Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144963.roa
File: AS144963.roa (raw, json)
Hash identifier: nHw0iktfuMlJlULOM8wza/w3u/wMbwpcsnf+jucELqQ=
Subject key identifier: 39:22:0D:27:C2:D8:47:F2:DB:89:4F:E6:08:1D:45:CB:EA:DE:6A:E9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0651A86B34913F8987B4734D1012D1404CE5A4A9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144963.roa
Signing time: Fri 22 May 2026 04:08:00 +0000
ROA not before: Fri 22 May 2026 04:03:00 +0000
ROA not after: Fri 21 May 2027 04:08:00 +0000
asID: 144963
IP address blocks: 240a:a909::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:51:a8:6b:34:91:3f:89:87:b4:73:4d:10:12:d1:40:4c:e5:a4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:00 2026 GMT
Not After : May 21 04:08:00 2027 GMT
Subject: CN=39220D27C2D847F2DB894FE6081D45CBEADE6AE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:28:91:53:6b:12:11:50:99:4f:25:9c:b8:6c:
54:96:62:6a:d8:42:9a:91:97:3c:59:c7:9f:a1:74:
e5:b3:8f:19:53:49:63:75:a9:be:38:36:99:e8:e2:
96:6e:25:1b:8f:08:4d:6a:74:c1:93:6e:3a:84:83:
1b:23:cc:89:21:62:15:c0:3b:64:e2:76:1b:fe:79:
e8:c2:41:57:79:35:95:b3:ee:a7:da:c3:17:97:c2:
9e:48:71:8a:cc:94:a8:71:a3:6b:d8:a9:70:66:60:
76:9a:cb:01:29:6c:73:ca:9d:18:73:8d:e1:59:02:
2b:b6:b2:e8:d2:35:c2:32:71:25:c7:b0:b9:5f:d4:
cd:2b:43:f6:c4:68:c8:a3:27:8e:18:6d:98:3e:b6:
96:a6:66:6d:e8:e8:9a:cf:e0:b7:91:53:c1:29:5f:
28:ef:db:88:c3:86:be:dc:38:4f:db:6d:9b:84:4f:
a3:56:01:51:51:39:90:08:91:87:f4:5e:55:15:05:
05:72:d1:a6:81:76:04:db:4d:3e:fb:ca:1c:47:9f:
08:d9:2a:f3:cd:83:12:47:ea:9a:be:66:5d:8b:49:
2b:c9:d9:88:19:28:6e:f7:99:a5:3b:0f:33:72:10:
22:6f:3e:a3:f0:cd:7d:cb:07:7b:b2:30:a1:53:c0:
90:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:22:0D:27:C2:D8:47:F2:DB:89:4F:E6:08:1D:45:CB:EA:DE:6A:E9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144963.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a909::/32
Signature Algorithm: sha256WithRSAEncryption
0e:83:d1:ce:3b:9f:da:46:ca:5d:4e:65:09:32:a3:22:92:7c:
6f:14:a4:bf:fd:f7:df:d5:99:a6:21:31:19:25:df:c0:f2:fa:
86:e5:a4:cd:16:d5:f4:be:0b:6f:91:4e:b0:fb:e9:53:20:99:
bf:da:93:0b:0d:de:cd:99:ff:46:50:eb:d5:1a:74:ec:32:40:
61:09:23:2c:05:69:77:83:7c:63:dd:d4:f9:e3:7b:52:58:05:
dd:a0:cc:22:2d:b2:55:1f:31:bb:c9:54:ea:e6:af:ce:80:dd:
73:b8:b9:88:3d:90:75:cf:35:20:1e:86:7a:e9:c2:3a:f8:92:
41:4d:58:e9:39:cd:67:64:0c:27:a6:3e:48:01:da:e6:84:05:
e3:23:73:59:ae:b9:35:04:1c:b9:2d:2f:d3:2f:02:00:aa:c1:
ab:ac:22:11:a8:f2:7a:09:ad:29:9e:55:77:eb:60:1e:19:58:
f2:49:75:24:33:3b:4f:5a:dd:39:50:39:08:4a:14:e2:75:77:
29:56:d7:96:5f:a4:b7:7f:60:34:1e:ab:4c:89:15:c2:16:3c:
10:96:96:c1:b9:72:d8:e6:6a:0e:e1:59:ca:4f:01:0e:22:b1:
7e:bd:77:1d:05:49:41:92:b7:6c:d8:d2:37:30:ac:52:9c:d1:
e0:29:f9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:14 2026 by rpki-client