Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144014.roa
File: AS144014.roa (raw, json)
Hash identifier: uYxHjka2n/s+YMbC9akXyEaRIpc9C431QXfv7jfW7vo=
Subject key identifier: A3:2A:F0:6A:24:1C:6A:C3:64:A6:5E:35:E0:53:6C:51:C3:6D:52:7D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1BEFA7334D038EBF3F1725018C43C0D5D4CCF54F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144014.roa
Signing time: Fri 22 May 2026 06:05:16 +0000
ROA not before: Fri 22 May 2026 06:00:16 +0000
ROA not after: Fri 21 May 2027 06:05:16 +0000
asID: 144014
IP address blocks: 240a:a554::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:ef:a7:33:4d:03:8e:bf:3f:17:25:01:8c:43:c0:d5:d4:cc:f5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:16 2026 GMT
Not After : May 21 06:05:16 2027 GMT
Subject: CN=A32AF06A241C6AC364A65E35E0536C51C36D527D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:6b:8d:0a:17:e2:4d:90:82:23:9f:1c:ed:
00:6e:9a:94:cf:1b:6c:22:d6:e5:8a:82:8e:4d:19:
e8:39:a5:1c:69:84:26:6a:e5:7c:c0:90:94:a7:3c:
92:02:90:59:42:5c:33:d4:81:30:26:b0:e6:ee:8c:
d4:b5:7a:b2:73:be:24:64:8e:3a:37:86:25:38:49:
ca:3b:bf:39:6f:9d:d9:c2:f0:4c:02:3a:5c:9b:0d:
51:6c:23:f8:8d:9b:dc:1f:3d:51:db:61:90:19:87:
29:af:5d:1f:10:70:b2:0c:35:64:e5:6e:c3:b6:a2:
04:47:2f:4b:79:c8:21:f0:74:95:1e:6f:6a:17:4a:
ee:fd:d7:c7:33:97:cd:5e:7d:62:68:ca:49:0b:50:
29:9e:8a:dd:e3:72:0b:31:eb:4e:6e:48:b5:e2:cb:
25:23:a9:dd:b2:f2:65:e6:a4:69:f5:6d:ac:8b:7c:
2e:51:41:b1:55:25:43:9e:b2:26:f9:fd:67:e8:39:
9f:67:48:30:83:8d:42:33:b5:df:14:7c:83:39:89:
55:10:72:ca:e1:3c:b4:f8:8e:45:12:da:90:1c:b8:
ec:7c:70:f2:36:3e:0a:bd:ae:51:2b:d7:81:d0:aa:
f8:cc:41:89:9c:81:20:fd:c0:52:0d:b9:94:37:28:
00:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2A:F0:6A:24:1C:6A:C3:64:A6:5E:35:E0:53:6C:51:C3:6D:52:7D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144014.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a554::/32
Signature Algorithm: sha256WithRSAEncryption
4c:0e:02:78:4e:5c:d5:d1:5f:5c:91:43:2b:4a:7f:bc:87:3b:
1b:b3:f2:4f:15:3d:1d:e5:e4:d1:e7:6f:2b:ed:b6:40:13:ff:
d3:b9:14:41:73:58:db:a3:60:b6:9d:e4:83:e6:da:3f:a3:03:
03:8e:7d:6b:62:ad:a1:25:8b:61:e8:d5:ec:d3:13:63:55:40:
cf:2d:57:05:1c:ba:82:a7:1c:4a:27:f2:3a:f2:aa:87:3e:a5:
e9:e4:58:0e:19:de:bc:d6:c0:a1:4a:07:bd:5c:d3:f1:80:9f:
3e:06:2b:5f:59:8d:45:da:96:0e:c8:40:5d:7a:63:81:70:9c:
97:77:88:2a:5e:82:84:ae:87:e4:f7:9d:b7:f8:e7:5c:4b:2e:
1d:9d:42:1f:d0:c0:c4:fa:35:87:55:28:b1:03:25:06:20:a5:
4d:e3:3f:56:39:71:a6:cb:0e:1a:15:9a:b0:38:db:1e:12:69:
b7:17:26:87:c7:aa:ce:a7:c2:14:00:d8:9d:70:b0:f6:87:1e:
e3:56:11:c0:6d:46:da:73:e4:3d:9a:48:e6:ee:a9:85:0b:67:
ca:14:a3:49:99:f4:0c:52:15:d9:14:bf:9a:46:ed:f7:47:a3:
b8:49:1f:88:5e:16:a1:bf:64:64:cf:13:34:98:64:1b:f6:45:
d5:51:9d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:51 2026 by rpki-client