Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144952.roa
File: AS144952.roa (raw, json)
Hash identifier: mOjIqsAOQ8WH44nR1a48ohxXvUC+R+GwFAi+TQIJ+9c=
Subject key identifier: FB:1F:67:5F:C9:8B:D5:D2:6C:62:54:C4:69:22:84:1C:10:86:3D:F4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5D2F2306D6CC8F9662C43A550A4A2BE94690DF5A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144952.roa
Signing time: Fri 22 May 2026 07:08:59 +0000
ROA not before: Fri 22 May 2026 07:03:59 +0000
ROA not after: Fri 21 May 2027 07:08:59 +0000
asID: 144952
IP address blocks: 240a:a8fe::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:2f:23:06:d6:cc:8f:96:62:c4:3a:55:0a:4a:2b:e9:46:90:df:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:59 2026 GMT
Not After : May 21 07:08:59 2027 GMT
Subject: CN=FB1F675FC98BD5D26C6254C46922841C10863DF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7c:79:41:d4:c7:72:c0:73:e1:59:3a:24:59:
f1:e9:a3:49:d2:c5:1d:cb:19:98:c2:35:b2:d4:6d:
b5:8c:ef:4c:f1:4e:b5:2f:1f:93:f6:ab:8a:21:d0:
13:72:10:0d:10:d9:9b:95:85:6e:34:70:73:c4:de:
51:5b:8f:5f:0f:8a:e3:94:66:ac:87:fa:47:7a:82:
18:a7:09:b2:f4:9d:b3:2d:5a:2f:27:60:5b:0c:0e:
8e:c8:79:d8:58:f4:6d:dd:08:82:09:47:7d:9c:81:
5a:9a:d7:96:81:5d:da:9e:a0:f5:2f:6c:41:5a:4d:
15:e4:8d:e3:d6:d0:b1:29:4d:7e:2a:c2:2f:04:df:
85:d9:c7:e7:28:c2:19:db:15:b7:be:14:84:b6:40:
cd:63:e2:00:f8:64:34:8e:df:e0:ee:c8:d8:0d:74:
e3:e9:d7:bd:50:9a:d4:bd:0a:f1:af:15:e1:ca:e0:
93:af:50:f7:32:83:25:00:74:0c:0c:cc:35:0e:97:
ac:b9:5f:b6:ab:61:7d:e0:a5:c5:ca:18:ed:5a:4e:
2f:c2:a8:02:61:93:ef:0f:93:fe:c3:46:6b:de:f3:
3f:8b:0a:1b:6e:db:00:aa:fa:f0:39:ad:95:ec:93:
21:1b:aa:14:90:f8:19:bc:c0:21:2b:a8:7b:67:fd:
3c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1F:67:5F:C9:8B:D5:D2:6C:62:54:C4:69:22:84:1C:10:86:3D:F4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144952.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8fe::/32
Signature Algorithm: sha256WithRSAEncryption
41:21:77:30:c0:d8:a6:43:0f:e5:61:91:1b:90:9f:9d:ad:a2:
ba:fd:62:a5:47:bd:a6:a4:0a:3d:ee:b0:e5:5c:85:d0:25:00:
f6:e8:22:a8:2c:f2:15:3f:5e:78:4e:f5:49:12:5c:62:6a:78:
91:4b:82:cf:15:05:2e:e3:b6:1c:a0:5c:b0:2d:f5:35:1e:69:
75:e4:88:62:9a:d9:8b:5c:cc:7c:3e:dd:02:76:37:a4:69:c7:
ad:1f:e5:bb:78:f5:73:0a:a5:39:e0:d0:a3:7a:b7:20:70:99:
0e:3d:f8:30:64:ce:47:7b:ab:12:d6:db:6c:61:96:e3:2c:c5:
aa:3b:4d:0b:04:ae:e7:38:ab:30:27:b0:bc:bf:b3:4d:c0:5f:
79:4f:8d:bf:63:22:44:5c:41:b7:17:bb:cd:35:50:a5:48:f7:
c3:5c:49:1c:5e:2a:d9:e9:95:b7:cd:3f:47:b6:84:43:10:39:
a0:f7:0b:e7:c4:2d:60:3c:d0:61:26:fc:52:d6:23:61:04:d6:
e3:c9:92:71:16:30:7d:06:06:df:b8:f3:14:98:6e:62:0a:ac:
e2:40:f1:62:6b:ac:1b:25:56:c9:b8:df:a3:95:15:80:39:af:
ef:18:39:b8:14:ae:c4:39:8b:94:ea:16:84:97:71:27:0b:98:
42:c8:8d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:50 2026 by rpki-client