Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144050.roa
File: AS144050.roa (raw, json)
Hash identifier: GpeTT6zJOyLoGs0ufyOLp3cNs23zL263EPiKKrkgLbQ=
Subject key identifier: CD:6E:D3:1A:D6:BA:29:0D:05:F8:0D:94:52:D9:36:EB:75:69:DC:D1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 60DC3354F349D047D841739DE48CF9627A3C0D1E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144050.roa
Signing time: Fri 22 May 2026 06:27:37 +0000
ROA not before: Fri 22 May 2026 06:22:37 +0000
ROA not after: Fri 21 May 2027 06:27:37 +0000
asID: 144050
IP address blocks: 240a:a578::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:dc:33:54:f3:49:d0:47:d8:41:73:9d:e4:8c:f9:62:7a:3c:0d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:37 2026 GMT
Not After : May 21 06:27:37 2027 GMT
Subject: CN=CD6ED31AD6BA290D05F80D9452D936EB7569DCD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:90:c5:28:4b:fe:e3:7f:99:fe:86:bc:3d:b1:
a7:87:7b:d2:af:92:cb:49:0d:9a:3f:55:81:f0:28:
95:00:eb:91:72:dc:66:8e:c4:63:7c:83:a5:55:ce:
c8:5b:18:f1:07:61:ba:a8:15:79:75:fe:1b:a6:46:
2a:c6:3d:60:f7:36:43:1b:56:35:c8:8a:e4:4a:bf:
c7:de:62:dd:70:b0:65:b7:cb:08:10:33:c8:0d:52:
64:4d:f8:f1:f3:5b:e4:82:b8:1e:c8:bb:02:d0:47:
47:c6:f6:4d:fb:5f:c1:22:72:11:93:9c:4c:48:5c:
a1:1a:5a:19:c3:33:47:6b:84:13:e5:36:c4:e5:44:
bb:1b:3c:e3:f4:ac:e0:31:97:97:78:b4:94:be:0d:
9d:25:60:08:3d:19:fe:26:04:cd:15:ce:33:9a:ef:
2c:7e:7b:dd:40:3f:22:5c:0f:46:82:7b:25:97:24:
ea:ce:20:2c:4d:ab:0f:72:12:f2:7d:a0:04:f6:bd:
d1:aa:ad:0d:74:85:ae:8f:0f:d8:1d:c9:92:e5:ed:
57:46:d5:d6:ea:c9:8f:02:31:31:09:1a:45:dc:c7:
40:fd:56:4f:8b:66:0c:35:f6:c2:0e:d0:f8:d6:fc:
5b:73:17:4a:ba:73:2b:56:46:87:3e:ec:c5:7d:af:
cf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6E:D3:1A:D6:BA:29:0D:05:F8:0D:94:52:D9:36:EB:75:69:DC:D1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144050.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a578::/32
Signature Algorithm: sha256WithRSAEncryption
31:f8:b6:9a:7d:53:c4:fc:b8:2c:d0:c0:2f:d2:6c:ef:ef:f5:
51:88:26:10:5a:d8:85:e3:d3:80:09:64:45:dc:d1:d3:76:2b:
90:05:ec:a4:bb:c0:de:7a:89:99:51:c9:06:5a:14:b3:3f:64:
94:9e:c2:e8:b8:84:90:1f:5a:9e:1f:6f:79:ac:01:32:07:10:
21:29:9e:51:70:0b:30:17:82:af:91:bc:ec:e7:76:24:c7:f3:
f0:95:b3:46:fa:d9:29:5f:b0:98:20:91:b5:92:7e:81:22:56:
9b:7b:34:48:8a:07:00:c2:7f:56:66:d4:ee:6e:81:4f:b0:49:
7a:64:09:63:ea:df:fe:e2:2c:58:42:6f:a0:fb:c7:75:3a:06:
37:79:0e:eb:a9:ea:bc:a1:17:78:6f:75:39:49:a4:88:08:fb:
44:3c:a3:84:0c:9c:44:cb:8f:82:b1:06:b4:35:cf:0b:02:14:
2c:0c:f1:a6:d2:c3:cf:c2:ba:e1:7a:f7:86:97:b8:38:ca:a9:
b6:a6:66:10:5c:06:35:ff:69:58:dd:71:c8:70:4d:88:d5:27:
6e:cb:21:2c:5d:bb:c6:ea:d4:45:ba:ea:39:38:38:54:c1:c3:
22:2c:da:56:f5:6a:22:67:a3:34:30:58:91:59:5b:d7:5b:bf:
f0:75:4f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:48 2026 by rpki-client