Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144973.roa
File: AS144973.roa (raw, json)
Hash identifier: JP0HeBLX3MuJGlZFF2KaD46fU+wUW6nz6WaFtbvlsqc=
Subject key identifier: 5B:7F:70:92:7B:CA:57:48:C0:A9:E9:CA:7E:37:79:6B:8A:ED:1C:86
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4B4160A196CA00B5C5A577946E8AA4D695DDC43A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144973.roa
Signing time: Fri 22 May 2026 04:26:52 +0000
ROA not before: Fri 22 May 2026 04:21:52 +0000
ROA not after: Fri 21 May 2027 04:26:52 +0000
asID: 144973
IP address blocks: 240a:a913::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:41:60:a1:96:ca:00:b5:c5:a5:77:94:6e:8a:a4:d6:95:dd:c4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:52 2026 GMT
Not After : May 21 04:26:52 2027 GMT
Subject: CN=5B7F70927BCA5748C0A9E9CA7E37796B8AED1C86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:b4:4d:cf:cd:51:85:ae:ca:d2:f6:60:2d:
5a:c9:1a:e5:92:23:cf:b7:3b:f8:a6:a9:a6:30:40:
41:5d:22:51:21:75:0b:a1:f5:36:57:37:3f:05:ce:
1b:6c:27:6d:f7:e0:be:9f:40:4c:e9:c8:6b:13:00:
e2:ec:fe:c3:35:d9:66:ed:13:a6:a6:b8:9f:0d:d4:
8c:20:9f:31:62:81:88:fe:ce:e0:21:79:f1:2d:54:
99:77:e9:bc:35:d5:41:68:f8:57:bd:b1:7c:88:f5:
bc:8a:19:5e:0b:ae:84:b3:22:a1:0d:48:39:7c:83:
64:4d:a3:a1:b7:5b:d3:6c:53:00:0f:35:f7:83:5c:
e4:ed:53:38:ef:a0:f1:0a:d1:6b:ec:9e:54:32:38:
d4:0c:c3:bb:09:37:4a:05:6d:8f:b4:b5:d7:67:aa:
de:b3:fc:49:ba:b6:1f:46:10:5e:41:32:99:09:31:
49:e7:7a:a9:d5:db:31:7d:c7:94:d6:22:bb:59:bb:
3c:f9:6b:c3:9c:15:4a:70:e4:49:55:96:76:8a:1f:
f1:0f:1b:56:38:a1:f5:e1:70:e5:b0:0a:bf:84:83:
33:b4:d5:da:bb:51:22:3e:9e:76:bb:6b:16:a8:db:
f8:1e:72:88:9d:f3:66:18:00:3c:06:0d:4d:1c:76:
c0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7F:70:92:7B:CA:57:48:C0:A9:E9:CA:7E:37:79:6B:8A:ED:1C:86
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144973.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a913::/32
Signature Algorithm: sha256WithRSAEncryption
06:39:5e:84:a6:98:4e:2e:73:f9:dd:69:cf:69:68:45:26:fc:
d1:2d:a3:83:e0:d4:d2:ad:d8:92:a0:11:3b:e7:02:ee:b6:f1:
cf:0a:37:b2:88:23:02:c8:78:7b:a8:62:66:e0:27:76:82:42:
3d:00:2c:c9:46:73:49:f2:ab:f8:e1:b1:bb:db:fd:ee:e4:c2:
0f:b8:7d:0d:e0:17:93:40:c8:da:af:b0:69:a4:c9:7c:e0:24:
e6:aa:94:f3:7d:f1:ef:39:1d:8f:9b:22:e0:2e:f5:54:96:38:
a9:7d:a4:49:8c:ef:5f:40:ab:5c:4b:d0:ac:b9:69:1a:89:98:
68:40:c3:a2:78:e0:47:04:63:cb:35:39:08:7a:71:a9:ce:2d:
4c:a5:16:d7:a4:32:e5:5a:ce:a2:33:ab:12:8a:84:a1:1c:83:
de:a5:27:c7:c9:86:c0:e3:9f:f8:ac:04:20:d8:59:e3:a8:4c:
bd:32:fa:ab:3d:58:64:f8:a9:26:17:23:cb:aa:a9:f0:9b:bc:
6e:6e:9e:c9:59:59:77:09:62:19:0d:5d:fb:a8:b4:60:8d:d9:
bf:bc:f5:ae:bc:b9:64:91:c0:01:3e:28:97:c2:57:06:ba:67:
4f:a4:d4:c3:38:d6:e0:20:4e:cb:31:47:6c:70:58:c5:67:82:
c8:07:d7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:54 2026 by rpki-client