Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144974.roa
File: AS144974.roa (raw, json)
Hash identifier: 06JPIZTaKVk9P0Y3RsXmXdVV9WvjK/yYmzQ/NZ3I+WM=
Subject key identifier: 16:E8:18:9C:E9:01:E6:23:7E:C3:D0:6A:04:6D:84:8A:73:DB:60:92
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 107B4F10C83E59C5CEDEA20D6FBA7E99E3C470CC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144974.roa
Signing time: Mon 25 May 2026 01:51:20 +0000
ROA not before: Mon 25 May 2026 01:46:20 +0000
ROA not after: Mon 24 May 2027 01:51:20 +0000
asID: 144974
IP address blocks: 240a:a914::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:7b:4f:10:c8:3e:59:c5:ce:de:a2:0d:6f:ba:7e:99:e3:c4:70:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:20 2026 GMT
Not After : May 24 01:51:20 2027 GMT
Subject: CN=16E8189CE901E6237EC3D06A046D848A73DB6092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:33:ce:4a:3e:65:4a:71:b9:7e:c4:f8:4a:
92:5e:62:5f:bf:7d:ff:a8:16:14:1a:4b:6f:4b:60:
1e:b1:54:a7:eb:80:c3:82:ac:0c:b3:30:15:84:7d:
84:50:bc:ef:63:c8:58:ab:ba:03:d7:d5:f8:95:7c:
cc:a4:af:d5:76:9f:d1:fe:b7:86:78:82:dd:24:e9:
75:d8:c8:5e:15:13:f0:41:5d:b9:18:52:48:53:4c:
f7:16:24:c2:45:44:a5:dc:dd:01:9a:85:66:8e:b4:
82:70:a4:18:9c:94:e6:96:6a:c5:02:02:f2:32:7d:
4f:f8:d8:cb:e9:2e:d6:c2:26:4e:25:13:9b:66:58:
fc:95:79:c4:d1:0d:95:43:17:cd:50:54:f1:a9:66:
57:fd:5c:f3:2c:a1:b4:2a:00:da:d6:e1:08:fd:a7:
f6:50:b4:05:20:6a:56:cb:89:29:dd:5c:1e:3b:7a:
6c:b0:81:c5:7f:d0:c6:2a:d3:76:db:8d:e5:4c:4a:
4b:2c:ca:76:a2:7e:8c:0d:16:30:56:22:76:71:49:
c4:9c:f2:cf:ae:29:af:7a:84:15:8a:e4:65:4c:fa:
03:f9:0f:f9:e1:5f:b3:fd:ec:9e:25:fc:2f:43:a1:
98:b2:65:3e:37:fd:ff:60:32:21:00:6f:19:cf:e2:
a1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E8:18:9C:E9:01:E6:23:7E:C3:D0:6A:04:6D:84:8A:73:DB:60:92
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144974.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a914::/32
Signature Algorithm: sha256WithRSAEncryption
0a:fe:c2:cd:09:f9:91:07:ef:d4:ca:43:49:3f:85:c4:1b:3d:
17:44:f3:08:07:70:47:89:03:d1:f1:87:f6:72:74:f7:86:de:
e6:10:d5:75:9f:df:f9:3f:f8:34:be:86:38:e4:6d:15:7a:4d:
8f:d2:6e:03:9e:e1:66:12:28:77:46:82:c0:27:6a:8d:72:82:
92:ed:20:47:ae:3d:97:ee:04:68:67:37:d9:c2:c1:e6:3d:78:
e9:8b:48:ed:2f:03:72:42:01:8d:ad:60:15:64:d1:c8:b9:0a:
a3:c1:0f:b5:b8:5d:cf:6e:db:bf:8a:9d:39:1e:fe:6b:ff:1f:
a8:8c:54:1f:34:7e:4a:50:78:e3:1f:cc:a5:89:16:fc:80:c2:
9e:1a:90:e7:da:95:d0:63:8b:31:98:83:32:fd:f8:9a:32:bc:
2e:b1:bc:69:02:f5:70:c4:4a:35:de:8e:fa:c2:62:22:69:1b:
2f:f7:22:45:40:43:59:7e:09:0f:1c:63:73:42:a9:2e:0e:ca:
52:17:a8:1f:96:74:9c:2b:7f:89:43:17:b1:89:2b:f2:97:ae:
bd:98:78:9a:eb:b3:4f:fb:e6:2a:86:65:c7:a6:be:6b:2f:4e:
11:93:94:d1:80:fb:08:e3:47:56:84:93:59:9c:be:24:20:82:
1f:44:42:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:42 2026 by rpki-client