Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144957.roa
File: AS144957.roa (raw, json)
Hash identifier: 2rCiV4jHruHXX1bMamvPXvtDus5DeZd1qhRCr/ww46k=
Subject key identifier: 28:03:47:8F:60:69:E3:1C:5B:2C:E2:B6:7E:09:0A:90:34:50:2D:90
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 46EEAC5DDC0C8350117BC19BC162DC2CC54326FC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144957.roa
Signing time: Tue 26 May 2026 08:53:00 +0000
ROA not before: Tue 26 May 2026 08:48:00 +0000
ROA not after: Tue 25 May 2027 08:53:00 +0000
asID: 144957
IP address blocks: 240a:a903::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ee:ac:5d:dc:0c:83:50:11:7b:c1:9b:c1:62:dc:2c:c5:43:26:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:48:00 2026 GMT
Not After : May 25 08:53:00 2027 GMT
Subject: CN=2803478F6069E31C5B2CE2B67E090A9034502D90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:ba:1c:ff:c8:50:45:a9:2e:19:d6:bf:62:
f5:6b:c4:9c:a0:77:00:90:2e:a0:86:df:bd:88:3b:
7e:ab:7b:d4:39:47:f8:73:9f:c7:34:b0:91:fb:94:
af:4a:e8:27:13:bb:d4:e8:47:93:76:d9:f1:72:a8:
42:e0:d6:ca:d5:82:34:46:ff:d8:6c:34:d9:4a:b9:
8e:cd:5b:37:c2:d0:69:bb:ee:a2:51:60:06:2a:48:
74:f0:c7:c9:84:95:51:c1:be:c4:d4:d4:94:b2:0c:
e2:bf:28:2a:98:cf:fe:ac:9d:94:be:c5:74:b6:f9:
d1:e6:2a:f4:56:7c:39:61:d6:ba:49:b9:67:41:18:
a9:d4:00:fa:96:ca:b0:6a:51:23:d9:af:c5:9e:fe:
f5:a2:20:43:a4:97:aa:cf:2b:84:14:62:45:33:16:
7a:7f:dd:01:e7:c9:d9:79:ce:24:4b:25:7a:89:f0:
68:68:15:31:95:0e:f7:5d:21:07:cf:60:b8:c2:cb:
a0:b5:e6:a4:63:c4:95:d7:bd:ff:9f:05:58:7e:68:
0f:c4:44:53:cd:ee:2c:e7:5c:89:63:7d:d8:c1:ba:
8e:64:a3:a3:f5:54:3b:cd:77:7c:14:97:bf:42:55:
ca:fa:f7:46:7e:7b:c5:31:60:16:be:03:3c:4b:52:
fb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:03:47:8F:60:69:E3:1C:5B:2C:E2:B6:7E:09:0A:90:34:50:2D:90
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144957.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a903::/32
Signature Algorithm: sha256WithRSAEncryption
8d:1b:43:61:8b:4a:d1:b9:31:a4:6a:79:15:48:bb:88:03:78:
b0:1f:89:83:68:78:e0:85:d2:90:6c:bc:c4:3d:6f:a6:2f:fc:
d7:d2:f4:b2:2d:bd:ff:e2:fc:78:71:20:ea:ed:e7:23:cf:c6:
a5:6a:12:2a:1f:da:25:2f:4a:8a:e4:12:71:29:3a:08:1a:25:
f5:c7:c0:3d:f2:a0:d3:a8:03:a4:7e:f6:ae:b9:f0:cd:fb:cf:
34:ec:e5:e3:bd:31:b0:77:50:87:18:a5:fe:7e:c4:81:87:70:
d9:b2:a0:9b:03:54:01:20:3d:85:f0:ea:fd:df:58:8e:64:9f:
5b:43:e0:0d:1e:80:63:d9:b8:85:43:38:18:a6:20:84:13:76:
34:51:39:d1:62:c4:4e:b0:16:c0:63:48:8f:a8:dd:97:62:ac:
0f:32:1e:98:44:bf:1f:b2:96:06:ca:7c:3f:fa:c5:7e:54:34:
62:47:62:32:b8:38:cb:a2:95:69:c9:fc:bb:14:d6:a9:ba:87:
74:2d:05:25:07:53:e6:0e:95:b2:b0:a5:bf:a2:4b:07:23:e3:
e3:51:32:b6:2c:42:38:0e:39:7e:49:65:43:4a:f5:bd:23:99:
d9:0d:14:83:57:3e:c5:f4:c1:6a:35:58:e9:c5:17:d3:52:b9:
1c:52:fc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:20 2026 by rpki-client