Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144980.roa
File: AS144980.roa (raw, json)
Hash identifier: 8P3BvBPVkUnq5J8z1h1rvG3ctgCGGsUYCpMJ4Rs/Wis=
Subject key identifier: D4:09:9B:3E:E4:48:0D:23:8A:16:7A:28:3B:7A:65:0E:FA:91:BE:A2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5E539F6004E87F9A5ADD70D6EE513105106067E7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144980.roa
Signing time: Tue 26 May 2026 01:12:53 +0000
ROA not before: Tue 26 May 2026 01:07:53 +0000
ROA not after: Tue 25 May 2027 01:12:53 +0000
asID: 144980
IP address blocks: 240a:a91a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:53:9f:60:04:e8:7f:9a:5a:dd:70:d6:ee:51:31:05:10:60:67:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:07:53 2026 GMT
Not After : May 25 01:12:53 2027 GMT
Subject: CN=D4099B3EE4480D238A167A283B7A650EFA91BEA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:40:7f:bf:70:69:42:e3:8f:34:6f:df:cb:
db:c9:a5:55:94:a3:a9:c5:e4:ec:c7:86:d8:14:4b:
33:fa:ef:a0:7c:da:43:a1:8f:83:5b:d2:04:15:44:
65:00:0b:7a:93:cc:26:dc:56:e4:a8:83:1c:d3:3d:
4d:57:b1:5e:a0:5a:69:4a:80:f8:06:f0:cd:6f:a0:
b0:4f:8b:96:9b:b1:7b:fd:c2:7b:28:57:5b:63:ba:
d3:e0:16:90:f9:95:be:c9:0d:a7:9b:77:ad:ff:1b:
a3:2d:08:bd:92:2e:87:68:bf:15:2c:ef:73:d5:ec:
ae:bd:81:fc:98:6a:c7:8c:b5:1e:3b:20:24:8e:41:
9b:ff:a2:d8:bc:4e:35:c6:ca:fb:13:11:21:ce:05:
b6:f1:1d:99:cd:40:d8:3f:9b:52:a3:99:79:70:fc:
a6:73:c9:5e:ec:a7:d2:de:99:fc:b4:4d:c2:dd:e9:
96:8f:a5:48:58:08:24:10:50:5f:3d:c3:84:ab:39:
3c:5a:2c:1c:24:2c:21:1c:80:76:a0:9f:47:bd:b2:
94:17:84:60:2b:7a:56:b7:ff:98:bd:b5:5d:9c:ef:
f3:52:fe:1b:00:84:da:4f:9b:8d:6b:69:09:19:fc:
56:da:83:f1:51:d6:cc:2d:27:cc:60:61:7d:dd:bc:
41:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:09:9B:3E:E4:48:0D:23:8A:16:7A:28:3B:7A:65:0E:FA:91:BE:A2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144980.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a91a::/32
Signature Algorithm: sha256WithRSAEncryption
8d:48:31:04:e1:a3:b6:0d:68:90:1d:18:56:e5:68:ce:b3:aa:
81:76:91:36:86:eb:c1:d9:94:44:09:06:4f:3d:51:e9:d4:6f:
a6:90:0f:9c:7b:45:0c:0f:2a:21:56:3a:c1:6f:db:39:56:24:
36:4b:f8:03:67:86:2a:f1:a9:8d:cc:c3:cc:92:2f:0b:d4:a3:
d3:82:d0:66:a3:0b:34:69:ef:d1:57:a0:d4:99:33:84:4f:80:
1c:49:33:dd:b6:9c:8d:ee:b4:5c:ef:4f:b7:2a:b8:61:94:97:
5c:92:51:1e:ba:ab:20:da:e3:fb:43:7a:02:5d:c6:b0:8f:85:
87:25:a1:92:ca:35:83:f8:71:7c:b9:8b:7c:7b:12:eb:c7:ae:
6f:ee:5b:0b:79:de:d8:39:f6:5f:a1:77:e1:4a:bf:ff:c9:5d:
5b:9c:cb:24:6b:b1:53:e1:4f:3d:58:15:80:02:28:71:ad:1c:
f0:e7:b4:62:d2:85:a7:aa:ad:52:83:7e:8b:da:d2:63:d1:79:
c0:5c:8e:2f:52:a2:f7:88:82:0f:70:02:ab:32:f2:bc:3b:ca:
52:95:e5:a7:1a:5e:03:b2:6d:ec:60:e7:61:84:fb:b5:10:b6:
ad:58:4e:b7:62:a5:4d:91:ba:e2:7b:9f:42:b8:e5:85:e1:87:
7c:4e:62:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:16 2026 by rpki-client