Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144084.roa
File: AS144084.roa (raw, json)
Hash identifier: D/wkvfJe6triVgYCyxXdhH3f0B32wFYkEJoCglrJ3sY=
Subject key identifier: 64:C4:EE:50:3A:50:51:0E:34:A2:4D:61:C3:19:7C:4F:92:D4:51:D8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 653B94781DDE1AF5CAD85E83D17F5F8304C495C7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144084.roa
Signing time: Fri 22 May 2026 07:24:37 +0000
ROA not before: Fri 22 May 2026 07:19:37 +0000
ROA not after: Fri 21 May 2027 07:24:37 +0000
asID: 144084
IP address blocks: 240a:a59a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:3b:94:78:1d:de:1a:f5:ca:d8:5e:83:d1:7f:5f:83:04:c4:95:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:37 2026 GMT
Not After : May 21 07:24:37 2027 GMT
Subject: CN=64C4EE503A50510E34A24D61C3197C4F92D451D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:49:0d:f7:a7:4d:b7:3f:4a:24:39:47:fc:
fe:cf:16:77:49:97:7f:d6:89:46:0b:81:8c:41:94:
c2:3f:99:50:46:05:90:c5:40:5f:47:46:d7:c6:50:
f1:56:12:5d:44:6e:52:4c:ae:1e:0b:4d:21:34:75:
b3:a9:e8:d9:c1:91:a8:2a:84:b8:d5:5f:62:c2:54:
b5:1b:ff:a9:18:da:09:9b:01:84:6b:8f:78:16:88:
63:2d:b6:b2:70:49:a7:a5:37:b8:92:24:bf:ad:8d:
b7:df:0c:2d:ea:ec:8e:7f:a0:0a:9e:58:3f:e4:fd:
3a:3f:9a:54:fc:13:4b:5e:ef:c1:02:75:95:a5:60:
16:e8:34:23:b0:b5:9c:6a:f6:95:40:4a:24:f1:f3:
4c:70:30:b9:48:a1:91:0c:85:b2:f3:c8:98:74:06:
9a:59:8e:7a:f4:21:bb:b1:1d:32:8a:5e:88:68:54:
8d:9d:38:8c:47:f9:8b:51:05:ea:30:51:63:36:59:
79:40:94:8c:5b:e5:e3:b8:80:4b:d0:25:cd:b0:db:
d5:2b:57:d1:4d:e0:b0:78:d4:ad:92:95:b4:a7:79:
05:7a:bc:2f:7c:52:a4:5c:dd:ef:4d:e3:88:a6:54:
d9:9c:d2:0c:61:82:36:32:dc:bb:77:fb:1a:f4:72:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C4:EE:50:3A:50:51:0E:34:A2:4D:61:C3:19:7C:4F:92:D4:51:D8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144084.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a59a::/32
Signature Algorithm: sha256WithRSAEncryption
7b:82:c7:49:64:d8:6a:75:c6:58:c9:7e:7c:98:a7:ae:2d:be:
92:65:33:12:63:17:bd:e8:a4:aa:f7:4e:6f:a5:3a:ac:0c:3e:
65:3d:33:b8:fb:b9:a0:d8:6b:31:20:6f:ce:e2:80:8c:0e:06:
86:5f:4d:a5:d8:aa:ce:85:57:66:fb:e0:64:bb:38:c0:90:43:
8a:5f:30:ac:d0:ec:b8:2e:8b:5e:09:f2:0b:72:4a:87:80:76:
55:34:9b:62:37:78:33:58:ee:42:52:4a:1b:8c:90:b3:8b:cf:
be:25:87:04:1d:21:fb:56:fe:5f:aa:0c:3d:32:2b:f3:dc:23:
82:61:1f:74:c8:0b:f7:8d:45:11:0f:45:e8:e4:ef:20:a3:72:
93:a2:00:84:50:e7:a2:9c:46:13:b8:1a:b9:ed:fa:64:67:fe:
78:28:7c:d5:22:e3:2e:76:48:9b:3c:f8:f1:8c:67:66:38:25:
11:69:69:74:b2:9b:1d:17:11:8d:90:63:d8:5d:51:4a:63:7f:
68:10:33:9e:d6:88:8b:0f:e1:13:17:a7:72:ad:52:1e:d4:10:
2d:10:9d:24:5f:17:81:3e:a9:07:b1:88:50:e3:74:1d:9a:e8:
de:66:a4:8a:81:c7:22:6e:5d:f8:08:3e:fc:68:80:84:f8:7c:
05:93:84:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:49 2026 by rpki-client