Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144045.roa
File: AS144045.roa (raw, json)
Hash identifier: zRKAS3YPr5LPvZBTl4obId07+1FXMZR00ZcrD6Qa1ns=
Subject key identifier: 89:8B:3A:02:33:69:A9:F0:6A:15:06:72:ED:5E:C8:CD:8D:CA:4F:2A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 565BB57B94624268FB654E244ABFF18804EF80CB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144045.roa
Signing time: Fri 22 May 2026 06:46:11 +0000
ROA not before: Fri 22 May 2026 06:41:11 +0000
ROA not after: Fri 21 May 2027 06:46:11 +0000
asID: 144045
IP address blocks: 240a:a573::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:5b:b5:7b:94:62:42:68:fb:65:4e:24:4a:bf:f1:88:04:ef:80:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:11 2026 GMT
Not After : May 21 06:46:11 2027 GMT
Subject: CN=898B3A023369A9F06A150672ED5EC8CD8DCA4F2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:94:12:31:70:a8:10:00:07:5f:d4:bf:76:
04:cd:f1:97:59:d1:e3:aa:5d:12:dd:f4:1e:a4:8c:
8d:42:fc:1e:c8:04:01:ee:b1:1a:45:84:dc:36:2b:
d0:b4:db:58:ec:7a:c5:7d:7f:bc:36:39:aa:33:66:
3a:83:fd:83:40:44:1b:ce:60:42:c7:dd:b2:97:6b:
d7:c9:60:cf:ac:91:47:52:3a:79:b1:7a:02:20:88:
f2:44:2f:1b:a6:c0:f1:90:93:b6:71:dd:6c:5a:75:
3f:fb:3b:5a:f2:41:3f:0e:36:3d:d7:de:2d:a2:df:
c9:eb:49:99:e7:f8:74:cd:15:7b:20:ba:1b:8c:45:
82:2e:2b:05:9e:22:79:4a:25:75:85:d4:f6:69:0e:
81:3b:e0:cf:3e:e7:b9:29:9c:45:73:68:cb:16:e0:
54:cb:76:ca:78:ce:d6:c0:34:f4:1d:2c:91:85:09:
42:de:37:d6:33:33:1b:0b:66:fd:a3:4d:24:ec:d1:
b0:09:cf:c0:ca:7d:4c:f9:49:9a:24:8a:ea:0f:fc:
b9:4c:1c:6a:48:d7:12:f2:dc:2d:bf:79:25:ce:bc:
b6:d9:4f:b1:45:52:a0:31:d9:ed:5b:52:53:14:66:
9e:6c:d1:d9:62:db:7a:e7:54:94:1e:ef:ff:52:ed:
11:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8B:3A:02:33:69:A9:F0:6A:15:06:72:ED:5E:C8:CD:8D:CA:4F:2A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144045.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a573::/32
Signature Algorithm: sha256WithRSAEncryption
69:02:f6:c0:fc:a7:1c:97:7e:e3:77:6f:bd:6b:05:99:a3:66:
2f:45:32:51:9c:61:0f:ae:b3:8c:7e:0a:bc:63:59:5f:a0:45:
1d:a8:1b:2f:0c:f9:a5:2b:24:47:6a:87:54:57:81:63:3d:67:
55:d2:75:c0:b4:15:18:b0:f6:3f:15:ab:d7:d6:f0:65:9b:54:
1e:68:50:91:82:6a:c2:33:c9:16:3c:65:d4:fc:4f:97:92:49:
eb:ae:fa:b1:8e:69:e9:2b:88:9d:cf:eb:f4:46:8d:57:ff:a5:
84:47:5f:34:a1:44:4d:1b:7b:46:80:54:32:b5:ff:7b:da:1c:
16:71:1c:30:db:14:93:14:b7:ac:8f:27:2e:ad:bc:a0:71:f1:
42:f8:55:6c:3d:44:fd:02:48:c8:43:c1:67:d6:93:31:67:0c:
df:4f:4f:30:a9:2a:e5:06:38:1f:cb:71:1e:a1:b5:50:84:19:
f0:ca:92:6e:6a:af:1a:2d:0d:aa:03:60:51:7c:72:c2:8c:a4:
ab:91:17:0f:8f:1e:a9:ef:10:0c:34:ac:bc:8b:ea:42:9e:06:
8e:4a:f8:2d:af:54:4c:b6:cc:dd:e6:fc:fd:b7:4f:25:27:21:
bd:cc:bf:8f:99:ea:9b:14:0e:6a:54:66:a1:a5:aa:fe:38:e1:
7f:e9:fe:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:40 2026 by rpki-client