Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144977.roa
File: AS144977.roa (raw, json)
Hash identifier: iCGRC9KMdFq2D2uaPURzFk+k9umNlyLEGSuWG+vPXWY=
Subject key identifier: 82:7E:42:BA:C0:E1:11:83:CA:7F:F8:26:68:0C:FB:A8:97:63:D6:A6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 697A3ACB30147479B54E7993C257725562754FBB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144977.roa
Signing time: Fri 22 May 2026 06:05:44 +0000
ROA not before: Fri 22 May 2026 06:00:44 +0000
ROA not after: Fri 21 May 2027 06:05:44 +0000
asID: 144977
IP address blocks: 240a:a917::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:7a:3a:cb:30:14:74:79:b5:4e:79:93:c2:57:72:55:62:75:4f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:44 2026 GMT
Not After : May 21 06:05:44 2027 GMT
Subject: CN=827E42BAC0E11183CA7FF826680CFBA89763D6A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:52:f1:6a:cd:21:85:55:09:4d:d4:6e:34:c6:
95:35:3e:4d:f8:13:67:c5:09:c9:36:aa:58:94:59:
1d:d9:65:f3:19:53:33:b9:79:b3:cc:9f:85:88:89:
80:90:86:80:c5:ad:99:b6:d6:bd:06:83:9a:d4:03:
b3:70:94:08:d0:f5:ec:3e:ce:b8:0a:da:10:9d:a6:
da:b5:67:a9:3d:b2:65:3a:98:ad:2a:82:cd:78:4b:
35:d9:1a:67:8a:ab:52:4a:42:8c:f6:33:c0:c9:a8:
79:d2:80:66:ed:0f:69:6e:2b:ef:04:fe:11:81:ef:
e6:17:aa:38:ef:77:ff:5d:bb:c2:68:ed:8e:97:c1:
97:dd:3b:0c:0d:2a:6f:09:85:3b:45:0f:f4:03:39:
fb:f7:09:d6:28:51:6f:e5:5e:39:e4:5d:7c:1b:b5:
a4:79:08:ec:c2:c7:d0:a6:e3:ec:e6:e3:82:24:24:
dc:ef:f1:d3:71:85:78:76:cb:7c:c3:58:14:3f:c7:
a1:c4:d1:e1:f9:79:87:6f:a2:a0:5e:ff:a8:9a:4d:
fd:77:79:f3:d2:93:fb:b5:be:32:b7:f7:b2:09:32:
68:fb:48:ee:db:90:41:63:00:d5:48:4d:e0:4f:85:
12:32:70:5d:a6:f6:03:41:87:2c:90:4b:30:78:94:
d0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7E:42:BA:C0:E1:11:83:CA:7F:F8:26:68:0C:FB:A8:97:63:D6:A6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144977.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a917::/32
Signature Algorithm: sha256WithRSAEncryption
7f:52:47:e1:dd:0c:39:63:c2:ce:f8:76:d6:5e:c0:d6:ad:d6:
c9:cf:9b:56:5a:ac:2a:cd:db:fa:06:a2:e0:46:de:bc:30:53:
03:e0:57:37:5c:1c:fa:a0:6b:4e:5c:f8:56:b5:fb:82:44:72:
b1:bd:bc:e9:23:e5:ae:0f:d5:43:20:3e:93:f1:8d:ac:39:01:
59:83:63:d2:fb:42:93:8a:d9:df:c6:75:8e:90:41:f4:58:d4:
18:24:3b:cd:35:a6:7e:83:96:05:c9:ba:fb:61:59:db:0e:5a:
df:fe:11:b5:ad:6b:ea:df:5e:2a:9f:1b:58:f5:33:0f:4a:d5:
13:68:ac:f8:c1:6f:1c:55:d2:35:bc:46:5f:69:c3:89:67:50:
2c:fd:27:c4:dc:c4:91:5f:48:0d:9f:82:1d:23:3e:1c:0f:3c:
91:b7:ae:c6:a8:43:71:1b:fe:14:b5:ee:41:1d:da:ec:a9:46:
64:de:79:d0:06:b7:e4:b4:94:dd:e7:5c:e8:23:20:a8:85:00:
0b:ec:fa:f6:45:57:54:e9:8d:70:bc:bd:97:4c:3b:89:c6:3a:
ee:aa:da:47:ad:76:02:09:ac:81:dc:e6:df:26:35:03:ca:da:
1d:84:cc:73:dc:3e:69:06:56:1f:8e:1b:98:c1:75:dd:db:02:
7a:27:ad:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:41 2026 by rpki-client