Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144111.roa
File: AS144111.roa (raw, json)
Hash identifier: NG/bQHFhitnQ1zluk05zalGOraCxgdO7kDHYvbRh/5w=
Subject key identifier: CF:2C:F9:B0:16:46:65:0E:6A:41:29:07:C1:8D:8A:02:E9:99:1E:FD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 583F75DB68DD55310030A77A524C3FB09E55CBF6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144111.roa
Signing time: Mon 25 May 2026 01:51:08 +0000
ROA not before: Mon 25 May 2026 01:46:08 +0000
ROA not after: Mon 24 May 2027 01:51:08 +0000
asID: 144111
IP address blocks: 240a:a5b5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:3f:75:db:68:dd:55:31:00:30:a7:7a:52:4c:3f:b0:9e:55:cb:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:08 2026 GMT
Not After : May 24 01:51:08 2027 GMT
Subject: CN=CF2CF9B01646650E6A412907C18D8A02E9991EFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:52:31:ed:de:3a:1d:23:32:a7:f0:1a:65:ea:
cf:89:e3:40:83:57:5b:a4:18:ae:d5:1f:ad:60:34:
d5:a5:61:9d:06:4d:b1:e4:e2:54:af:d9:fe:83:44:
4c:1e:71:c0:57:d8:6f:03:fc:34:eb:2b:bd:d3:28:
77:60:de:98:40:8d:cb:a9:fe:d8:d8:8d:b9:ad:96:
4b:32:14:47:bf:d2:ac:51:48:45:3d:41:20:5e:13:
e9:08:1c:0f:86:c5:f7:53:a3:60:9f:e5:34:40:28:
c1:7a:45:57:cb:01:8d:30:c1:83:e4:1e:57:6b:6c:
3e:4d:b9:15:a6:ab:45:70:0a:0b:58:25:22:57:cc:
c8:02:46:26:12:87:00:82:4c:40:24:00:56:be:ff:
52:1b:be:6a:ce:15:31:05:2f:6a:35:de:f5:91:83:
a3:41:c7:42:26:fa:77:1e:e4:b9:01:f6:5c:0e:bb:
04:39:84:90:c3:59:68:f8:b5:bc:ab:11:ee:c6:b6:
8b:46:db:09:19:9f:01:10:39:bf:30:6e:b5:75:e5:
13:fe:e2:a0:4a:91:ff:22:9f:34:21:c5:88:ac:c9:
7c:57:9a:9d:12:9a:f2:de:2e:08:f3:c2:e9:0b:0e:
04:8a:99:d1:08:d8:c3:db:d6:55:2f:26:e8:64:fe:
57:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2C:F9:B0:16:46:65:0E:6A:41:29:07:C1:8D:8A:02:E9:99:1E:FD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144111.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5b5::/32
Signature Algorithm: sha256WithRSAEncryption
5f:80:af:5b:1f:de:48:4e:41:c3:5c:4b:28:79:fc:8f:09:a7:
ca:2c:4a:9f:4e:1b:38:68:cc:0f:fe:a4:4d:55:01:c3:d9:52:
d8:55:3a:3e:60:77:41:19:a0:e4:59:e5:50:17:7a:71:f8:9d:
5c:41:4a:7c:7e:54:b5:e6:35:da:6c:06:6d:ec:50:57:a4:a2:
ad:54:49:d3:54:5e:f5:53:52:38:3c:36:09:9d:4d:43:f5:98:
55:b0:b2:82:9d:ff:7d:78:d6:c0:d0:2e:f1:78:5e:4d:f6:22:
ca:0a:df:63:ea:af:f6:a9:6f:62:f6:32:97:71:18:cc:22:e6:
94:9a:24:04:c1:ec:d3:59:07:3b:7a:f4:f3:18:f5:8b:7b:e9:
bf:7d:00:1a:84:2d:43:dd:17:6a:ab:c9:54:14:a3:47:d2:25:
42:6a:a4:43:15:5e:5f:de:33:bd:c5:bb:87:09:19:7f:c4:5e:
04:10:62:08:06:73:1f:bd:f7:41:f2:e5:6d:cb:54:64:27:96:
23:77:fe:8d:f4:cc:df:de:6a:1e:a3:4c:ed:3d:8a:12:e9:ab:
60:14:66:5c:15:d1:49:a8:0b:71:35:8f:73:26:1e:a0:d7:15:
ae:12:d9:69:03:2b:f9:ad:d1:f1:cd:6c:76:e5:95:31:1b:15:
6d:54:74:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:35 2026 by rpki-client