Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144972.roa
File: AS144972.roa (raw, json)
Hash identifier: HnfYDb7+iSRlUn+8+zFdF4NWbosllSVgLfMdUw2aurE=
Subject key identifier: BB:88:BC:57:87:B7:C1:53:AF:CF:EC:E4:D4:37:66:1D:E0:67:E2:C9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 26915E06FD5F79C955D053509D04181AEEBD45A1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144972.roa
Signing time: Fri 22 May 2026 02:47:41 +0000
ROA not before: Fri 22 May 2026 02:42:41 +0000
ROA not after: Fri 21 May 2027 02:47:41 +0000
asID: 144972
IP address blocks: 240a:a912::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:91:5e:06:fd:5f:79:c9:55:d0:53:50:9d:04:18:1a:ee:bd:45:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:41 2026 GMT
Not After : May 21 02:47:41 2027 GMT
Subject: CN=BB88BC5787B7C153AFCFECE4D437661DE067E2C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:50:51:95:c3:bc:b3:19:cd:2c:e6:d1:2c:
36:e4:01:1a:ee:de:2d:8f:db:21:90:c4:16:35:d8:
93:e6:16:99:c0:ea:76:32:79:06:7c:06:46:b9:ce:
7e:71:7c:cf:d1:df:96:f0:18:03:81:70:3d:52:4b:
46:20:b5:ce:0c:75:93:e0:bf:bc:b5:71:4a:83:a4:
44:db:ea:b9:9f:1a:9c:f4:2b:1f:d9:7f:b5:48:99:
c4:db:d0:66:3c:06:32:87:68:7e:b1:63:3b:3a:27:
9e:1e:06:a1:a5:ad:17:71:3a:d0:72:cb:59:a8:1d:
6f:15:97:50:17:24:8c:03:89:9b:62:ac:a3:19:dd:
b4:22:ed:17:ad:b7:88:ba:05:9c:c0:95:df:2b:df:
4d:11:49:c0:f2:d9:c8:ad:45:70:03:4b:5a:6c:5c:
7c:49:18:e7:8b:04:20:ee:b5:54:75:ce:e2:fd:e0:
d9:7f:70:f0:53:00:6b:ba:25:f0:c3:5b:45:c8:fe:
26:02:9e:6a:7f:87:3a:89:86:13:27:27:78:37:24:
0e:67:8b:a4:14:7b:2b:73:d7:0b:3b:2f:93:a7:9b:
0f:9a:7e:d2:7a:9f:9d:ba:ed:f5:9e:43:48:4d:a3:
9e:49:89:a7:28:66:e2:66:75:a7:82:dd:d5:d1:a0:
ba:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:88:BC:57:87:B7:C1:53:AF:CF:EC:E4:D4:37:66:1D:E0:67:E2:C9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144972.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a912::/32
Signature Algorithm: sha256WithRSAEncryption
63:d1:63:c1:9f:93:55:32:af:64:7b:16:da:15:23:cd:68:1e:
3c:58:67:d1:f4:af:ec:fa:6c:68:28:fd:99:9c:a6:d0:f2:52:
62:a7:a2:f7:47:83:6d:d5:43:1a:8c:a8:18:fb:f4:45:99:f0:
f3:8a:e8:da:c4:d3:d2:15:61:c8:8b:e5:71:02:f9:7c:ba:8b:
6f:5c:1e:5a:5e:bc:84:f2:5a:7b:45:e8:d6:de:16:d8:22:1e:
9d:bd:bf:e1:31:6e:1b:73:2c:d2:b6:0c:86:13:5d:9c:31:75:
cb:34:16:f4:ff:97:cf:c6:a2:50:28:09:2b:5c:c8:83:93:56:
c7:22:63:45:a9:72:cb:dd:76:7d:73:57:45:70:61:5d:02:f6:
f6:2b:a5:97:af:63:ef:ab:3b:46:d0:1f:71:0b:28:63:d9:2c:
66:f8:44:cf:be:7a:04:85:86:ef:29:0b:ef:88:a9:d0:91:1a:
c1:f7:07:19:ad:8d:e3:21:2a:36:50:f0:c4:58:1c:d6:2e:30:
63:b9:87:47:89:55:d4:a8:c7:54:68:95:bc:8b:d1:9a:65:4a:
b8:e0:04:5e:7b:85:84:89:b4:a0:7b:28:5e:5d:8d:0d:4a:6d:
cf:a4:9c:ac:b8:9c:94:02:d4:87:23:17:74:b6:77:27:11:1f:
7c:b1:f6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:52 2026 by rpki-client