Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144971.roa
File: AS144971.roa (raw, json)
Hash identifier: /4OyBByaknUtYRzrSAXPDn9mhhx1rs9yjeeGJbJhR0U=
Subject key identifier: DA:81:7F:BB:C5:5A:77:AB:3B:37:54:F5:29:26:39:AB:99:BF:2F:52
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 67EFAE70F949A804F9E2008C845C2317E74E7EC4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144971.roa
Signing time: Fri 22 May 2026 01:50:05 +0000
ROA not before: Fri 22 May 2026 01:45:05 +0000
ROA not after: Fri 21 May 2027 01:50:05 +0000
asID: 144971
IP address blocks: 240a:a911::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:ef:ae:70:f9:49:a8:04:f9:e2:00:8c:84:5c:23:17:e7:4e:7e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:05 2026 GMT
Not After : May 21 01:50:05 2027 GMT
Subject: CN=DA817FBBC55A77AB3B3754F5292639AB99BF2F52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:37:95:ec:36:6b:9d:e5:cc:0c:10:2d:cd:b9:
f3:6d:f9:3c:44:7c:f5:b7:10:c8:22:a5:d0:fe:03:
74:98:58:25:83:8a:ef:79:5d:65:9c:d7:38:14:c3:
2e:49:35:98:da:8b:d0:72:d0:d1:39:a0:9e:e2:3e:
1e:fc:10:78:13:33:2c:03:24:43:0d:df:82:89:c1:
24:36:5a:56:6f:dc:ad:9f:4e:a4:39:91:f0:68:48:
a6:8b:74:37:4b:68:d0:c6:fc:b2:b2:dd:03:42:2a:
da:fd:43:2d:99:d2:b8:3f:be:2b:55:85:a1:a2:8e:
8a:fa:bc:0a:01:79:9c:41:a1:db:22:97:b7:3a:d7:
90:21:15:e0:2d:a0:1a:9d:8b:55:63:24:a8:21:04:
70:f2:57:59:4c:2b:28:e3:25:73:5e:7f:6a:31:6a:
a4:34:21:0e:8e:84:6c:fb:e8:b8:cb:d3:76:9a:7b:
68:cf:0a:6e:ed:17:63:24:10:68:20:3c:8b:f0:aa:
8f:b9:c8:17:6b:ec:be:1b:65:0d:1f:14:f4:7f:b2:
76:58:74:9f:27:d2:b0:62:06:4c:ea:4a:e1:79:4f:
63:64:d3:92:61:53:14:d0:75:10:0c:a9:4a:9b:ef:
85:2d:80:f6:ce:d7:c1:c9:b5:29:ab:00:6b:e6:0b:
b7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:81:7F:BB:C5:5A:77:AB:3B:37:54:F5:29:26:39:AB:99:BF:2F:52
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144971.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a911::/32
Signature Algorithm: sha256WithRSAEncryption
b8:02:44:53:20:c2:71:66:f6:b5:a7:3c:68:c7:f7:61:09:29:
e9:ad:99:fd:ce:5c:cd:60:d1:03:17:73:52:c8:f4:de:72:1b:
d4:36:4e:5e:01:a0:9b:69:8d:c4:df:d1:f9:88:83:2f:3f:a5:
b0:2e:41:af:c5:ef:0b:80:67:7f:5e:13:56:16:84:97:6e:42:
bb:32:94:7d:44:f3:61:b7:c5:17:0c:30:64:f3:7a:76:42:b2:
15:4a:fb:94:4a:07:91:70:81:57:21:b5:fa:1c:2f:fe:4e:fb:
06:a9:a5:88:3b:82:6e:2a:dd:00:52:89:9b:e7:14:83:98:7c:
db:27:67:28:f8:a0:86:bf:e6:67:14:91:a9:13:41:e5:b5:bc:
ec:cf:d7:ee:12:ff:8e:8f:a2:2d:e8:27:2d:b0:3d:35:9b:a1:
11:0f:b9:2f:8f:28:3f:4f:d2:13:5e:db:8f:8b:92:a8:6b:7d:
6a:02:f1:ec:d1:0b:d4:6d:62:1a:76:23:2c:cb:ff:7c:1f:69:
06:c2:b1:1f:f9:b0:a5:f2:a9:59:90:59:cb:e1:d3:f4:dc:0d:
07:c1:f0:ef:17:c0:47:1c:54:95:7d:cc:11:33:0e:27:c5:20:
f8:c6:15:0b:6b:e3:4d:61:1a:c7:f5:77:ed:05:07:f0:58:48:
84:c5:19:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:29 2026 by rpki-client