Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144962.roa
File: AS144962.roa (raw, json)
Hash identifier: NAxoBKkinFSujemZsnUWcW3JMLCuglNsVUZNtCHjxwc=
Subject key identifier: 73:AB:7A:A9:81:A3:CA:23:77:FA:14:E3:5D:12:6F:78:B8:D5:84:63
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 29C25970E93D1D8922E0B47ABE1C2D063C4A0450
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144962.roa
Signing time: Mon 25 May 2026 02:22:51 +0000
ROA not before: Mon 25 May 2026 02:17:51 +0000
ROA not after: Mon 24 May 2027 02:22:51 +0000
asID: 144962
IP address blocks: 240a:a908::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:c2:59:70:e9:3d:1d:89:22:e0:b4:7a:be:1c:2d:06:3c:4a:04:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:51 2026 GMT
Not After : May 24 02:22:51 2027 GMT
Subject: CN=73AB7AA981A3CA2377FA14E35D126F78B8D58463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e6:13:72:e9:ae:e8:2d:15:bb:4e:09:f0:2b:
fe:7c:e0:03:8b:1f:2b:c4:6e:d8:18:27:dd:be:49:
b1:80:ce:e7:10:ad:08:4d:7b:9b:f4:7f:f3:35:39:
35:45:e1:68:c2:bc:c1:94:e1:b8:4e:b8:d5:da:2f:
f7:8f:30:11:b2:9f:c1:c0:bf:00:7c:3b:e1:20:f3:
bb:48:d4:ae:b6:77:94:56:d9:56:b6:4e:27:6b:9d:
36:34:5c:79:34:8a:31:d1:90:c5:f4:07:1f:72:2e:
96:91:47:c2:a5:60:8e:13:03:00:5a:92:ac:d3:aa:
32:71:f4:c4:1d:23:53:74:62:a2:9f:21:e3:63:c9:
95:3d:5c:d0:1e:c9:e6:a4:e9:a7:1c:bf:9a:3e:c9:
9b:aa:12:bf:9e:10:3f:19:d3:da:ea:8d:f3:51:83:
4d:36:68:f8:6d:20:2f:8f:86:3e:4e:8c:7f:f2:01:
61:7d:60:e5:f5:f7:cb:8c:21:63:eb:16:28:3c:4b:
73:b0:58:70:2c:67:fd:42:eb:9e:52:c7:44:2d:08:
72:3a:28:80:c1:a2:45:63:2e:cf:df:f0:79:c5:95:
16:bd:00:1f:c7:e4:5f:29:49:cb:fa:42:09:27:b3:
d2:08:f2:4b:95:2c:4a:ac:07:e0:f0:66:9a:e3:6f:
3d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AB:7A:A9:81:A3:CA:23:77:FA:14:E3:5D:12:6F:78:B8:D5:84:63
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144962.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a908::/32
Signature Algorithm: sha256WithRSAEncryption
70:34:21:91:8f:75:21:9a:ca:37:98:2d:5d:c1:9f:3a:dc:6a:
f2:4c:bb:da:1e:06:66:a4:2d:3b:34:32:2f:2c:a8:83:c4:64:
54:cd:8f:6e:95:1f:15:2d:cd:48:1c:46:18:ee:bf:17:54:2c:
40:eb:24:88:4f:38:cf:0f:a8:d4:41:86:ea:0b:11:42:5a:a1:
30:72:0f:57:1b:c0:3b:2a:10:06:e4:9e:25:1f:d7:ca:38:df:
30:76:31:90:89:b5:cb:f4:4e:49:c2:83:a6:06:d8:f5:a5:bc:
82:af:71:d1:60:89:e2:7e:9c:af:1b:25:ab:1f:4b:d6:be:ad:
10:b3:af:1f:86:95:dd:7c:07:37:c7:74:8e:dd:64:d2:9a:8d:
25:96:19:a4:c7:74:e9:3b:4a:05:b1:d8:98:0b:9d:a3:e1:98:
f5:9a:af:45:e2:06:50:3d:38:72:05:b2:97:6e:fc:a0:0a:56:
2e:3e:c4:fa:68:a9:60:44:11:4b:ce:57:d4:f2:2c:f9:c7:b3:
b3:39:15:e8:1e:69:18:b8:85:e8:22:6e:50:44:ab:cb:8a:d4:
9c:b9:52:3b:04:6b:6c:66:29:8f:76:62:52:58:2f:ba:03:9f:
75:73:e9:9d:60:a9:fb:9c:c1:d4:8e:12:a6:95:f1:08:5a:40:
32:6f:34:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:12 2026 by rpki-client