Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144039.roa
File: AS144039.roa (raw, json)
Hash identifier: w0jneCnAxVuqPKf/JQRL8NoRzNzAkB2wcMYneuKyALk=
Subject key identifier: 21:6B:7C:6C:C5:3B:FA:82:27:E8:6D:AA:BC:AA:2D:60:17:76:07:37
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 405A92474AD099B1A95304671F8E288C1CDE6803
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144039.roa
Signing time: Fri 22 May 2026 06:46:28 +0000
ROA not before: Fri 22 May 2026 06:41:28 +0000
ROA not after: Fri 21 May 2027 06:46:28 +0000
asID: 144039
IP address blocks: 240a:a56d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:5a:92:47:4a:d0:99:b1:a9:53:04:67:1f:8e:28:8c:1c:de:68:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:28 2026 GMT
Not After : May 21 06:46:28 2027 GMT
Subject: CN=216B7C6CC53BFA8227E86DAABCAA2D6017760737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:07:01:41:4f:fa:5c:8d:f4:9a:61:b8:f0:35:
90:1b:2d:a5:a5:01:69:d6:d9:3e:80:bc:27:9c:1a:
ec:d0:db:1e:f7:0e:be:36:c7:10:8b:24:36:6e:03:
71:8f:94:b5:59:24:a5:8a:6d:77:5c:3d:d7:98:9e:
78:be:81:fd:01:19:96:df:ce:61:1a:aa:6a:63:b0:
d4:db:7c:94:11:0e:a3:c5:d1:4f:1a:4a:69:70:ef:
65:2a:e6:35:5d:bd:a1:6c:f5:d9:f2:df:42:77:b1:
3a:cd:33:a8:53:e9:ef:6c:90:ba:34:0b:b7:ae:59:
89:e6:ec:74:cf:ea:d6:31:1b:3f:b0:d6:39:64:c2:
2a:a1:48:53:4f:cc:5f:d1:7e:69:98:20:be:1f:51:
f4:f4:0b:3f:34:d8:fc:b6:82:d7:ab:c5:d1:be:d4:
70:5a:61:c2:15:0b:d8:4f:f8:95:3b:c1:4f:6d:08:
c3:7b:7c:76:da:34:d7:71:5c:8a:df:fb:8a:69:d7:
7a:0d:9c:3f:0e:51:f1:ef:a4:57:c9:dd:60:d0:76:
17:43:e9:88:44:7b:98:14:d1:7f:be:ed:01:96:88:
19:5c:5b:f6:4f:cd:93:de:30:e2:2b:1d:ca:ff:d6:
22:43:de:95:aa:1a:81:09:d1:d4:19:ae:cd:5a:d9:
55:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6B:7C:6C:C5:3B:FA:82:27:E8:6D:AA:BC:AA:2D:60:17:76:07:37
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a56d::/32
Signature Algorithm: sha256WithRSAEncryption
6a:04:d7:a1:38:6f:39:4c:e7:ba:a5:e7:d5:b5:b4:2e:f7:64:
ba:77:5f:89:5c:5d:70:9e:8d:0a:c1:da:23:4f:32:86:1b:df:
f4:19:7b:09:21:44:55:8b:95:a5:25:44:52:9c:35:19:43:e4:
29:3c:21:5b:cc:43:7d:11:23:92:60:f4:c3:c1:37:a2:85:68:
9e:05:4e:2d:d0:62:9a:99:ef:11:69:c4:12:fd:09:e6:df:37:
ec:ca:9b:56:e8:fe:37:e2:8d:13:e7:a5:55:1a:4f:fb:14:16:
82:eb:2d:74:ca:04:01:d2:3d:d9:76:48:79:0f:ce:2a:1d:5b:
01:49:ea:80:1d:57:aa:c8:91:4a:0e:27:7a:a7:db:be:e8:e9:
a9:4a:93:b4:67:07:19:d9:e9:ab:01:71:e2:63:9b:94:44:53:
e4:d6:da:e7:29:ba:c9:6e:c9:63:81:da:fe:2b:da:16:4c:b8:
dd:35:32:ec:eb:53:af:b4:6c:25:6d:ee:04:32:88:29:7b:c6:
c4:d4:3f:fd:c1:4a:97:6f:b5:b5:f1:61:5d:17:30:71:e2:da:
38:19:cc:f1:8b:c0:76:ac:e1:53:a8:df:31:a3:a2:87:f7:88:
15:f1:65:a0:e9:a2:fb:45:95:f9:5b:e5:6b:90:d5:2d:e3:d2:
fb:45:a3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:39:02 2026 by rpki-client