6c:cc:72:
b5:d6:54:5c:37:7f:9f:a7:68:38:46:f2:ec:6c:32:
1a:2f:25:33:70:38:2e:c2:cf:96:90:d4:0b:87:bc:
ca:a5:fa:93:32:2e:21:60:ed:38:15:74:6f:88:7d:
3b:a9:16:1d:9f:23:d0:ff:30:bf:81:3d:08:29:1c:
c9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:38:05:17:65:93:D1:27:97:B9:7C:C6:89:1D:A5:7A:83:17:B8:AE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144943.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8f5::/32
Signature Algorithm: sha256WithRSAEncryption
8a:5a:d4:c7:06:ea:6c:4a:09:26:97:8d:8a:ea:cc:f7:95:dd:
a6:bf:a3:05:77:5d:c8:16:89:18:64:9f:99:01:47:ae:aa:8a:
d7:00:03:bc:cb:f2:2e:39:2a:a6:4c:61:08:c2:65:c0:a4:b0:
0e:21:54:b4:1f:75:b7:e1:48:0a:9f:88:1c:43:cb:ac:5c:d0:
a5:16:64:87:56:2d:95:d4:16:25:14:db:e3:f6:e7:63:20:89:
d8:25:2d:69:ac:4e:a6:7d:81:54:a9:3b:40:78:d3:2a:02:35:
54:ac:ab:89:1b:fc:07:e4:ab:03:2e:ea:f9:8f:46:2d:7d:a5:
f3:42:06:a7:d6:8a:3f:31:9a:e9:3a:af:ec:93:9f:da:74:6e:
d5:51:c5:cc:f8:29:96:f1:a5:78:04:0c:de:14:5e:74:bd:7d:
de:ca:fe:40:c4:d4:fd:b8:c4:c5:d7:ba:1d:0a:0a:e7:07:a6:
20:5a:18:e2:af:26:87:4f:51:50:e1:4b:89:d1:cc:bd:b1:0a:
ef:05:86:a5:75:cc:90:3e:00:ac:0c:52:3f:dc:c6:a0:97:c1:
2b:30:65:92:b8:5c:74:93:52:22:01:6b:4d:36:16:78:ed:19:
13:21:84:74:7d:a8:13:8d:75:20:bd:6b:b4:27:1e:ac:f3:44:
21:d8:6a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:37 2026 by rpki-client