Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144944.roa
File: AS144944.roa (raw, json)
Hash identifier: Hr6qMP/cZzXtTf/Vetdt9rDy1g02pW0hZ90A0+ZS1UA=
Subject key identifier: 16:E9:DF:9F:0F:5C:32:83:64:15:55:BC:A5:1D:B7:01:6C:F3:7B:E6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 044ADFDB2FD089B21F4EBE87E7F833A153155F4F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144944.roa
Signing time: Fri 22 May 2026 06:58:21 +0000
ROA not before: Fri 22 May 2026 06:53:21 +0000
ROA not after: Fri 21 May 2027 06:58:21 +0000
asID: 144944
IP address blocks: 240a:a8f6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:4a:df:db:2f:d0:89:b2:1f:4e:be:87:e7:f8:33:a1:53:15:5f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:21 2026 GMT
Not After : May 21 06:58:21 2027 GMT
Subject: CN=16E9DF9F0F5C3283641555BCA51DB7016CF37BE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:28:d3:e3:74:23:62:41:21:23:23:38:00:e7:
57:3b:54:54:ee:02:43:1a:a0:57:c9:3e:29:52:f6:
b6:5b:06:a1:4e:57:de:24:33:47:5d:20:18:a1:1b:
7d:17:2c:d5:92:25:16:f3:47:1d:82:15:88:dd:30:
83:a8:b2:c7:af:7f:bc:a3:e3:ef:91:6b:56:d9:ed:
52:2d:e4:4c:85:88:9d:6f:43:9b:28:b6:ff:40:ab:
f1:94:6e:ee:89:d0:b5:1a:cb:5c:47:c5:98:fd:a3:
be:04:89:3e:95:c9:cd:c3:a8:84:03:c7:86:fc:d9:
df:37:26:af:09:8d:06:27:76:e1:f1:8a:61:30:81:
84:ce:f0:bc:a2:f4:82:94:2c:35:59:aa:d0:9b:94:
2e:97:74:a5:85:f9:d4:cc:26:64:57:27:55:ae:e6:
69:c8:9e:e5:ce:21:e8:60:58:0f:eb:c4:5c:92:4a:
dc:b9:e6:5a:3f:ad:89:28:44:51:6e:a1:50:f2:2c:
47:1e:f1:26:12:39:72:0e:ee:01:a5:4b:29:cd:8d:
69:ca:f1:21:59:ba:0d:de:0b:96:96:ff:e7:85:2b:
be:37:01:67:e5:1c:63:8e:6d:ec:9f:d2:95:90:92:
24:c4:60:70:39:bd:a5:e4:81:4f:61:a0:91:53:dd:
93:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E9:DF:9F:0F:5C:32:83:64:15:55:BC:A5:1D:B7:01:6C:F3:7B:E6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144944.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8f6::/32
Signature Algorithm: sha256WithRSAEncryption
3f:2a:b7:3e:68:52:a2:a6:b6:b1:43:02:80:78:0b:55:e1:49:
52:8c:bb:9b:cc:24:38:bc:24:db:52:be:cc:d9:1a:6e:4b:e2:
af:9f:61:83:99:db:df:d4:78:57:81:42:71:2e:b5:a4:6b:93:
b6:1d:11:44:1e:6d:ef:97:48:b7:05:cb:c1:ef:af:91:3b:1c:
09:ad:89:6c:e5:e8:43:c8:b5:f8:ca:13:97:8e:4d:73:24:7e:
5c:5a:4b:5b:d2:e6:26:9b:e2:71:eb:25:c2:ca:04:61:76:ef:
d9:6d:b3:db:bb:66:0d:f1:3e:98:36:47:80:9a:1d:b1:94:1c:
cc:bf:6d:ad:96:83:53:7e:0e:a0:c5:0c:b2:c5:da:1e:f6:e3:
89:b2:93:c2:57:35:10:0a:d5:56:2f:7e:9f:5a:14:9f:ee:13:
7c:3a:85:02:ec:21:05:4d:c7:1c:09:34:23:d7:41:82:7d:bc:
0c:e7:99:ec:36:ee:bb:0b:3a:86:d8:6d:63:5f:02:ba:d5:53:
e0:a8:7c:e8:82:39:0a:23:e4:fb:78:bb:d3:68:99:31:a8:f2:
b9:82:be:d5:2c:7e:56:33:73:94:29:37:19:6f:aa:6b:28:6f:
8e:af:27:25:ea:c3:fd:06:87:6c:c8:ab:40:48:58:83:5f:91:
37:b6:b9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:19 2026 by rpki-client