Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144022.roa
File: AS144022.roa (raw, json)
Hash identifier: dRnKSz+6dupyIju0uDxqpQ4FN/sTiclIhJSOXIQ3HLM=
Subject key identifier: 15:39:9A:06:EB:3C:17:0F:14:EC:D5:8F:2F:0D:4E:B7:14:9A:12:CB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 333614348AE716200BE2D4A9AD03C7D8233CAF60
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144022.roa
Signing time: Fri 22 May 2026 07:32:06 +0000
ROA not before: Fri 22 May 2026 07:27:06 +0000
ROA not after: Fri 21 May 2027 07:32:06 +0000
asID: 144022
IP address blocks: 240a:a55c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:36:14:34:8a:e7:16:20:0b:e2:d4:a9:ad:03:c7:d8:23:3c:af:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:06 2026 GMT
Not After : May 21 07:32:06 2027 GMT
Subject: CN=15399A06EB3C170F14ECD58F2F0D4EB7149A12CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:05:27:a2:90:16:b9:ad:de:cd:28:1a:93:8e:
c7:fe:ad:7a:9e:c1:31:ed:3e:7b:1a:f1:c8:ce:95:
8d:c4:94:25:72:20:bf:d1:d1:ce:12:85:c1:61:15:
21:87:13:17:d2:70:fe:2a:17:22:92:ea:cf:f4:67:
82:ae:d9:5a:67:b4:92:57:cf:e9:05:87:17:39:62:
3f:48:c7:3b:6d:c5:2a:3b:13:d6:78:aa:e6:04:9b:
fd:ef:16:1b:ad:07:bf:ed:cb:40:35:8a:1d:8f:2f:
30:4d:31:08:88:11:f2:87:08:3c:f3:02:5a:06:e6:
03:57:c3:fc:8b:2f:5b:9a:94:03:c4:f9:f8:72:bb:
ef:da:ba:1c:64:62:fc:87:a5:20:77:fd:95:36:5c:
e2:29:30:c5:fe:8d:24:35:f3:62:ce:47:0c:09:89:
92:81:32:05:6e:04:8f:73:f1:e0:09:be:50:e6:3c:
98:10:a6:98:fa:5b:a0:cb:f1:06:ef:01:f2:b6:0b:
31:68:7b:ed:52:24:f9:eb:db:9b:6a:3f:f2:9b:22:
ea:88:ee:84:2c:92:06:57:67:13:15:8e:34:5b:4c:
b4:39:04:a5:44:fe:83:de:66:53:fb:64:0a:0e:9f:
e7:4c:ab:db:58:b7:f5:b0:e6:c2:41:3c:e8:14:48:
87:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:39:9A:06:EB:3C:17:0F:14:EC:D5:8F:2F:0D:4E:B7:14:9A:12:CB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144022.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a55c::/32
Signature Algorithm: sha256WithRSAEncryption
95:22:2f:54:8d:82:f3:57:9c:39:f9:10:70:15:77:a0:df:0c:
87:e7:b4:3c:d3:25:09:d8:4a:02:87:27:fa:ac:c6:3c:d4:84:
3c:dc:76:a0:4f:ce:58:0a:0b:42:05:20:7f:4e:ff:49:21:ad:
dc:32:cf:3e:6c:0f:48:59:98:63:0c:d3:d3:06:a5:36:c8:d4:
49:9f:71:5a:d7:13:5a:3f:d8:1c:1f:3d:b3:6a:06:c4:17:f2:
62:cf:95:68:57:52:0f:9c:cc:83:21:2c:86:33:36:9e:8f:62:
a3:d2:4d:1a:8f:e6:ee:47:19:4e:e5:16:1c:54:9f:c4:c4:ab:
0f:97:86:b6:bd:58:a3:b7:ca:22:d5:b3:37:1f:e1:ff:a8:07:
79:d7:77:14:31:4b:3f:11:d5:b9:b3:a3:c1:f6:5c:25:03:a4:
c1:94:20:98:a5:74:5c:88:76:a7:2a:08:39:8b:d4:f8:e8:be:
8c:ba:49:46:7d:be:21:71:28:6d:22:b0:df:f8:ad:a7:80:3c:
94:20:98:31:0c:16:97:72:a4:d7:ae:ac:6f:36:ac:62:57:5d:
ff:24:13:e1:f2:de:94:81:ae:8c:a2:74:a9:ed:ff:b9:09:0c:
4d:1d:53:06:5e:03:63:e9:77:34:56:e5:e8:cf:24:88:3a:e8:
de:a4:cc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:49 2026 by rpki-client