Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144013.roa
File: AS144013.roa (raw, json)
Hash identifier: uE56sdt65nx6F7fDmuk3OhwTVjaMi254n4OQkuKTN2A=
Subject key identifier: 70:D5:CE:EF:B8:8C:C7:E2:4C:7F:E3:32:AF:79:78:A1:B3:3F:5C:9B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7ED92F64F8D53E03DE04DA379AAA8E9DB4B6B6A2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144013.roa
Signing time: Fri 22 May 2026 06:28:07 +0000
ROA not before: Fri 22 May 2026 06:23:07 +0000
ROA not after: Fri 21 May 2027 06:28:07 +0000
asID: 144013
IP address blocks: 240a:a553::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:d9:2f:64:f8:d5:3e:03:de:04:da:37:9a:aa:8e:9d:b4:b6:b6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:23:07 2026 GMT
Not After : May 21 06:28:07 2027 GMT
Subject: CN=70D5CEEFB88CC7E24C7FE332AF7978A1B33F5C9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c2:1c:0e:a4:0e:c3:bb:86:3b:d8:e0:3c:78:
f0:f9:ea:db:8b:ca:53:b6:79:f2:97:8a:4c:d4:a5:
dd:6e:c5:fa:de:24:62:d4:a5:c4:31:28:1b:a9:ed:
05:6e:63:8d:50:6b:55:62:5f:2f:02:cf:7f:6d:63:
13:39:8a:c0:4c:75:78:39:bb:fe:39:69:48:9b:ed:
5a:48:64:45:aa:2f:9b:b4:e9:12:28:59:c1:04:94:
4c:6c:c3:cc:00:f9:5b:1c:c1:a7:6e:8a:a4:67:fd:
da:39:2f:45:ac:e8:0d:fc:1d:ab:28:89:c1:e2:7b:
07:0e:d6:50:bd:5e:5d:21:71:c4:7f:e3:cb:13:51:
af:fa:0d:ea:66:02:d5:cf:5d:bb:e1:85:1c:97:e5:
7c:7e:fc:1a:02:32:b5:e6:a9:21:ff:70:c2:49:0b:
66:cc:a3:f4:dd:f8:42:2b:62:28:19:1b:8e:15:5d:
ae:7f:ca:0e:bc:3c:28:56:f9:5a:3d:59:53:11:32:
18:2d:71:0a:97:56:4a:fc:30:3a:2c:0b:03:77:9c:
15:7c:c3:18:46:de:f1:a4:46:26:7b:40:82:77:af:
ea:e7:38:4c:e3:8c:c1:3f:f9:56:ad:4d:07:11:e5:
73:12:2c:22:33:a8:95:17:86:9e:c9:a5:7d:78:7c:
84:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D5:CE:EF:B8:8C:C7:E2:4C:7F:E3:32:AF:79:78:A1:B3:3F:5C:9B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144013.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a553::/32
Signature Algorithm: sha256WithRSAEncryption
5d:bd:56:1b:89:e3:48:50:fe:cf:b3:d7:65:79:94:2d:a7:99:
ec:37:41:dc:14:50:d3:d9:55:4d:d4:db:0d:e8:cb:db:cb:2c:
d4:ba:6a:bb:ed:b5:ce:8a:b7:41:94:c2:0c:b8:b4:c0:d4:0e:
56:dd:e3:05:aa:47:31:17:1c:77:14:74:f0:d3:f9:58:d5:be:
75:4f:2d:a4:56:6c:50:09:4e:fd:bc:1c:f7:a6:73:3b:b8:cb:
7f:e3:8b:b8:82:2f:52:37:5a:18:7a:6c:c8:8a:46:13:3c:3b:
86:d0:a5:02:7b:7a:a1:db:0c:96:18:00:af:11:6b:b6:f4:eb:
0b:61:d8:85:bf:81:45:35:8a:02:4a:a4:20:71:be:35:29:79:
64:8b:30:e2:83:1e:a5:bf:2d:00:29:24:90:65:bc:c9:77:77:
fa:f0:28:45:34:ec:9a:b5:68:eb:01:19:0f:d7:61:d0:26:2d:
57:2d:49:6d:79:d1:46:d1:e7:ae:27:6c:29:11:2e:e2:0c:8c:
73:c7:5c:c5:55:20:4e:ea:f6:54:b3:86:fb:3b:18:49:a8:78:
fa:32:a4:ec:3c:0d:c7:40:cb:a1:25:64:cf:b2:1e:93:f2:4a:
44:96:41:1e:c3:c6:79:2b:ab:28:0e:51:e8:03:04:2f:2f:75:
ed:7c:a3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:53 2026 by rpki-client