Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144110.roa
File: AS144110.roa (raw, json)
Hash identifier: aI7IZGL879DXyBE390afUE4DoKYCr7UUeYWN9SxpqB8=
Subject key identifier: 07:D8:A0:AC:71:71:5A:23:8D:AE:5C:82:13:45:32:38:ED:DE:C8:26
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 163F0584208358806AFCA2AB4AE5F82DC47D15CB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144110.roa
Signing time: Fri 22 May 2026 07:09:00 +0000
ROA not before: Fri 22 May 2026 07:04:00 +0000
ROA not after: Fri 21 May 2027 07:09:00 +0000
asID: 144110
IP address blocks: 240a:a5b4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:3f:05:84:20:83:58:80:6a:fc:a2:ab:4a:e5:f8:2d:c4:7d:15:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:00 2026 GMT
Not After : May 21 07:09:00 2027 GMT
Subject: CN=07D8A0AC71715A238DAE5C8213453238EDDEC826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:23:71:4a:9c:f5:93:f6:18:d4:61:80:4b:
0f:d2:cb:1c:f4:5c:06:73:a5:9e:59:17:ed:36:3c:
c7:df:e3:0b:e2:c1:a6:1a:50:78:73:f7:18:71:a4:
d5:b4:ea:f6:68:23:0d:08:bd:8f:1d:90:ab:2b:26:
28:93:f7:7a:07:1c:a4:2c:cb:da:18:6a:ac:92:19:
bf:d5:87:47:bc:33:fc:b6:07:29:7a:7c:38:04:56:
a8:66:86:98:de:d4:d9:12:cf:a2:ea:a2:a6:46:ee:
ab:6b:9a:4c:44:ef:5a:d8:51:c3:80:86:ca:c2:79:
d3:9b:b1:2e:3a:ee:8b:f6:a4:2d:52:ff:10:b2:b8:
c3:73:e6:ef:0f:31:3e:72:3d:b9:c5:d8:7c:c3:98:
ea:b0:9b:8a:26:cc:5f:d7:dc:bb:9c:97:fc:07:b8:
ae:89:89:60:b8:30:85:4e:72:8d:c6:85:78:2a:cb:
95:18:02:0c:9d:dd:37:57:11:3a:69:58:d3:84:76:
21:e0:d7:d1:b7:37:48:3b:d0:b1:35:42:28:5b:e5:
69:a2:3b:b2:81:c3:6c:08:bc:ad:ea:9f:d0:4f:ac:
ba:a9:b9:6b:c7:63:43:10:ce:cf:40:7d:ff:3e:89:
e4:b3:86:9b:6e:a7:d0:44:4d:83:d0:7f:6f:24:9d:
0d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D8:A0:AC:71:71:5A:23:8D:AE:5C:82:13:45:32:38:ED:DE:C8:26
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144110.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5b4::/32
Signature Algorithm: sha256WithRSAEncryption
90:d8:15:6a:52:f3:50:0d:5d:78:14:00:de:4a:3b:b5:2f:ae:
10:4e:6f:00:b7:65:5c:55:e7:87:84:df:be:9d:03:df:62:15:
af:ff:b4:84:98:0c:e2:28:05:58:9d:92:cf:6d:37:b8:85:45:
f0:41:09:49:7d:49:16:7f:f9:94:37:e9:79:25:2b:2a:17:83:
6e:13:47:65:7a:2d:f2:92:20:79:28:c3:c2:83:3d:3c:3a:39:
36:1a:9a:35:ae:f1:3a:b8:32:a8:ca:84:3d:87:1f:40:d4:62:
41:3d:2c:ad:bf:39:a6:fb:66:59:df:7c:8f:6e:d0:52:41:0d:
aa:ca:07:1d:80:9b:c0:db:1f:a8:22:c9:20:1d:5c:3c:cf:08:
32:8c:6d:35:38:11:ab:19:57:20:1b:63:e6:b1:50:d6:2e:b8:
fa:02:a5:8f:43:20:39:a5:8b:0b:e8:70:be:3b:c4:c5:32:25:
81:4d:2e:80:32:51:e9:51:86:1a:55:43:7e:ad:05:aa:dc:b1:
c5:a4:66:bb:15:9e:6a:71:b6:bb:2e:d0:6e:b0:47:27:08:9b:
cf:3c:d7:22:7c:98:d2:65:cb:aa:59:5f:57:b6:f4:68:d5:65:
86:cd:24:77:2b:9a:cb:30:23:f2:53:9b:aa:ea:93:22:be:60:
79:38:30:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:07 2026 by rpki-client