Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144966.roa
File: AS144966.roa (raw, json)
Hash identifier: xW1ENe9Rtbd2Htlq/+/yRx2LvTQH8LszOHZ9d1aIyhk=
Subject key identifier: 1E:20:44:8D:11:D5:1F:58:77:BE:46:23:9A:27:F7:99:DB:7F:F0:DA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 21E477E19136D67866F468D550463A78D99C5082
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144966.roa
Signing time: Tue 26 May 2026 02:35:24 +0000
ROA not before: Tue 26 May 2026 02:30:24 +0000
ROA not after: Tue 25 May 2027 02:35:24 +0000
asID: 144966
IP address blocks: 240a:a90c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:e4:77:e1:91:36:d6:78:66:f4:68:d5:50:46:3a:78:d9:9c:50:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:24 2026 GMT
Not After : May 25 02:35:24 2027 GMT
Subject: CN=1E20448D11D51F5877BE46239A27F799DB7FF0DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b2:ff:27:5c:5d:44:e6:3a:72:4f:90:75:ac:
49:3c:20:1c:87:52:11:c6:3f:b4:42:94:96:25:1b:
94:6f:2a:ee:36:7d:1b:c4:cd:d7:fd:e8:b1:99:ae:
0b:c2:d2:53:17:e0:bd:4e:cd:7a:99:cc:c7:11:c4:
e2:e7:60:f9:21:1e:45:2a:d4:91:a8:1c:30:f8:d8:
77:08:9e:8e:1d:d7:07:ac:0c:1a:68:1d:eb:7e:ed:
31:51:a0:b5:cd:da:e3:08:fa:07:a9:c5:1a:53:8f:
a8:41:cd:bc:2f:61:48:16:d3:a7:58:83:69:88:f4:
87:e7:5e:12:38:b5:15:1c:3e:59:b7:47:4c:61:de:
1c:18:46:31:cf:25:52:6e:3c:ce:b4:6c:c7:09:ff:
e1:17:4d:c7:45:62:ae:ab:f1:ec:29:19:74:51:ea:
7b:f4:da:c2:a6:5b:62:a8:f6:37:34:e8:07:d8:d5:
73:cb:ad:c9:8c:23:38:72:1f:f3:7d:0f:d3:ca:b0:
01:7e:87:c0:a3:56:dd:6b:3a:78:5b:0c:42:d9:33:
a4:78:70:4e:63:7f:c8:6f:2e:99:94:08:d0:e8:59:
c3:f0:31:4e:3d:cc:d5:fc:20:6b:f0:a2:63:d9:a7:
01:cf:0f:66:ad:6b:21:7d:89:85:2e:d3:87:c8:d0:
7a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:20:44:8D:11:D5:1F:58:77:BE:46:23:9A:27:F7:99:DB:7F:F0:DA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144966.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a90c::/32
Signature Algorithm: sha256WithRSAEncryption
71:46:9c:b9:d8:e3:7b:ac:45:e5:be:ca:2a:9f:aa:93:e0:0f:
39:16:56:45:c2:08:9e:ab:63:98:76:63:21:6d:a1:f5:98:2e:
14:ca:c9:84:da:50:17:83:ff:57:32:ff:00:dd:a0:29:d6:ce:
4d:a1:25:ea:40:47:29:5b:90:a8:9b:cf:3c:ce:41:71:6d:04:
37:82:43:62:ad:57:5c:26:73:da:e5:e1:92:05:0f:0d:7e:5f:
0e:aa:73:ff:a0:15:05:7a:d5:c4:1b:27:7e:09:01:34:21:ca:
08:5b:e5:54:7b:56:40:17:da:ff:29:55:ee:52:ac:aa:77:b5:
f3:37:96:75:f9:9d:e4:69:96:23:6b:ea:b4:5b:de:bc:3f:ee:
02:fb:07:75:8c:e1:2d:0e:5d:6d:dc:c0:ab:b3:91:bc:a5:a0:
c0:50:ec:e6:b8:4c:21:17:43:dc:d9:c0:89:fe:e9:58:7d:56:
5b:53:cc:9e:52:58:4c:59:1c:0b:69:d5:d3:f1:95:76:17:4e:
ba:f9:3a:60:2b:3f:7b:d9:8b:7f:52:bc:47:bf:8e:c1:94:43:
90:02:92:6c:68:36:15:58:fe:52:09:72:0d:33:8c:d0:53:1f:
05:43:64:0e:b7:06:b7:2d:60:ba:eb:77:bd:a6:0f:d6:10:e5:
0a:b2:21:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:12 2026 by rpki-client