Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144995.roa
File: AS144995.roa (raw, json)
Hash identifier: h/PyeGhxwywgqM8MLxRfXbJYz3dAp/OKSB5xHIPduD8=
Subject key identifier: 60:4C:D1:16:76:8E:7A:54:84:BB:00:B7:17:29:EB:EF:83:B1:0B:17
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 66CF9107821E7DAF34AF5EB30A9A657346314E9D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144995.roa
Signing time: Fri 22 May 2026 07:32:38 +0000
ROA not before: Fri 22 May 2026 07:27:38 +0000
ROA not after: Fri 21 May 2027 07:32:38 +0000
asID: 144995
IP address blocks: 240a:a929::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:cf:91:07:82:1e:7d:af:34:af:5e:b3:0a:9a:65:73:46:31:4e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:38 2026 GMT
Not After : May 21 07:32:38 2027 GMT
Subject: CN=604CD116768E7A5484BB00B71729EBEF83B10B17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6d:2a:99:b5:6c:d6:d1:4f:80:d5:58:07:a3:
07:29:ae:f5:b7:a2:64:48:43:d9:ac:e9:8f:31:1d:
97:44:09:7c:29:62:bf:5e:be:de:65:79:92:01:16:
13:c2:35:de:82:fa:fe:af:fc:b7:ad:1a:89:f9:1a:
d7:b6:51:a7:6b:0b:5f:8a:92:63:18:df:79:f9:df:
50:96:01:04:be:14:2a:c1:cc:0f:46:eb:a5:d9:b0:
6e:0c:a6:ad:1d:57:7e:10:51:2c:03:3a:f7:bb:e8:
5f:50:6a:4f:91:bf:8e:99:8d:af:21:43:44:42:74:
ff:08:68:87:1d:2c:3e:cc:0a:1f:c4:9b:28:9d:68:
51:6b:59:0a:f0:6e:25:26:c3:0c:67:e0:f1:3f:d3:
65:38:53:ed:e3:9b:43:18:7d:06:0c:4d:e1:e7:1b:
67:68:ec:e1:2c:0a:d2:36:fe:f4:90:ca:55:39:42:
d1:da:b1:15:a7:6a:fd:11:58:32:1b:42:e2:08:16:
42:3d:0f:6f:47:31:84:1e:9f:e9:a3:d9:b8:4f:51:
11:f9:27:4e:ee:2b:77:e5:19:3c:62:c4:b7:70:a6:
33:1a:5c:8e:76:10:b0:0e:7f:83:16:27:92:0e:ea:
8d:8e:f2:15:75:d8:a5:2a:94:ad:7c:63:bc:0b:46:
ce:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4C:D1:16:76:8E:7A:54:84:BB:00:B7:17:29:EB:EF:83:B1:0B:17
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a929::/32
Signature Algorithm: sha256WithRSAEncryption
8f:77:49:d0:88:af:5f:8a:6b:43:7f:d7:99:44:cc:71:c3:0a:
bd:e5:63:76:ab:9c:04:e3:a8:c6:d3:cf:08:d7:0f:20:29:38:
91:3b:1d:1c:54:29:62:11:43:c7:0e:e2:d3:36:1b:4f:2a:b7:
29:e8:bb:3b:e6:06:e1:05:6d:07:77:7a:90:b2:4f:b7:6b:80:
91:62:f8:2f:44:93:99:f4:1e:b9:85:e6:ab:93:8b:fe:67:4f:
bb:23:68:e7:7b:3e:59:1b:87:f3:2d:eb:7a:d0:f7:2f:c9:78:
39:02:ca:a8:69:e0:2b:7e:2c:7f:10:f4:b7:e5:84:db:75:40:
2f:5e:dc:e7:54:45:0c:0a:ee:5d:64:c3:8e:af:05:27:83:b9:
ea:c6:09:c1:d5:2d:36:07:af:b2:2b:e3:14:27:10:2e:97:12:
66:0f:e5:9a:0a:45:a2:7b:cd:41:b0:5e:3e:90:bd:0d:c8:e9:
16:96:b4:e8:30:ab:57:7f:61:93:b2:b1:d6:28:8f:74:7d:87:
c1:8e:a4:f8:d9:10:2f:7f:29:18:f1:93:e8:a0:bd:5c:1c:6c:
d4:67:2a:73:85:2e:a2:68:d0:2a:9e:1e:f6:34:c0:48:e0:6d:
f7:c2:56:42:a7:75:a9:bd:4f:3c:93:45:cf:db:e3:38:88:a3:
15:73:33:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:01 2026 by rpki-client