Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144069.roa
File: AS144069.roa (raw, json)
Hash identifier: KJQfzQRGOrdQlnV9UpCQCj4pLGNEmWZq5j0J5g41y0w=
Subject key identifier: 48:85:51:F8:C9:D0:87:66:6C:05:2E:26:FA:36:39:AC:83:6A:3B:E1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 03184ED470910A0C874320F9836EECC7ED1B7618
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144069.roa
Signing time: Tue 26 May 2026 06:30:31 +0000
ROA not before: Tue 26 May 2026 06:25:31 +0000
ROA not after: Tue 25 May 2027 06:30:31 +0000
asID: 144069
IP address blocks: 240a:a58b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:18:4e:d4:70:91:0a:0c:87:43:20:f9:83:6e:ec:c7:ed:1b:76:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:31 2026 GMT
Not After : May 25 06:30:31 2027 GMT
Subject: CN=488551F8C9D087666C052E26FA3639AC836A3BE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5c:96:c9:9c:8d:67:34:a3:44:f1:79:f9:b7:
49:73:06:4e:28:dd:d2:65:70:49:c6:cd:a4:d8:33:
83:5d:24:3a:1b:5e:8a:13:af:7a:14:7f:40:8e:0d:
fa:ef:f8:e6:9e:c3:17:ef:e9:1f:de:f7:1b:94:5a:
60:05:3a:dd:ff:01:90:f3:78:c9:45:fc:d6:6a:17:
60:ca:e6:96:43:1b:e0:b0:7f:a0:19:1e:06:7b:88:
00:e8:d1:88:69:d1:a0:5e:88:f0:2e:aa:9c:c5:b0:
b3:1d:5b:2b:6f:93:bc:e2:99:7a:57:8c:c1:ae:1d:
58:f2:af:91:1b:99:59:9a:11:51:16:ca:7b:66:1a:
b1:0f:81:3c:29:37:9f:f1:7a:5f:a9:fa:3f:5c:1b:
cd:2c:14:0d:3b:51:99:c1:c3:bb:bf:6f:d7:90:e4:
c8:4a:78:89:f3:73:69:57:67:fc:f9:71:ee:01:86:
4a:a2:d5:54:33:01:ae:92:f0:34:c8:5e:37:e4:5d:
87:e2:2d:60:e8:3e:98:7b:86:1a:74:79:9a:18:9e:
31:85:b5:1b:34:54:c2:3a:54:80:f1:91:1a:64:f7:
74:20:c7:6f:0d:e6:ad:73:15:87:40:9a:6a:2c:8a:
28:37:5e:82:3e:92:47:94:ab:e2:35:48:3b:d7:0e:
f0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:85:51:F8:C9:D0:87:66:6C:05:2E:26:FA:36:39:AC:83:6A:3B:E1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144069.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a58b::/32
Signature Algorithm: sha256WithRSAEncryption
40:18:8d:be:11:a1:f7:bf:62:80:69:08:0c:2d:57:7b:21:2b:
f1:ec:99:c3:df:71:ba:a0:68:21:ed:6c:e3:92:cc:f0:14:c1:
76:d7:c2:58:ee:3a:85:2b:78:53:70:5a:d0:19:03:cb:30:fb:
24:95:a3:b8:a9:ff:65:f9:d0:bc:75:1a:a1:eb:f3:ec:86:a9:
62:8c:c5:38:42:5a:54:49:b1:91:33:7f:d2:39:59:74:d2:1b:
85:b0:35:b1:f1:8a:8a:56:f2:f4:54:e8:2a:f7:08:43:b5:25:
2d:2b:1d:f1:63:de:e9:06:2b:32:b8:44:bd:a2:e4:a8:c7:05:
90:9d:d6:ca:fa:db:7e:16:b6:02:5d:ce:a0:94:37:4f:40:ab:
60:5a:92:c6:7b:96:ff:d4:c2:a1:c9:a0:95:3e:77:79:14:bf:
dd:f6:0b:a8:82:65:f2:23:74:29:6c:47:bf:f7:f3:4d:49:72:
d6:3e:30:57:8f:f2:8e:97:33:9c:53:1a:e5:be:0c:e3:ef:c2:
6f:db:8b:6d:75:08:e2:ae:0b:c1:51:9e:99:ed:8f:2b:dd:00:
00:a0:52:1d:9b:bf:8d:72:cb:aa:d7:65:a9:74:c7:64:8d:d2:
90:9e:c8:94:eb:d3:d5:a2:e3:bf:1b:c4:bb:67:6a:43:02:21:
49:8f:ff:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:25 2026 by rpki-client