Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144005.roa
File: AS144005.roa (raw, json)
Hash identifier: kaU2DtFkOekZsCGHCovH6KQ3fi1xC1XwXKAFtTC5zdE=
Subject key identifier: 8D:A7:3C:26:65:A4:19:68:5E:72:49:21:3E:EA:E6:EC:B9:CB:FE:E8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 466D57AC9F0DBF0F7622BECB8FC3A45CBBAA020E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144005.roa
Signing time: Mon 25 May 2026 01:38:26 +0000
ROA not before: Mon 25 May 2026 01:33:26 +0000
ROA not after: Mon 24 May 2027 01:38:26 +0000
asID: 144005
IP address blocks: 240a:a54b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:6d:57:ac:9f:0d:bf:0f:76:22:be:cb:8f:c3:a4:5c:bb:aa:02:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:26 2026 GMT
Not After : May 24 01:38:26 2027 GMT
Subject: CN=8DA73C2665A419685E7249213EEAE6ECB9CBFEE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a5:69:62:ea:87:5a:6e:52:b0:82:14:25:50:
7c:9a:44:ce:03:fa:60:f3:e7:d7:21:ab:12:23:0a:
a6:af:8e:77:55:a6:ab:fc:78:74:b5:b7:68:6a:74:
10:29:46:5f:51:e3:1d:56:56:cc:c6:e3:f9:9c:7c:
b5:6c:41:22:cb:60:43:b4:19:fb:c6:11:1a:1b:e9:
c7:2d:90:fa:0f:39:53:5c:4f:f5:aa:72:20:e8:82:
48:a2:c1:7f:33:80:67:f4:65:e2:6b:34:42:30:53:
b5:5a:92:8a:e3:58:de:6f:24:b5:0e:8c:65:fa:17:
74:cb:0b:eb:f6:2b:e5:f3:10:ac:e5:a7:1a:f1:0a:
c3:a4:d8:95:6e:7a:cf:32:4c:f1:60:d6:e6:e5:11:
08:e2:55:4a:83:87:23:57:ef:6b:7c:bd:4e:5b:77:
77:b6:c7:c7:d4:e6:33:af:6a:0a:e2:de:94:d3:fa:
dd:30:15:80:35:7a:f7:05:5f:99:36:92:fe:00:5d:
4b:1d:5b:0b:bb:95:36:9c:44:95:fe:2a:e7:1d:84:
b1:94:aa:93:55:4b:89:30:11:50:12:40:1a:aa:77:
9a:05:e0:ac:51:e7:b7:27:84:1f:85:5d:20:68:b7:
e4:13:ab:ca:a2:a1:bc:ec:2b:4c:67:8a:a4:ac:a7:
d0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A7:3C:26:65:A4:19:68:5E:72:49:21:3E:EA:E6:EC:B9:CB:FE:E8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144005.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a54b::/32
Signature Algorithm: sha256WithRSAEncryption
5b:e3:d4:ce:6e:7e:01:0b:f2:cf:a9:2f:96:bf:6a:19:3a:ec:
7a:d1:e3:47:19:c2:fa:bc:c2:f3:c1:45:04:90:39:12:81:35:
92:5b:41:24:f2:bc:51:f0:7e:24:80:9e:4d:a3:5f:31:80:34:
43:9a:56:70:09:37:72:77:d5:dd:c4:d9:f3:d1:ee:61:44:84:
ec:f5:42:c2:fe:12:32:c4:b8:05:3f:9c:2a:f1:6f:7e:76:6f:
83:c7:09:51:0a:5c:ff:39:02:f8:a3:6c:54:f6:97:c8:f6:cb:
0e:e3:39:ee:65:6a:70:30:6c:a7:ed:5c:73:37:f6:b6:8b:ea:
14:66:73:ae:70:fb:5f:29:23:0f:86:37:f6:d2:43:48:c4:60:
63:88:db:e3:eb:0b:8e:15:2e:a4:1e:40:bc:f0:5c:fc:6f:c5:
94:06:44:9e:f2:a4:0f:d2:87:b4:90:01:87:88:df:f7:77:3e:
fa:64:ae:10:9a:c4:02:59:58:05:e6:db:06:bf:c1:9c:c1:e9:
67:c1:cc:40:b0:32:d2:c2:0b:00:0d:e3:a8:e8:d5:05:b8:d5:
56:77:87:65:6a:df:b2:a0:c4:39:9c:08:7e:f8:eb:b1:d5:09:
8e:90:8c:f7:aa:a1:2d:1e:d8:37:3b:4e:78:88:9d:86:25:7c:
a1:c3:de:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:16 2026 by rpki-client