Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144968.roa
File: AS144968.roa (raw, json)
Hash identifier: EunbTvwYbEKltQWnFG8gcQ+9HFZWajHS5i3A/MSCq9E=
Subject key identifier: 34:45:89:53:6F:3A:43:53:69:30:FC:E6:33:68:25:99:1E:E2:55:C4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 266F98E5EC84EBC08812F681566D7440AF039565
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144968.roa
Signing time: Mon 25 May 2026 06:28:35 +0000
ROA not before: Mon 25 May 2026 06:23:35 +0000
ROA not after: Mon 24 May 2027 06:28:35 +0000
asID: 144968
IP address blocks: 240a:a90e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:6f:98:e5:ec:84:eb:c0:88:12:f6:81:56:6d:74:40:af:03:95:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:35 2026 GMT
Not After : May 24 06:28:35 2027 GMT
Subject: CN=344589536F3A43536930FCE6336825991EE255C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:d4:42:2a:f5:d4:03:5a:da:07:98:61:ac:
0b:40:eb:1d:88:82:fe:9d:19:26:b2:9b:6d:86:29:
b6:32:3f:2e:98:c8:36:97:32:47:41:db:04:51:72:
95:14:96:44:bf:77:4b:e2:68:cb:f0:78:42:6a:40:
8f:28:3d:20:d0:74:6d:74:28:6b:8a:46:84:86:6d:
29:81:3f:fb:a3:c6:d5:98:fd:77:62:62:29:44:7e:
11:6f:32:11:6a:19:e2:cb:83:3f:48:22:d0:07:c8:
a5:94:1a:11:75:5e:6c:37:fb:29:1f:fb:6a:ff:73:
e5:62:a7:ad:12:a1:09:6d:07:6f:cb:79:4a:36:55:
27:6f:5c:8b:21:e7:04:99:5e:01:ba:39:34:1e:f3:
bb:52:dc:1f:72:f7:37:23:38:ac:72:88:cc:8d:db:
67:7d:7c:6b:85:7e:f5:a2:5f:70:9c:7f:62:3e:4f:
e5:5e:6c:84:63:d5:3f:7a:16:52:9e:c1:1e:0f:d6:
e4:e3:31:ec:0f:9d:ae:a8:0d:d4:35:fd:f9:6b:27:
38:3e:e4:92:98:86:c5:96:8e:70:30:d9:f3:07:b3:
c3:d2:bb:0b:04:ad:47:5d:e4:b2:85:1e:08:a9:a3:
f8:60:b8:26:a7:91:71:6b:84:b2:1b:09:b3:7e:e1:
1c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:45:89:53:6F:3A:43:53:69:30:FC:E6:33:68:25:99:1E:E2:55:C4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144968.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a90e::/32
Signature Algorithm: sha256WithRSAEncryption
1a:15:3d:73:4b:ce:b8:0e:83:10:78:a6:85:1a:d3:aa:75:6f:
0c:03:06:7a:64:3a:f3:70:e9:5c:ba:49:7f:47:59:eb:70:ad:
35:56:bf:83:38:c5:bf:cf:fe:49:e4:97:5b:20:f1:9c:07:dc:
67:f3:47:06:2b:f1:f4:43:70:0c:3e:79:cb:b7:bc:da:b0:d0:
59:17:1d:80:ba:42:54:90:47:f6:c6:43:18:b8:0f:ae:10:1b:
d1:47:df:d2:bd:9a:67:77:06:2f:a1:68:bd:1f:24:96:14:80:
42:03:db:0c:64:c9:0a:d4:32:d6:33:b8:2c:38:f5:d6:0a:d4:
68:81:9f:23:fe:a2:bc:e4:c6:73:50:05:37:7a:03:bc:84:1a:
ab:74:52:fa:ac:dc:62:c0:78:ca:0b:63:09:5a:59:27:0f:66:
5c:ce:e7:3b:31:60:1c:5e:71:f5:a8:aa:a3:33:09:b7:37:d9:
55:d4:83:1e:e7:48:be:6a:d9:81:16:fc:26:3b:e7:99:e4:db:
c1:2b:24:cf:e5:4f:f3:3b:57:4e:25:e1:67:93:c0:49:e8:ed:
d7:b9:7a:57:46:e5:f0:55:f7:5b:d1:80:72:cf:5a:bf:a7:c3:
ec:ef:85:c0:53:d5:25:a7:02:e0:f7:44:1d:ac:49:65:6f:36:
36:41:29:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:55 2026 by rpki-client