Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144958.roa
File: AS144958.roa (raw, json)
Hash identifier: UvERm7aObLC25eS1pUWXpZBysoI39BuwKh/eC93/Rfs=
Subject key identifier: 41:3C:A6:B7:14:34:75:77:AE:DA:A6:EF:AE:F6:38:D0:77:75:A2:86
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6B7C70E025D5BFF70A90A0D9BCCEDFBAF533A824
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144958.roa
Signing time: Fri 22 May 2026 07:41:15 +0000
ROA not before: Fri 22 May 2026 07:36:15 +0000
ROA not after: Fri 21 May 2027 07:41:15 +0000
asID: 144958
IP address blocks: 240a:a904::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:7c:70:e0:25:d5:bf:f7:0a:90:a0:d9:bc:ce:df:ba:f5:33:a8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:15 2026 GMT
Not After : May 21 07:41:15 2027 GMT
Subject: CN=413CA6B714347577AEDAA6EFAEF638D07775A286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:b4:7a:68:72:11:03:3f:5f:94:58:f2:64:
63:ee:d0:70:0c:64:cf:a2:04:73:77:b8:ba:29:01:
19:11:13:dc:30:4c:e6:3f:d6:45:78:2f:06:7c:05:
f1:30:06:75:0d:ff:14:8c:3d:0b:d0:f6:2f:e4:d9:
31:5a:13:05:ac:55:04:02:49:4f:37:93:8a:cf:67:
8b:3a:05:35:93:79:3c:c1:8c:9c:22:70:bc:50:2f:
6c:c0:9a:a6:fb:e2:96:4e:5d:71:bc:e8:fd:77:b7:
c3:99:89:14:89:13:43:31:c9:07:a8:fc:81:6e:72:
e1:55:a6:00:af:12:36:9b:48:2b:74:19:3a:b1:da:
69:8e:35:b8:9a:8c:c3:4e:f3:b7:86:bd:0b:d1:c0:
25:40:dc:a1:76:aa:b4:eb:c6:80:f4:f1:e5:97:26:
93:ef:5a:2f:07:c7:14:17:d2:9d:8d:97:3f:23:64:
33:69:5d:17:2b:2d:b8:eb:19:5a:41:e9:c2:dd:a6:
f1:d6:98:19:f4:1a:43:95:38:3d:b3:94:b9:79:bc:
9f:67:ad:c0:1d:af:a3:ba:ab:e1:22:df:7a:4e:cc:
89:1a:f6:8b:fa:5d:c2:61:ab:5b:4d:cb:65:96:20:
1d:44:86:ab:6a:01:ee:eb:f7:c5:53:48:6c:fb:db:
8d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3C:A6:B7:14:34:75:77:AE:DA:A6:EF:AE:F6:38:D0:77:75:A2:86
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144958.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a904::/32
Signature Algorithm: sha256WithRSAEncryption
18:48:ae:f3:03:0d:8e:97:5f:aa:9f:20:62:1c:bf:da:ce:fb:
ba:cd:1e:3d:b4:9e:6b:59:6a:4c:31:57:c7:90:f6:17:a1:b3:
38:00:c7:0f:48:79:33:0d:d2:53:2d:26:a3:03:a6:5b:2a:ea:
81:22:32:d6:ec:ac:83:fb:8c:87:e6:f8:2e:18:b4:fa:d8:14:
f6:af:16:00:13:00:6b:2d:d5:1c:99:26:de:0c:31:15:20:11:
45:bb:0b:d2:06:c2:85:db:c3:94:25:69:42:51:be:7b:74:7a:
e8:39:8d:bd:19:19:67:93:a6:f2:07:43:17:eb:bd:e5:f5:b6:
7b:80:9c:3e:85:90:77:d9:60:7c:05:55:bc:cf:0e:e9:e3:e6:
57:18:e1:21:49:33:5e:be:4c:0d:d1:9f:27:e1:96:d4:90:18:
89:f0:d3:68:aa:0b:7d:a6:7d:a8:6b:55:92:c4:a3:07:d7:1c:
6a:6c:73:f5:bd:9e:c5:f0:46:1f:9d:9d:53:cb:94:0b:ad:00:
14:ed:06:d1:58:b5:92:78:e0:45:9d:a3:fd:8b:e7:4d:07:01:
bc:a5:79:a0:34:3f:34:3e:f2:bd:49:4e:22:8e:b5:a0:aa:c3:
8c:57:f1:19:72:60:ef:f3:7b:d7:77:5c:bf:6a:e0:7e:9d:83:
1a:d9:13:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:30 2026 by rpki-client