Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144955.roa
File: AS144955.roa (raw, json)
Hash identifier: CT1/yBJHvx0qWIFfrEd9On9svqPm38dKO8Crnh1Ef0w=
Subject key identifier: 3B:10:BE:74:D4:BE:59:5C:0F:4B:88:98:7C:47:83:07:63:D1:87:5E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0483B1ECBEE609835972CA3F605969900B995E46
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144955.roa
Signing time: Fri 22 May 2026 06:27:33 +0000
ROA not before: Fri 22 May 2026 06:22:33 +0000
ROA not after: Fri 21 May 2027 06:27:33 +0000
asID: 144955
IP address blocks: 240a:a901::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:83:b1:ec:be:e6:09:83:59:72:ca:3f:60:59:69:90:0b:99:5e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:33 2026 GMT
Not After : May 21 06:27:33 2027 GMT
Subject: CN=3B10BE74D4BE595C0F4B88987C47830763D1875E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ae:d0:46:bc:c3:6f:23:75:bc:0f:58:6e:75:
6a:44:8b:49:43:be:11:d5:5a:f2:00:62:94:b4:c2:
60:79:cd:79:9c:ff:09:19:81:5a:f0:8e:db:16:16:
5b:6c:47:fd:ef:99:52:d7:d8:86:97:4e:51:c9:4b:
62:02:ff:81:9b:90:e0:28:fd:2e:cb:9e:20:b0:b7:
5b:12:19:22:23:be:e2:28:15:72:04:bd:ec:1d:7b:
20:24:94:3c:84:c9:99:e2:aa:3e:39:28:a9:fd:ca:
de:3e:2d:3a:1e:16:d8:82:1a:45:c4:37:df:20:c1:
8a:b8:94:77:82:1d:91:7c:ed:16:5d:c6:9c:f1:47:
8c:57:bf:4a:d7:f0:ef:3b:a8:1e:d5:cb:fc:9d:d1:
2b:79:f3:53:18:23:03:e8:d1:04:8d:04:93:fb:b6:
4b:b0:d6:24:39:e8:f4:63:55:e5:24:6b:cb:d9:89:
38:dc:ce:24:8b:c0:b2:86:06:0f:01:28:56:46:84:
49:29:0a:f7:0d:f6:1c:b9:d5:c2:29:af:e3:e2:c4:
3b:10:55:d1:38:82:71:5b:de:ec:b9:fc:e9:86:d9:
1a:06:f5:6d:9c:e8:05:bf:c4:e4:78:28:79:75:a4:
71:80:b6:43:9e:ac:ad:dc:fe:e9:b1:10:3a:93:ca:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:10:BE:74:D4:BE:59:5C:0F:4B:88:98:7C:47:83:07:63:D1:87:5E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144955.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a901::/32
Signature Algorithm: sha256WithRSAEncryption
8d:48:05:e0:ca:a1:f7:71:94:a9:79:16:3e:d1:5e:1f:e3:9b:
51:42:f7:3f:bb:dd:35:77:5d:a0:20:aa:38:a9:8b:d8:c6:88:
d1:de:2a:49:82:63:b0:0f:3e:35:d7:78:ed:fe:5d:45:b5:3a:
bf:f3:ec:ea:cc:42:56:56:63:81:f8:84:24:b1:89:83:a5:ff:
f4:a0:d9:4a:c5:d7:c9:87:b3:0f:90:fb:b2:40:db:72:8a:7b:
5c:29:9f:62:7a:42:51:c4:3e:25:98:c1:f7:a4:99:2c:42:06:
a4:2e:71:a8:56:1f:f4:c1:8a:65:00:7c:85:5c:92:32:d3:f1:
ef:ee:27:f8:52:a1:12:9b:11:ce:80:8f:df:dd:62:dd:62:11:
c9:97:fd:c9:27:8c:48:50:d0:8b:e8:84:4d:06:b5:89:9d:9c:
55:00:b6:ed:db:32:22:bc:9a:ce:00:60:e4:80:6c:02:6c:c5:
be:05:2d:b8:4d:fa:18:ae:47:70:ac:0c:26:01:02:ae:82:f1:
5d:47:15:ea:8b:64:21:95:b4:37:91:aa:9a:36:74:bc:90:df:
57:be:b0:f2:22:2f:13:2a:91:af:74:f0:a1:3e:ed:63:9f:5a:
80:21:49:8f:d0:77:06:d2:42:09:b1:1e:bc:10:e8:f3:13:82:
54:d3:39:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:17 2026 by rpki-client