Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144970.roa
File: AS144970.roa (raw, json)
Hash identifier: Gxtp0H0mhU/cgN5TlkHBpkzEJvoWrVoJLnPZW9+31U4=
Subject key identifier: 0F:49:3D:CE:9F:90:F1:C8:A4:6C:3C:77:90:F8:99:8B:C2:DC:69:10
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 63B8C0136A73DF1748B1744F2DA8A295F1E2B1AA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144970.roa
Signing time: Mon 25 May 2026 01:20:18 +0000
ROA not before: Mon 25 May 2026 01:15:18 +0000
ROA not after: Mon 24 May 2027 01:20:18 +0000
asID: 144970
IP address blocks: 240a:a910::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:b8:c0:13:6a:73:df:17:48:b1:74:4f:2d:a8:a2:95:f1:e2:b1:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:18 2026 GMT
Not After : May 24 01:20:18 2027 GMT
Subject: CN=0F493DCE9F90F1C8A46C3C7790F8998BC2DC6910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:80:d6:29:0c:4f:de:3d:05:e4:dc:8b:ef:25:
9c:ea:ab:61:64:e5:f9:83:8f:ea:3e:32:31:3f:d5:
67:57:14:a0:96:9f:64:8b:77:2b:bc:ba:82:14:52:
6a:0f:59:ac:b0:5e:b5:ef:91:4e:0d:fc:e0:4a:68:
6d:4a:aa:92:a2:16:17:ad:20:09:1f:a4:31:e2:c9:
9b:92:ba:bd:85:e5:16:41:70:0f:3e:41:41:30:32:
de:2a:22:05:8a:80:a4:b2:59:4c:c5:3f:27:1f:a0:
84:67:b1:04:cb:82:c5:fa:4d:9f:63:0b:60:02:9e:
b7:0a:75:42:95:bc:97:43:d7:9c:c5:85:66:d9:eb:
98:be:9e:bd:42:d3:d2:5c:57:09:2b:59:03:85:f3:
2b:42:70:ac:98:a4:b7:36:68:7d:1d:a6:26:63:99:
ab:7e:13:f4:05:52:df:9e:41:80:8e:dc:23:2f:e5:
51:80:fc:04:af:d7:69:33:e6:7a:83:67:db:39:22:
9f:2f:dd:4a:c5:7b:13:88:36:51:58:78:fe:02:23:
88:8c:7f:9f:29:76:cb:52:0b:4a:6b:d9:8f:b7:56:
2f:a5:12:c8:35:2b:17:57:17:19:98:b2:c1:ee:2f:
b0:2d:82:5d:01:10:4c:6d:6e:a5:6f:86:29:3e:96:
d7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:49:3D:CE:9F:90:F1:C8:A4:6C:3C:77:90:F8:99:8B:C2:DC:69:10
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144970.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a910::/32
Signature Algorithm: sha256WithRSAEncryption
5b:2f:14:74:a7:56:ce:ff:db:97:3e:a4:86:01:cf:69:58:ba:
e1:88:8a:ce:be:32:45:5f:7a:f0:95:b9:7f:1a:92:25:f8:3a:
e8:e7:d0:1c:c6:81:47:82:e9:ae:8d:a7:5b:ea:dd:11:5b:df:
58:cd:d9:5b:af:93:b1:12:23:32:a3:18:83:60:28:b1:57:ca:
33:e4:87:ad:b1:f9:ea:73:12:b7:6d:1f:4d:74:d5:80:3b:14:
dd:45:27:ad:92:42:60:b1:f8:d5:09:e0:2e:00:6e:65:8f:61:
df:d8:49:46:e8:40:1a:29:f1:28:ce:4d:03:f5:fb:5b:e6:55:
6d:9d:98:c0:87:34:ef:8a:0f:3d:c3:45:a9:e3:65:9a:e4:19:
0f:63:16:8d:28:a1:42:d6:5d:ea:40:30:65:63:38:17:20:09:
2b:00:db:7e:16:39:40:de:39:24:6e:ff:51:ed:eb:94:cd:8c:
04:21:ea:81:fc:47:f3:d7:6f:22:9a:1d:2f:ab:61:d8:48:d0:
9d:38:9e:a8:4b:ca:9f:c9:56:8f:ed:2f:f2:35:b0:98:a5:ff:
9a:db:b9:a2:04:ad:cd:ec:04:79:cc:42:9f:8e:a0:a5:0f:b9:
4d:16:41:bf:77:38:80:ab:7f:36:58:b6:19:20:95:f0:e2:9b:
61:c2:52:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:28 2026 by rpki-client