Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144087.roa
File: AS144087.roa (raw, json)
Hash identifier: Twqvjd3V8otVqY2+pAyWJzirTcfGVKbFg/koJAN+ZLc=
Subject key identifier: 17:07:66:41:C4:0F:E2:53:67:EE:52:A4:27:5F:98:83:CF:97:27:A2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 067A99EEA8A1DE95733C70720EAA243BF286CB0C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144087.roa
Signing time: Tue 26 May 2026 03:16:35 +0000
ROA not before: Tue 26 May 2026 03:11:35 +0000
ROA not after: Tue 25 May 2027 03:16:35 +0000
asID: 144087
IP address blocks: 240a:a59d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:7a:99:ee:a8:a1:de:95:73:3c:70:72:0e:aa:24:3b:f2:86:cb:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:35 2026 GMT
Not After : May 25 03:16:35 2027 GMT
Subject: CN=17076641C40FE25367EE52A4275F9883CF9727A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7b:c4:ca:85:d5:9f:a4:1c:e0:e0:4b:67:10:
43:cb:74:b5:df:8a:45:ef:ed:af:5a:cf:8c:23:dd:
eb:0f:c7:5c:6e:cf:9b:7d:75:d0:76:c9:ae:d3:23:
36:30:17:49:c4:af:0b:4a:59:b9:40:69:1f:ed:f9:
79:aa:66:43:c3:ba:d0:8e:9b:d2:b8:7d:ab:1e:db:
52:d6:52:22:4b:01:31:66:0d:c9:5d:c0:b4:bf:76:
4f:9f:b5:77:9d:60:9c:61:57:83:b5:d8:2a:e0:6b:
2e:d4:c7:32:84:00:00:16:67:2e:99:7d:dd:c9:de:
e2:c6:08:db:70:c2:29:23:0b:09:38:80:47:c3:fe:
b3:0d:a7:83:7d:6f:f7:f6:a7:1b:29:8c:85:be:43:
ca:74:f4:d5:83:e0:37:3a:6b:96:8a:cd:3f:60:66:
dc:3b:4f:55:f0:06:2b:e8:49:5e:13:94:a6:4e:66:
6a:1a:3c:ec:84:a8:29:2b:b7:a9:ba:98:cb:76:ff:
66:95:7a:ef:4e:82:26:d7:f0:e3:6b:48:f7:66:fa:
9c:2b:20:df:3e:f5:fb:a5:df:11:10:60:25:36:4e:
4b:cd:09:12:84:73:9a:9b:6e:b1:da:03:de:25:66:
8e:f1:e6:ca:8f:4a:62:27:a2:c1:75:b2:6f:c2:ce:
c6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:07:66:41:C4:0F:E2:53:67:EE:52:A4:27:5F:98:83:CF:97:27:A2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144087.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a59d::/32
Signature Algorithm: sha256WithRSAEncryption
99:3f:c9:79:69:82:05:b2:78:29:54:4c:70:01:95:f4:85:45:
9c:78:c6:42:2a:ce:03:15:cb:d4:6f:74:a4:f2:93:45:e1:ae:
53:22:14:13:58:85:17:3a:a8:33:c5:89:bf:02:3b:2c:ea:57:
72:b1:ed:7c:28:c7:9f:eb:eb:9e:b6:2f:84:f5:0f:fb:bb:b1:
ed:92:8f:28:23:28:0a:6d:1d:d3:9a:1b:e3:df:a8:ff:88:82:
5c:40:ee:f8:4f:7f:87:b1:ec:25:a0:90:fb:df:8c:7a:de:85:
d2:5a:95:5c:1e:bc:1c:f7:9a:89:bc:1a:b7:f1:7f:11:a1:dd:
94:4b:5a:08:6e:15:31:15:54:09:a1:c1:85:51:af:fa:ad:b2:
4e:69:75:da:37:9f:0c:34:59:7a:7c:dc:38:a6:9f:ed:a3:c1:
78:91:f2:6e:52:87:b1:e1:70:9e:51:65:7d:b4:6c:a4:44:f0:
a6:14:32:4a:ef:95:c7:2e:af:f2:d5:d8:ca:3c:20:6e:de:c6:
8a:2f:06:c0:92:2a:95:ff:ac:c7:61:ef:14:34:df:ec:a9:78:
c9:cb:13:6a:9c:f9:06:ed:b5:4a:24:e0:36:35:34:81:8f:c2:
7a:e4:7d:6d:2c:20:5a:b4:bf:3b:17:38:66:81:cf:7e:fd:22:
38:7a:9b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:07 2026 by rpki-client