Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144964.roa
File: AS144964.roa (raw, json)
Hash identifier: qcgsgt1HSXDXR29R/Dl0lV0xSKfazJ/EtfF4EHQ9Pro=
Subject key identifier: 11:F3:B9:40:EA:87:C8:A3:93:83:2E:70:26:47:B0:ED:93:DE:53:67
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6496DCC8B9014EBC5A3530A3A869664DE4EDCD8A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144964.roa
Signing time: Mon 25 May 2026 02:22:31 +0000
ROA not before: Mon 25 May 2026 02:17:31 +0000
ROA not after: Mon 24 May 2027 02:22:31 +0000
asID: 144964
IP address blocks: 240a:a90a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:96:dc:c8:b9:01:4e:bc:5a:35:30:a3:a8:69:66:4d:e4:ed:cd:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:31 2026 GMT
Not After : May 24 02:22:31 2027 GMT
Subject: CN=11F3B940EA87C8A393832E702647B0ED93DE5367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:41:99:9d:63:1b:79:96:54:5e:1a:f9:38:8b:
b4:d9:8b:9a:16:1e:e7:e5:24:ec:9d:cf:8a:28:76:
68:45:ad:ec:9e:d6:5e:1f:b8:eb:8f:65:83:47:3e:
11:b6:c0:a4:03:e0:4d:90:9d:48:64:5f:71:66:17:
ed:09:8e:58:d7:cc:da:8f:90:26:09:5a:18:ab:71:
20:a1:d0:f8:32:ac:cb:1b:75:ba:b1:ff:8d:e5:ce:
c6:97:1b:73:85:ba:18:3d:c9:67:e4:af:50:67:29:
22:61:ab:b7:b3:87:d2:64:fe:bc:80:e1:45:81:d6:
b5:37:fb:53:db:bb:14:95:d0:10:0d:00:ae:12:59:
d8:64:05:4e:29:61:51:23:11:89:8d:1c:14:dc:52:
aa:80:2e:d4:e3:10:57:0d:7e:da:9d:1e:db:23:f3:
62:4c:f0:0f:3b:40:fa:03:fa:c1:6b:8e:79:ac:4c:
ba:a8:11:84:a7:4f:52:f6:73:74:33:e5:36:ac:d3:
1f:3a:1d:56:b4:ff:a2:4e:88:10:5d:33:fd:66:87:
3a:a8:f2:76:c3:44:f9:77:0e:67:07:24:26:10:f0:
1f:f1:4a:98:16:e2:6f:05:34:ee:7a:b8:c1:55:9b:
01:a4:89:da:b2:e7:f7:bf:93:d0:b8:9e:95:55:15:
c1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F3:B9:40:EA:87:C8:A3:93:83:2E:70:26:47:B0:ED:93:DE:53:67
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144964.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a90a::/32
Signature Algorithm: sha256WithRSAEncryption
46:78:0f:56:53:18:d1:dc:75:85:06:8e:a0:e3:45:40:3e:e8:
3a:b6:2a:d3:4d:3d:9b:72:19:bb:08:9c:32:bb:ba:ef:d4:0f:
40:6a:01:26:0a:f9:f3:89:a4:f8:dd:40:da:c2:3a:54:55:36:
73:d6:92:99:a6:54:50:9a:d2:10:a4:e5:fb:b0:f5:58:e1:a9:
6b:17:65:a2:79:7d:6d:42:02:a6:dd:44:ac:d3:e4:3f:b8:8d:
80:b0:33:b9:02:b7:c2:66:99:ef:7d:1b:38:4f:bd:fa:06:5d:
e8:36:15:19:7c:f6:ac:cf:fd:84:27:10:eb:87:72:e8:15:6f:
f2:59:8e:8f:67:81:60:f8:ff:58:a9:51:81:9f:bf:7c:46:9c:
07:fb:f4:07:4e:09:ae:80:4d:06:1c:55:76:3e:fd:85:86:6e:
1c:61:38:61:ef:6e:82:d1:14:d5:69:24:db:bf:f4:46:63:8c:
9e:20:0a:fe:bc:55:79:5a:ea:46:e6:77:9c:af:49:0a:d1:7d:
19:e8:b4:e0:3f:82:6e:e0:07:58:90:38:e3:1a:6c:09:8d:9a:
da:50:dd:51:8d:09:5f:f6:0f:86:7a:fb:5f:f6:01:83:ba:40:
a6:c2:ce:d1:1a:be:4b:ef:5c:79:d2:40:31:5f:a2:97:90:ba:
18:01:3e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:08 2026 by rpki-client