Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144991.roa
File: AS144991.roa (raw, json)
Hash identifier: j/T7u5mcZCYWYLQA5QBhA7/IrJ8QeiLDmiNH6x62XeI=
Subject key identifier: 66:D2:FC:FC:28:6D:D1:B9:9A:29:3C:AE:FE:01:18:D6:F3:D0:70:68
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2F712C9BF20345A882C810387EA6DFA162BFC3F4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144991.roa
Signing time: Fri 22 May 2026 06:27:47 +0000
ROA not before: Fri 22 May 2026 06:22:47 +0000
ROA not after: Fri 21 May 2027 06:27:47 +0000
asID: 144991
IP address blocks: 240a:a925::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:71:2c:9b:f2:03:45:a8:82:c8:10:38:7e:a6:df:a1:62:bf:c3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:47 2026 GMT
Not After : May 21 06:27:47 2027 GMT
Subject: CN=66D2FCFC286DD1B99A293CAEFE0118D6F3D07068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:59:9f:6b:07:d1:37:33:b7:8b:2f:f1:19:27:
55:42:83:b8:3f:87:65:2d:a1:ae:7e:28:7c:4a:1c:
ba:5a:b6:c3:aa:fa:af:bb:c9:f5:46:02:c0:9b:9a:
25:0c:13:93:79:4a:ef:46:81:5c:0c:21:6e:7f:20:
c0:bd:96:ad:a5:13:a4:f7:98:e7:4b:8a:90:63:1d:
ed:6f:6b:69:78:16:4f:84:94:da:17:8a:a0:43:27:
dd:5d:8a:2b:fb:42:7c:70:9e:4f:d6:a8:b6:94:63:
c8:43:e8:b0:9f:34:4c:6b:c1:d1:ff:02:49:92:cf:
6e:c9:0f:e9:a9:c0:89:f0:c6:93:4f:7b:49:56:1b:
c2:aa:a6:b6:c5:bb:e4:e1:e2:c1:04:2b:3f:cf:9a:
a6:a5:67:df:bb:5b:48:83:2e:07:f7:5a:7a:57:18:
13:45:1d:de:b3:de:b2:90:d0:e7:38:b5:80:17:f2:
b4:9d:57:1f:3c:e7:02:75:98:70:f9:6f:a9:51:89:
28:ee:29:50:c2:6f:60:3e:03:c3:53:72:3a:82:d7:
a2:ee:a5:05:d9:3e:6e:c9:7a:79:72:06:1a:0a:73:
37:47:dd:d4:8c:16:f0:7e:45:3d:3b:23:ea:e5:93:
64:d6:fd:a3:5c:e7:6f:59:08:81:42:7e:fc:f1:2e:
a8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D2:FC:FC:28:6D:D1:B9:9A:29:3C:AE:FE:01:18:D6:F3:D0:70:68
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144991.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a925::/32
Signature Algorithm: sha256WithRSAEncryption
24:5e:e3:7b:0d:f2:69:b5:c3:81:79:3b:27:0a:ff:84:71:52:
32:a3:98:7e:7b:08:7f:5c:be:9c:d3:b4:08:59:47:3a:7f:56:
2b:e7:41:f8:da:f7:59:29:64:c2:ad:ad:8b:7f:08:fb:a5:60:
4d:22:1f:c5:13:9a:32:0b:af:96:1f:be:8e:ed:18:f5:cc:de:
cf:c1:af:40:7f:04:67:08:02:69:cb:b3:de:20:2f:3c:93:91:
07:d6:03:b2:68:a0:2e:06:9e:67:f0:a0:3f:f4:d1:56:34:9d:
83:c5:ab:73:2d:74:6c:59:17:b2:ea:64:f3:c0:c4:b1:95:53:
8c:65:29:14:8a:94:5b:19:56:93:1d:c7:5f:4e:42:98:5c:a0:
c0:18:4e:13:31:8c:14:90:c9:6f:93:8e:6a:8d:c4:66:06:8e:
d8:4f:cd:3b:6c:93:f6:ef:a5:84:6b:cd:8b:8a:a1:80:b7:29:
5b:81:0b:35:00:46:e1:c6:d0:32:e6:87:0f:8b:a5:05:1e:02:
47:3f:0c:aa:7e:58:0b:71:02:f1:0f:96:30:a7:23:3e:3e:74:
49:6f:04:e2:1f:39:fc:ec:db:26:4c:81:e7:9c:37:38:fb:1b:
76:14:4f:0d:a8:63:e2:f7:57:7a:e9:d5:4b:40:9c:cd:68:ce:
f9:fe:51:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:40 2026 by rpki-client