Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144010.roa
File: AS144010.roa (raw, json)
Hash identifier: Xvi/WuIa6JDDhVlx+zy0PLW3496ix4ve6ZToYOif4Ro=
Subject key identifier: 9A:C8:BD:3B:98:87:BA:C7:23:F0:E4:60:36:40:23:99:3B:DE:F3:BD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 215D53890B4BC25CC47295177A7E35D0F6C1A210
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144010.roa
Signing time: Mon 25 May 2026 01:20:22 +0000
ROA not before: Mon 25 May 2026 01:15:22 +0000
ROA not after: Mon 24 May 2027 01:20:22 +0000
asID: 144010
IP address blocks: 240a:a550::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:5d:53:89:0b:4b:c2:5c:c4:72:95:17:7a:7e:35:d0:f6:c1:a2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:22 2026 GMT
Not After : May 24 01:20:22 2027 GMT
Subject: CN=9AC8BD3B9887BAC723F0E460364023993BDEF3BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:20:5a:3c:49:c2:c3:c6:11:b7:cb:b9:0d:b8:
26:15:e8:fa:fb:f5:0d:2f:df:70:28:10:80:74:13:
98:20:55:d8:66:4a:16:1e:53:d8:a6:2c:4e:2b:59:
5c:7b:49:35:7a:8e:65:bb:4f:39:0e:5d:4b:fa:33:
a2:a0:73:68:90:1f:0a:93:25:41:45:12:5c:7a:90:
7c:c5:f8:c5:15:d9:67:58:5c:b4:38:1d:6f:2e:61:
35:cc:5b:d0:3f:40:d0:94:26:31:90:24:88:46:87:
83:4d:19:cf:f7:d8:38:54:12:a1:35:33:b5:a9:ad:
8c:59:dd:7c:dd:f9:1b:ae:98:e5:4d:8b:b6:fc:6b:
5f:9e:db:9e:09:6d:7f:ea:fb:3d:bc:c8:c3:1e:69:
28:f2:9b:38:a4:fd:e6:de:ca:3d:07:9b:eb:90:ca:
11:b2:1c:ad:2b:96:3e:5f:1d:07:5b:dc:49:0d:34:
72:b4:57:20:d7:9a:e9:d0:90:45:30:55:bb:08:63:
04:f7:8d:82:3e:68:48:d5:cf:d0:e1:a9:5c:8c:c2:
a2:08:fd:8b:1a:04:f8:d3:bd:91:f4:9d:7d:1f:55:
ec:3a:bb:42:4b:87:08:ff:8c:49:af:a5:54:0c:a2:
2f:98:97:0f:06:d3:58:eb:81:45:41:98:9d:9d:a3:
cb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C8:BD:3B:98:87:BA:C7:23:F0:E4:60:36:40:23:99:3B:DE:F3:BD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144010.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a550::/32
Signature Algorithm: sha256WithRSAEncryption
32:a6:cb:03:34:6d:5a:d4:e2:af:ed:df:6b:43:6b:99:55:40:
23:c4:b9:b8:a3:0e:15:3a:fc:43:6b:5c:1f:a1:8c:12:ce:f7:
59:f9:53:96:4b:ed:fd:eb:d0:98:d3:73:83:50:c4:aa:fb:4a:
b2:51:1a:1d:d1:80:d4:14:05:a1:c9:af:ef:14:1b:fb:00:2a:
30:9c:06:6d:c0:f7:d0:5f:64:43:4c:e1:26:74:f6:3f:a2:99:
f7:11:03:fb:cc:61:b6:ad:0b:66:1e:7c:b6:6e:92:bc:d3:f3:
5b:5f:7a:10:fa:c5:32:6e:11:02:da:2e:ae:c8:e8:09:8d:fa:
5f:2c:7e:20:6a:47:b5:bf:22:7e:03:69:a4:46:68:60:cb:e3:
64:27:3a:76:66:ba:b0:80:6b:6e:9e:9d:72:13:1f:21:70:c8:
84:bf:16:93:b0:60:44:91:35:68:39:2f:a8:8d:15:50:2a:91:
e5:a5:8e:c6:46:bb:d0:62:4f:a3:22:3d:ad:e4:79:87:20:fc:
76:16:f0:bf:c9:ec:d8:40:b4:26:e3:6c:d8:d5:34:3c:47:95:
9f:0b:98:36:6e:88:9a:ce:66:2e:66:1d:c0:9d:22:dd:9b:37:
95:91:15:13:af:62:26:62:4b:32:58:09:db:2a:01:b9:fe:bb:
9c:e1:b5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:58 2026 by rpki-client