Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144113.roa
File: AS144113.roa (raw, json)
Hash identifier: sAZLXfSDPObI8WEKw/fp04V99dV/r9JeillXC+QuGc4=
Subject key identifier: 0E:57:6B:CF:E1:34:35:B6:DE:DE:5D:3D:81:21:45:68:32:B8:89:E9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 316A76471A96E46D9DEEF32BA25670B0C1CE32A5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144113.roa
Signing time: Mon 25 May 2026 01:20:34 +0000
ROA not before: Mon 25 May 2026 01:15:34 +0000
ROA not after: Mon 24 May 2027 01:20:34 +0000
asID: 144113
IP address blocks: 240a:a5b7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:6a:76:47:1a:96:e4:6d:9d:ee:f3:2b:a2:56:70:b0:c1:ce:32:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:34 2026 GMT
Not After : May 24 01:20:34 2027 GMT
Subject: CN=0E576BCFE13435B6DEDE5D3D8121456832B889E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:4c:56:22:b9:b5:59:1b:22:dc:8b:c9:53:
25:78:fd:5d:e3:5d:81:ed:34:8c:7e:08:cb:97:7c:
9f:d4:ba:75:b1:d9:c4:42:e1:87:22:cc:06:54:38:
f2:c8:3f:35:75:ef:f0:29:ca:c6:f5:09:2f:e1:b0:
b9:83:f1:d2:1b:86:78:b4:a3:93:a1:91:08:9e:6f:
e1:2d:0c:da:c7:68:34:fa:3a:b4:2e:1e:3e:58:13:
23:56:09:67:4c:43:7e:c7:99:1b:c9:50:91:11:fc:
ee:00:53:ce:8e:13:80:ae:57:32:90:2b:0f:b3:7d:
3d:e3:0e:5b:50:ce:e4:05:d1:5a:ab:21:5e:50:fc:
6d:db:32:57:6d:4b:61:ca:38:52:ae:40:a1:87:d0:
83:be:c6:ab:66:79:56:e9:29:a1:87:d5:ef:63:28:
7d:22:fc:df:aa:ce:9b:11:21:bd:83:28:15:bb:33:
51:68:ee:c9:99:b9:cc:ca:39:c0:91:dd:de:e9:89:
54:85:5b:7c:82:ff:43:a0:db:4f:71:5a:24:b1:ce:
f5:55:6a:9d:fa:86:92:d0:5d:c5:a7:7e:0c:a0:cb:
84:e5:e8:ff:2a:6c:00:86:e6:9e:e0:0b:73:a1:15:
ff:c9:4d:37:2f:d3:dd:c1:54:81:7d:ab:61:fb:f6:
32:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:57:6B:CF:E1:34:35:B6:DE:DE:5D:3D:81:21:45:68:32:B8:89:E9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144113.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5b7::/32
Signature Algorithm: sha256WithRSAEncryption
09:33:c4:3c:de:54:9e:a2:09:ab:af:e9:78:c2:0f:8a:22:5e:
1c:bf:92:75:a6:b0:df:09:52:14:88:8e:90:37:59:f0:b5:95:
0f:9d:bd:19:84:dc:94:c0:56:bc:4f:76:c0:01:c0:04:4e:dc:
73:7a:de:c4:d2:87:a9:bc:0c:56:94:cf:46:71:05:ad:58:71:
3c:14:90:53:5e:54:82:1d:e1:50:93:5e:32:4a:27:59:05:c3:
70:f3:81:51:ed:ca:cd:b4:77:b5:ad:b9:cf:fd:a3:2b:72:c4:
5d:68:0b:e8:68:87:f3:b8:aa:a7:9e:28:9d:a9:e1:a5:37:cf:
d8:4d:36:c0:29:33:f8:ae:79:a0:df:76:9f:2e:1b:a0:ec:83:
da:c5:1e:f9:59:5f:af:f7:ec:ab:fb:8b:8f:e3:5e:3f:6e:71:
cd:f2:88:f2:e2:db:de:cd:28:1e:50:76:8b:61:35:4f:9d:7d:
6f:6b:02:fe:9b:1e:47:24:ea:36:b3:9a:79:08:b6:ea:70:da:
a5:46:59:76:fe:1f:52:aa:d0:4d:05:f1:eb:f9:3b:bc:0a:37:
42:68:46:00:bd:95:38:a0:44:30:49:ea:e7:d7:ed:e6:2e:0f:
17:58:26:2f:2b:0b:93:66:05:22:b8:06:68:0a:5f:10:f8:13:
98:a8:2d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:55 2026 by rpki-client