Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144040.roa
File: AS144040.roa (raw, json)
Hash identifier: NNnoTm6VFdcofLfnpih3FrCZTGPwwgl/jRoiMuJ5B3M=
Subject key identifier: 4D:82:F7:AF:D6:EF:91:D6:31:1A:FE:5D:2D:E6:9C:11:22:85:77:5A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 399118DB0FAB2B2CBF1FB0F5B997514883BEAA71
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144040.roa
Signing time: Fri 22 May 2026 06:27:35 +0000
ROA not before: Fri 22 May 2026 06:22:35 +0000
ROA not after: Fri 21 May 2027 06:27:35 +0000
asID: 144040
IP address blocks: 240a:a56e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:91:18:db:0f:ab:2b:2c:bf:1f:b0:f5:b9:97:51:48:83:be:aa:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:35 2026 GMT
Not After : May 21 06:27:35 2027 GMT
Subject: CN=4D82F7AFD6EF91D6311AFE5D2DE69C112285775A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:83:45:50:45:2e:7f:3f:80:df:80:d0:2f:b6:
79:db:01:c7:87:28:23:6a:63:05:cb:d8:6f:7d:22:
12:bc:8c:3f:db:1b:f0:2b:5c:89:46:52:d7:19:d7:
44:c0:65:5e:31:16:9b:bd:83:d0:24:6c:db:9f:a8:
1c:04:51:df:ba:02:48:5d:73:88:a4:ef:22:39:c3:
dd:ce:1b:6c:a7:8b:a5:fd:a3:20:4b:0a:fc:8b:04:
05:c9:6d:c5:f0:9d:9a:79:6a:68:47:f0:48:b1:92:
29:42:a0:32:90:5d:a9:ee:07:7a:94:cc:a6:3c:43:
07:51:64:aa:58:8a:ba:c8:e0:44:05:9e:23:cf:43:
88:a2:ac:19:d5:fb:d9:ad:26:f7:4f:7f:88:85:eb:
ea:cb:00:b5:ab:12:b3:20:1e:b4:39:bb:44:3a:17:
a4:e9:3b:b1:18:d7:f9:5f:6f:bc:39:c9:1b:5c:f2:
4d:08:af:c4:f1:be:d7:93:6a:ce:95:a1:83:fc:42:
f3:ff:93:34:fd:15:a0:5d:5b:0c:bf:cd:d5:24:7b:
8f:ec:4b:02:02:3f:d4:19:46:94:07:89:1f:16:81:
e3:5a:7c:e7:67:e5:4b:53:be:98:4f:df:98:42:a5:
83:9b:dd:d5:53:f5:ff:74:39:4b:e7:88:72:54:f4:
a1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:82:F7:AF:D6:EF:91:D6:31:1A:FE:5D:2D:E6:9C:11:22:85:77:5A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144040.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a56e::/32
Signature Algorithm: sha256WithRSAEncryption
74:24:09:89:57:85:9d:d9:d7:a1:13:88:d6:ad:b7:3e:64:28:
3b:1f:42:80:59:48:a5:4a:a9:24:d4:f1:99:9e:12:07:77:0d:
56:5e:8e:8e:7f:dd:a8:32:4f:20:0d:ee:97:00:40:c7:66:fa:
ef:7d:75:af:cf:3e:8e:f1:68:bd:5b:89:9c:99:13:86:46:37:
0e:1c:da:60:79:66:e7:a3:43:da:bc:d0:16:48:31:08:fd:bd:
11:d5:f0:67:35:1e:e5:e7:86:3d:49:ae:2e:01:ce:67:97:d3:
97:4a:61:62:b2:b7:c6:9c:d0:64:9f:2f:4f:80:46:14:44:8f:
69:7d:a2:98:9a:1a:76:81:96:37:fb:51:34:22:46:6c:e0:81:
1f:45:ad:8d:c7:87:93:e0:a9:b5:b1:94:b6:ac:07:60:2c:56:
1d:56:be:88:d2:52:11:96:28:1c:12:64:5a:84:39:c2:93:96:
da:62:66:6a:6d:49:3b:ed:2c:11:ee:29:64:12:63:03:87:6b:
da:9d:38:f7:50:42:d7:ad:ec:38:fa:9e:cf:8d:dc:9a:a0:38:
ff:0e:4f:b5:79:3d:85:10:24:9a:06:46:0b:65:75:9c:47:5e:
0c:99:1b:64:04:39:cf:ac:5d:78:b9:e5:0f:e0:fa:8d:95:5c:
1f:81:d5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:07 2026 by rpki-client