Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144949.roa
File: AS144949.roa (raw, json)
Hash identifier: tE6UTjBW9rgZsahHh8vLes9ukFIek6TprwfGKtg8260=
Subject key identifier: 73:37:03:AA:DF:4A:3C:9C:E3:29:3F:11:7B:32:D0:11:FB:41:AB:ED
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 06FC98174A70BD863114BF931BAD5FF8ACA13193
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144949.roa
Signing time: Fri 22 May 2026 04:27:00 +0000
ROA not before: Fri 22 May 2026 04:22:00 +0000
ROA not after: Fri 21 May 2027 04:27:00 +0000
asID: 144949
IP address blocks: 240a:a8fb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:fc:98:17:4a:70:bd:86:31:14:bf:93:1b:ad:5f:f8:ac:a1:31:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:00 2026 GMT
Not After : May 21 04:27:00 2027 GMT
Subject: CN=733703AADF4A3C9CE3293F117B32D011FB41ABED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:60:19:2d:1d:96:86:7e:d7:82:3b:94:fc:7d:
17:73:42:d0:0e:68:94:1a:f8:11:eb:87:d5:26:2b:
59:4c:af:66:34:f2:78:63:c8:9b:9a:6d:ab:17:a1:
53:ed:29:a0:85:b8:e8:61:38:bd:c6:52:25:6e:67:
04:a5:f9:bb:9f:6a:7e:e4:94:17:df:35:03:a4:10:
13:93:5c:36:43:b3:8d:b0:96:a9:80:96:c4:a3:a3:
19:9b:05:f9:f8:01:45:23:65:9b:8d:fe:54:b7:63:
ee:4b:89:b4:a2:38:03:d5:ca:49:2a:85:a4:09:7b:
48:aa:b5:3e:e7:b5:de:9f:cc:4d:77:41:e4:e0:b6:
03:cb:0f:83:05:3a:ef:71:c9:b3:65:9f:bf:47:ac:
63:1e:d8:fb:04:dd:4c:94:41:e9:07:53:1c:7b:57:
c5:e6:4c:15:3f:3b:f0:a3:8a:f1:f2:b4:2a:ad:a6:
1a:e2:9c:ca:5c:db:66:0a:95:ba:51:81:ef:d9:35:
95:ec:b7:b4:ee:ff:95:75:c3:8c:ae:ae:80:6f:52:
99:53:5d:0f:df:68:0e:45:0d:6e:f2:e9:83:e1:de:
84:6f:76:d3:43:49:8b:b8:77:fb:3e:2e:5b:6b:b0:
e1:fc:f3:0e:bf:68:62:6c:f1:91:87:95:7f:bf:e0:
f5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:37:03:AA:DF:4A:3C:9C:E3:29:3F:11:7B:32:D0:11:FB:41:AB:ED
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144949.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8fb::/32
Signature Algorithm: sha256WithRSAEncryption
54:29:51:e2:55:31:3c:24:7a:71:3a:5f:e1:48:bd:6f:f3:9d:
e0:1c:f1:e1:13:8f:85:80:28:82:e2:05:3e:5a:fb:d6:b5:ce:
48:cc:e4:a1:1b:db:e9:ae:a2:07:06:5e:90:f8:b3:21:98:e9:
56:28:50:30:2e:19:32:c5:1c:76:f4:39:10:7f:58:29:7d:b7:
88:93:de:46:86:2b:6d:4f:fe:93:c3:d7:5c:57:5d:64:3e:db:
1f:28:b5:cc:61:38:13:3c:ee:6f:51:90:db:44:99:82:a4:2f:
28:30:8f:85:6e:5b:99:e2:2b:98:99:de:ec:72:6e:7e:f1:00:
56:0a:e0:33:84:e8:1b:e2:86:46:9f:8f:d3:57:b2:74:8b:41:
ca:80:cc:c6:b3:ea:f3:86:aa:d5:72:ea:be:d4:3f:a2:d4:36:
c4:36:27:d6:45:61:3d:b9:d7:17:8f:2b:13:1e:8c:74:66:80:
be:8d:0b:14:cf:cb:bd:34:4f:aa:5f:e5:a3:a0:00:e7:88:fe:
64:71:c4:13:a5:a1:70:9b:7e:fe:e1:8d:a1:83:71:3c:e6:25:
6b:a5:52:2d:22:61:1c:53:ed:cd:ee:8d:0c:f7:7c:72:30:cd:
28:ee:e7:dd:60:7b:fe:5d:35:ce:7c:a3:d4:9b:b2:e4:d2:58:
b5:09:f7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:21 2026 by rpki-client