Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144100.roa
File: AS144100.roa (raw, json)
Hash identifier: B0nHF5gxq+pgpNAaaPF7pGkiVt+K6j27QJJvGo3AiME=
Subject key identifier: 8A:0C:8C:E0:14:36:8E:A5:AD:1F:40:B5:54:F5:37:AE:54:72:18:2B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 303ED173281D8A64058E8B8F17849EF9A00BB046
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144100.roa
Signing time: Fri 22 May 2026 04:08:18 +0000
ROA not before: Fri 22 May 2026 04:03:18 +0000
ROA not after: Fri 21 May 2027 04:08:18 +0000
asID: 144100
IP address blocks: 240a:a5aa::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:3e:d1:73:28:1d:8a:64:05:8e:8b:8f:17:84:9e:f9:a0:0b:b0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:18 2026 GMT
Not After : May 21 04:08:18 2027 GMT
Subject: CN=8A0C8CE014368EA5AD1F40B554F537AE5472182B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:85:78:76:b2:57:e2:5d:b8:29:41:2b:5f:bf:
0d:b7:5d:b5:56:d9:2a:70:5c:07:b5:1d:8c:96:14:
2c:bb:48:73:30:e7:14:2d:f4:29:4a:18:f1:86:11:
77:63:06:a6:ba:be:57:65:65:b0:b2:d1:ea:fb:0f:
bc:04:c7:3a:88:4c:5e:42:99:ea:dd:76:e1:f1:d8:
bf:3e:5a:b4:d0:87:22:ad:a9:f7:ad:e5:59:d5:ad:
fc:c9:77:f4:2b:b0:72:d8:c8:44:b3:5d:0d:11:e7:
30:f4:b1:91:b2:39:7f:19:a4:6c:74:d0:20:d6:ac:
d8:a1:04:5c:7e:6e:53:8f:57:93:9a:fb:70:5e:09:
08:f8:02:12:ca:81:2d:e3:02:12:a7:52:06:63:14:
ee:47:2d:a0:79:1e:47:34:22:35:77:58:56:01:ce:
94:0e:ce:58:ac:61:2f:ae:93:d1:bb:9c:ff:8b:b4:
df:71:a3:95:9c:9b:7c:68:05:94:64:d5:c3:d7:4a:
d3:84:85:ee:df:34:dc:85:b0:e3:71:24:d4:48:a9:
1d:17:22:7b:2c:3d:34:2d:29:88:c3:47:30:53:1a:
2c:8f:cb:6b:df:61:bc:d0:33:25:1f:77:e5:56:01:
71:2d:8f:7c:d5:92:7a:73:53:52:36:2f:4f:eb:ff:
66:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0C:8C:E0:14:36:8E:A5:AD:1F:40:B5:54:F5:37:AE:54:72:18:2B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144100.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5aa::/32
Signature Algorithm: sha256WithRSAEncryption
0d:f2:08:1b:f0:de:dd:eb:d1:35:33:21:91:6d:6a:07:5a:6e:
66:59:b1:c3:b2:8d:6d:55:18:18:ed:a1:99:54:f6:6e:dd:74:
94:36:14:7f:26:b7:02:86:9f:0c:24:a1:44:64:38:5d:df:84:
9f:7c:55:00:b5:6c:39:00:aa:42:80:3e:be:2b:a6:f5:9d:2b:
dd:cd:76:1d:a7:ef:8d:72:4f:e5:62:f5:79:1d:45:7c:89:2c:
34:bf:e4:38:b1:d4:f5:cb:10:94:8b:b6:6b:97:e5:e4:65:e8:
ce:d2:00:33:3e:09:3a:ee:f5:d6:fa:27:06:f7:37:95:4b:21:
63:17:b0:d4:22:52:e9:9b:e7:9c:81:7f:ca:ad:52:71:f6:c5:
6e:8f:1a:b7:f8:92:d0:a9:db:13:c4:fd:0e:45:89:19:66:79:
e1:3c:bb:b2:a7:e4:46:91:7f:bb:98:20:d5:18:27:a7:38:46:
02:67:b7:6b:2e:ae:bf:22:dc:77:f1:38:e4:80:a5:76:2e:68:
9f:65:52:a3:0e:cc:4f:e3:71:9b:ae:fc:9b:76:9e:69:4d:1c:
b9:21:e9:f0:18:9a:7c:fa:cf:46:e3:fc:96:0e:58:18:0b:bd:
b9:8b:d9:03:f1:17:7f:80:e6:fd:9c:23:41:8d:ab:b0:12:7a:
17:90:9b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:50 2026 by rpki-client