Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144959.roa
File: AS144959.roa (raw, json)
Hash identifier: meStMbkLWKEIjPPGylLTH1mTZMFj6ingfy0+8qh4+3c=
Subject key identifier: DA:64:8B:9C:57:85:5E:AA:8A:9A:F7:94:E2:CF:20:EE:B1:0B:B4:AE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2EC1F124858492879FAD3543DE486CE1832AFBAC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144959.roa
Signing time: Mon 25 May 2026 01:38:13 +0000
ROA not before: Mon 25 May 2026 01:33:13 +0000
ROA not after: Mon 24 May 2027 01:38:13 +0000
asID: 144959
IP address blocks: 240a:a905::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:c1:f1:24:85:84:92:87:9f:ad:35:43:de:48:6c:e1:83:2a:fb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:13 2026 GMT
Not After : May 24 01:38:13 2027 GMT
Subject: CN=DA648B9C57855EAA8A9AF794E2CF20EEB10BB4AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d4:9f:47:8e:48:f8:53:43:96:53:bf:e6:11:
c3:54:37:66:de:7a:8f:8c:12:ea:4e:f9:a4:d1:62:
57:52:e8:95:c9:20:99:66:48:e6:14:40:e2:7c:24:
72:57:cc:bc:c4:38:4b:34:d7:a1:db:96:4d:1a:4d:
df:7b:1f:4d:81:a1:a6:8a:a9:d4:05:86:1a:7a:76:
7e:b9:3f:db:6e:2e:ef:a4:8f:af:a4:a1:5c:b9:5d:
38:b9:99:55:5f:81:03:d3:05:c8:18:6b:a6:da:6e:
e5:da:98:dc:91:79:91:4a:36:cb:e0:10:39:1c:90:
9d:6f:65:e2:0e:90:4e:04:1c:e2:3e:b6:37:3e:4e:
e8:54:25:e9:ba:1c:6e:64:e7:70:d1:77:89:a2:03:
9b:eb:d1:ea:31:f6:54:f9:79:63:cc:b9:75:5e:73:
81:ce:cb:5c:ac:59:df:20:06:89:db:d3:52:b6:15:
fe:8b:97:3f:7a:2c:fd:97:36:16:7b:71:00:3f:cf:
5d:d4:22:ea:31:97:c9:5b:f7:2a:de:66:07:ba:c5:
65:04:6b:a4:c1:97:ab:5f:d3:79:a9:0e:05:63:55:
51:a5:38:22:50:8d:14:62:67:d4:00:06:52:69:04:
de:19:ff:6e:c7:78:e0:9e:76:fb:b7:4d:89:30:dd:
f9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:64:8B:9C:57:85:5E:AA:8A:9A:F7:94:E2:CF:20:EE:B1:0B:B4:AE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144959.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a905::/32
Signature Algorithm: sha256WithRSAEncryption
4e:45:5c:a3:b5:af:f9:8c:28:7f:a5:5b:1c:a1:db:d9:55:9a:
84:df:39:58:37:56:54:28:d7:80:fc:09:3f:58:66:d1:b9:1a:
b0:74:8b:e4:af:f0:ae:62:e3:82:7c:35:fc:cc:0a:00:b0:9b:
b1:09:83:8e:a2:e9:f0:5c:95:2e:17:9a:d1:73:33:bb:20:e1:
89:4d:43:83:d2:3e:ef:54:83:4b:d5:a0:dc:41:7d:56:78:0c:
38:f9:38:18:c3:0d:94:84:8c:fb:c5:a3:2e:f0:60:9f:3f:de:
93:a9:1b:2c:67:df:d2:3b:ad:ee:fd:02:5e:ae:4e:71:ec:42:
fa:c8:5f:f7:55:83:93:3e:72:93:b7:a3:2f:48:75:e5:97:7b:
6f:9e:46:4f:3e:c6:6a:bc:83:94:30:1a:ec:6e:d5:65:da:06:
7b:87:06:fc:89:99:8a:67:a2:19:cd:78:c5:1f:dd:13:a9:0d:
ee:b2:4c:7b:d6:f5:bb:37:9d:b4:bc:08:c8:40:3c:a0:ae:24:
31:0f:9e:ee:6c:37:d6:8c:93:46:00:19:85:bd:c3:01:15:ab:
f2:be:b6:69:78:09:4f:31:a5:f9:38:5b:d1:5c:df:ce:41:06:
8c:cd:fc:8e:58:0b:9d:a2:99:90:b8:0c:db:92:0c:0f:79:74:
2a:e3:27:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:32 2026 by rpki-client