Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144035.roa
File: AS144035.roa (raw, json)
Hash identifier: CzOKW2v8qXAnhvZ2nY/PkWw76mH4YD1z30XccPqQ1w4=
Subject key identifier: 41:2C:3E:AC:A0:D2:5C:09:76:92:3E:82:23:84:ED:A2:7F:94:EC:63
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0117BDF56711F2CD42874412380259325C03E6BE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144035.roa
Signing time: Fri 22 May 2026 07:40:44 +0000
ROA not before: Fri 22 May 2026 07:35:44 +0000
ROA not after: Fri 21 May 2027 07:40:44 +0000
asID: 144035
IP address blocks: 240a:a569::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:17:bd:f5:67:11:f2:cd:42:87:44:12:38:02:59:32:5c:03:e6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:44 2026 GMT
Not After : May 21 07:40:44 2027 GMT
Subject: CN=412C3EACA0D25C0976923E822384EDA27F94EC63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:da:76:28:ed:ec:cf:43:80:98:d5:a8:b6:ca:
5e:65:d9:af:87:a3:bf:be:80:ac:4c:f7:04:61:f5:
02:ed:1d:60:8d:ec:44:0b:df:16:45:87:d7:01:60:
be:be:75:46:e9:f5:d8:83:39:1b:7b:14:47:82:12:
66:cf:eb:23:19:4a:f0:7e:4a:8b:ad:04:ae:14:8e:
f7:58:e4:b8:34:71:3e:39:f0:62:0b:e5:71:4f:43:
99:25:d2:68:08:ea:5f:c5:a5:81:10:4d:ea:b6:26:
f0:ca:c7:48:14:07:12:a9:3c:af:d2:62:71:a0:ba:
a9:a2:8b:18:16:5a:49:98:98:05:f5:08:7f:60:ee:
40:8b:a6:2c:8c:23:77:c3:70:d7:d1:f5:ef:dc:45:
83:0f:80:ef:06:a9:a6:28:27:3c:2c:15:80:94:32:
e3:b4:9c:e3:ac:73:ad:85:95:67:2f:98:f9:0c:f3:
5a:09:7c:ab:6d:17:ea:a2:fb:cd:25:61:91:3c:f0:
ad:9d:c2:92:cd:a8:d4:41:13:aa:63:6b:31:75:12:
89:d6:15:81:1f:68:a2:8c:fa:10:10:36:1c:d9:23:
85:d7:59:c4:f9:c8:0b:c5:9f:4c:d7:15:61:8a:c6:
b7:c4:08:71:2f:3c:04:9f:87:7f:d6:98:f6:36:ac:
ea:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2C:3E:AC:A0:D2:5C:09:76:92:3E:82:23:84:ED:A2:7F:94:EC:63
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a569::/32
Signature Algorithm: sha256WithRSAEncryption
70:a9:0a:b6:dc:d4:b6:48:c8:d5:16:dc:b0:98:34:b8:32:41:
93:61:24:75:a3:e0:1c:18:a0:26:b2:b6:a7:33:03:5f:4d:73:
c0:ed:4e:a7:86:57:13:0f:51:ae:d7:a8:70:8d:cf:74:7a:33:
f7:30:41:9f:67:e1:10:33:fe:f8:f0:da:61:04:01:b9:01:60:
6a:87:84:1a:45:5b:08:9d:a1:e3:2b:77:02:06:fc:2b:21:91:
18:95:f2:5a:32:f0:25:3f:e2:8f:81:4a:9c:17:1f:6f:17:71:
58:8f:23:52:ff:0d:66:a6:86:ae:82:9a:97:b7:86:5f:01:e4:
e5:48:30:f5:45:2b:51:88:f6:1f:df:dc:0a:d1:0f:5b:e7:89:
5d:da:d7:bf:84:da:48:3e:06:9e:42:42:a0:64:08:68:ef:04:
e3:4d:c0:fb:68:5a:83:58:b0:f8:63:0e:26:69:6e:60:5f:9e:
cf:02:5c:93:91:fd:fe:e7:39:8f:df:6d:a4:be:f3:c9:90:ac:
5d:fa:08:49:26:6f:b2:53:33:05:9b:28:c0:9d:e2:84:a2:8a:
4f:3c:10:df:94:11:70:10:58:e4:1e:e5:36:d9:86:c6:56:c6:
06:be:28:83:44:9c:6f:22:df:5f:86:6e:16:e3:0a:60:99:ce:
6e:87:20:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:32 2026 by rpki-client