Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144033.roa
File: AS144033.roa (raw, json)
Hash identifier: b4vF40kHPyZibcBT9kco7b40+uxsqtXfs83xY6IFEC8=
Subject key identifier: 31:87:96:DE:98:78:66:83:A9:E1:B1:74:A3:8B:7A:14:F7:6A:CC:A6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3C00D82C99A36A426EEB64D4C88C1D8DC1DFB013
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144033.roa
Signing time: Fri 22 May 2026 07:24:41 +0000
ROA not before: Fri 22 May 2026 07:19:41 +0000
ROA not after: Fri 21 May 2027 07:24:41 +0000
asID: 144033
IP address blocks: 240a:a567::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:00:d8:2c:99:a3:6a:42:6e:eb:64:d4:c8:8c:1d:8d:c1:df:b0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:41 2026 GMT
Not After : May 21 07:24:41 2027 GMT
Subject: CN=318796DE98786683A9E1B174A38B7A14F76ACCA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:42:53:9c:ac:2f:93:2e:72:ab:8c:e9:cc:b7:
c1:76:4c:71:17:19:bf:00:3b:cd:6a:ab:24:2a:11:
da:71:30:ed:61:c9:49:69:ab:a1:ac:f1:84:62:51:
41:d9:10:34:31:9d:31:2d:a8:99:88:d8:86:c1:10:
bf:a0:dc:7c:b5:8b:f7:28:56:16:d9:ad:f6:a6:23:
4a:d2:b8:81:77:b7:18:a5:9f:79:c3:25:46:99:35:
85:ee:fd:b4:d9:80:a2:c0:b2:a9:59:3d:9a:b7:29:
97:07:d9:05:89:18:84:ce:cf:db:8b:bb:6f:b2:8a:
8b:60:de:b1:fc:10:69:bc:86:27:88:2c:df:0c:b4:
a8:58:5a:a7:6b:30:cd:c3:04:0b:18:cc:80:e5:99:
02:f7:72:bb:93:b2:76:6e:db:4e:0f:c9:70:ad:19:
15:98:a1:4d:54:a2:96:e8:31:52:eb:2f:a6:a7:95:
3a:ad:55:82:fd:ad:f1:15:ef:3a:e1:af:b5:c0:ed:
84:de:e1:31:5e:87:1c:b1:ec:d3:f5:fa:a5:80:7f:
63:4b:5d:dc:a4:44:65:1a:2e:7d:b5:26:02:5d:90:
7f:8f:f6:04:c0:7b:0f:51:0b:e2:a8:4a:10:10:97:
d2:af:f4:87:db:6e:45:4d:e5:c9:0f:db:8a:59:07:
18:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:87:96:DE:98:78:66:83:A9:E1:B1:74:A3:8B:7A:14:F7:6A:CC:A6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a567::/32
Signature Algorithm: sha256WithRSAEncryption
76:a5:61:0d:4c:9a:d8:c3:0f:b8:39:39:ed:5f:09:f1:cd:9d:
61:2f:d8:58:1c:38:0d:3b:0e:d0:89:08:b4:c1:e2:c7:d8:e4:
de:72:27:89:9b:2c:8b:90:8e:84:69:95:81:0e:72:00:39:30:
cc:30:30:62:8e:c5:43:4e:1b:5d:45:1e:bf:93:32:20:51:78:
c5:6d:6a:26:de:3a:5a:e2:6c:ea:4e:6c:98:5b:63:ae:e1:55:
90:65:ac:eb:81:03:d3:b0:48:27:c5:2f:ad:1b:37:0d:b1:9c:
cc:db:cf:c3:1c:b6:03:b1:23:17:7c:19:7d:e5:bd:74:39:a4:
e8:da:bb:ad:cf:94:a7:fe:cc:3b:81:bd:5c:99:86:d0:06:07:
c5:9a:bc:a5:19:a6:30:6e:f8:e8:f8:7b:b6:bb:a5:b0:55:0c:
48:f3:8e:e4:ff:4a:30:26:d5:e2:6e:a1:5c:92:90:4d:07:72:
f7:44:23:ea:3b:b9:de:08:4e:93:2e:bb:e2:3a:8c:e0:ae:07:
ce:c1:df:29:ba:23:a7:a8:2d:4e:8f:7b:7b:92:b3:9f:1e:70:
3b:e5:ee:14:92:d3:88:7c:5c:b9:c8:65:29:3a:fe:32:fa:a7:
00:f2:07:5c:34:ec:06:ca:81:81:0d:8a:a7:1d:cc:4c:89:12:
7a:c1:34:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:30 2026 by rpki-client