Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144057.roa
File: AS144057.roa (raw, json)
Hash identifier: TcfoSNThnP4695PI2KfIVxam6C1tTvc2YB+eczQODAc=
Subject key identifier: 66:40:FA:A9:B4:7C:62:08:E5:9A:3F:5A:E8:93:20:C0:DD:86:0C:AE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0F8D3B663F6F4D614032AAF459276EF434941FE8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144057.roa
Signing time: Tue 26 May 2026 03:17:20 +0000
ROA not before: Tue 26 May 2026 03:12:20 +0000
ROA not after: Tue 25 May 2027 03:17:20 +0000
asID: 144057
IP address blocks: 240a:a57f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:8d:3b:66:3f:6f:4d:61:40:32:aa:f4:59:27:6e:f4:34:94:1f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:20 2026 GMT
Not After : May 25 03:17:20 2027 GMT
Subject: CN=6640FAA9B47C6208E59A3F5AE89320C0DD860CAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:07:c6:78:31:29:78:61:db:45:1e:d5:98:d8:
87:be:64:39:2f:5e:1a:f7:da:bd:0b:54:74:f4:9b:
b9:3f:ae:64:12:3c:9f:e6:93:3f:b3:7b:f2:11:89:
bd:ec:8a:5a:83:a1:25:ca:fb:22:02:8c:36:7b:0d:
15:c8:75:bd:58:cd:92:fc:41:7f:dd:84:f3:9d:02:
5a:4b:bb:ec:fb:e9:ba:a6:90:80:54:31:da:3c:93:
3e:76:07:b6:e1:d8:26:fa:58:30:eb:12:de:14:74:
40:3c:fb:f8:93:49:6b:4a:3f:e6:f1:d7:a8:80:44:
de:ee:42:05:73:66:ed:75:eb:5f:11:0c:98:84:b3:
f2:0f:7f:ac:8c:8c:0b:00:6e:08:f5:18:bd:82:8a:
77:da:4f:c5:2f:19:51:a7:04:62:d5:93:39:08:6d:
1e:b1:80:74:89:78:23:e5:47:cf:53:e5:d4:85:d9:
1e:ac:94:10:6a:17:94:1c:a4:66:d0:27:09:58:67:
05:50:17:fc:53:27:6a:54:e6:09:fc:88:9e:9a:18:
1f:34:4b:74:97:62:1b:2c:df:a5:4a:59:6c:3b:f7:
94:b0:32:79:e4:f7:f2:e1:06:2f:96:08:93:27:7a:
1d:50:3a:72:79:f6:29:18:82:b0:8c:7a:52:72:fc:
ad:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:40:FA:A9:B4:7C:62:08:E5:9A:3F:5A:E8:93:20:C0:DD:86:0C:AE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144057.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a57f::/32
Signature Algorithm: sha256WithRSAEncryption
0a:fa:5e:3f:01:5c:02:7e:b5:3d:a1:61:50:a1:3d:cb:2e:0f:
b8:00:19:23:e5:db:85:de:e9:da:2d:0d:d5:1a:af:b4:ce:e2:
3f:a8:31:94:b6:e7:73:36:9d:fe:88:73:ab:bd:64:9f:01:3c:
4c:fe:a6:9c:0e:bc:ae:9a:e9:f5:d8:47:39:ee:34:ad:5b:1d:
dd:72:1b:5f:c6:2a:3e:35:3f:cb:bc:49:24:2f:25:c1:0b:18:
15:fd:5e:0e:8d:b7:93:a0:c0:38:7c:ff:f3:4c:f6:b6:cf:9e:
5e:90:9a:c8:a7:c8:ec:86:3b:0f:2f:fd:7c:b2:33:6d:01:87:
e7:d3:9d:05:72:3f:47:ae:f0:4c:fa:a1:c8:92:b4:68:be:45:
42:08:96:9f:e6:f7:de:f8:2e:75:a5:f3:fd:89:8a:8c:5d:8b:
2b:e2:85:90:d3:23:ca:70:03:60:1c:8d:57:8c:a4:b3:6d:b2:
36:45:c6:39:29:8f:35:bd:f9:9e:30:bc:6d:9c:8e:a1:5c:d1:
2b:3b:a5:cf:5d:fb:91:5d:13:66:2a:16:12:b3:b3:80:d3:f1:
00:ea:27:52:0e:19:33:b3:a9:2f:8f:ae:2b:3d:c5:9a:45:50:
17:04:be:26:61:f7:7e:c2:2c:d8:08:4a:70:1f:f0:67:82:3c:
a4:26:9a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:52 2026 by rpki-client