Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144008.roa
File: AS144008.roa (raw, json)
Hash identifier: CcvFcvBBNFap7yknDJQAX5YnKRrjSNYV1yEvKnOt/Nw=
Subject key identifier: 40:FE:36:B1:62:C2:F2:63:15:0D:2B:B1:33:E7:BA:E5:2E:88:45:98
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 20C8818D775D1F36C83B692A06113D1AEE81E08C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144008.roa
Signing time: Tue 26 May 2026 02:34:57 +0000
ROA not before: Tue 26 May 2026 02:29:57 +0000
ROA not after: Tue 25 May 2027 02:34:57 +0000
asID: 144008
IP address blocks: 240a:a54e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:c8:81:8d:77:5d:1f:36:c8:3b:69:2a:06:11:3d:1a:ee:81:e0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:57 2026 GMT
Not After : May 25 02:34:57 2027 GMT
Subject: CN=40FE36B162C2F263150D2BB133E7BAE52E884598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:e9:be:c7:c8:cd:9b:95:47:e8:04:11:e2:
4a:b0:2d:86:a7:be:89:f0:6f:c5:9b:b6:8f:f0:0c:
94:cd:af:f8:f9:8e:61:c5:ba:ad:6f:5a:b3:7c:62:
e5:85:40:73:12:ee:f6:9e:b8:32:b5:78:31:4a:ae:
e7:d5:0b:fb:98:12:5a:64:96:94:97:b8:ef:60:54:
ec:75:75:a1:df:9a:92:ed:e9:8f:2a:cd:b3:1f:e8:
81:38:3f:52:a1:c1:c2:35:9e:ba:23:15:21:be:b4:
66:86:74:3b:92:0e:29:6f:7e:7d:20:30:5d:0a:3f:
9f:c0:f2:dc:cb:24:f6:db:a7:0e:eb:ff:ed:e5:5e:
da:28:86:65:5a:e3:dc:62:a6:c9:cd:e5:72:74:27:
08:8b:ed:88:b2:1e:20:d5:ee:dd:2e:98:01:1a:ff:
cf:7d:35:80:f2:f7:d6:81:c9:33:ff:64:19:1d:4c:
f1:22:6d:59:db:e8:95:09:ed:45:9d:38:1d:33:b9:
88:76:16:62:64:85:9c:3c:d5:d0:13:36:ab:a8:17:
b9:02:bb:f7:7b:68:5c:8d:4a:cb:8b:74:ef:c6:45:
fe:56:38:5c:85:75:2b:a6:ff:d9:b5:6f:ea:73:ee:
35:b3:0d:19:0e:0a:ac:ae:5f:be:63:dc:be:6d:ad:
20:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FE:36:B1:62:C2:F2:63:15:0D:2B:B1:33:E7:BA:E5:2E:88:45:98
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144008.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a54e::/32
Signature Algorithm: sha256WithRSAEncryption
4e:9c:00:50:e6:96:b4:a5:58:60:cc:3d:49:ad:81:0f:a2:c1:
b3:62:5b:e1:81:8f:ce:a9:e0:7e:67:c8:b8:83:96:0a:8c:c1:
4a:bb:eb:c1:53:73:f6:da:d8:99:e0:75:6c:61:d6:76:bc:28:
ef:fe:ea:4d:5c:25:14:c1:0e:3b:2e:f1:ce:42:b8:1e:5c:5d:
ea:78:a5:63:d6:6f:59:a3:9f:bf:10:cd:63:84:04:93:83:a5:
57:aa:e3:e2:be:d9:6b:66:3b:7a:f9:05:27:00:8a:ee:a4:12:
2d:5d:77:41:51:59:54:70:79:81:68:95:05:01:f7:9b:97:9f:
41:bd:cb:92:a3:18:b1:39:fe:12:2c:67:96:0c:bd:b8:9a:d5:
5c:91:4f:0e:53:1b:18:8e:8d:e4:f8:03:48:3f:76:bf:f9:02:
89:5a:f1:8f:25:a0:4c:4f:cf:d1:c2:08:8c:a2:79:cf:84:a0:
d8:43:2a:05:db:53:71:74:97:d9:1b:7a:02:97:37:a1:db:92:
8b:55:c2:7a:22:4d:2f:39:fa:47:a7:2b:76:98:5a:89:f8:71:
e5:62:9b:13:7f:fd:dd:7f:08:5e:47:20:28:1f:79:ef:6c:76:
8f:c8:28:77:33:05:61:47:48:14:11:4e:e7:72:03:5a:1d:c3:
d5:79:9c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:11 2026 by rpki-client