Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144116.roa
File: AS144116.roa (raw, json)
Hash identifier: lKpQBZMWa0GZ+gNG+5eFvpDdoQf9qTIz/Y3mxX/oumw=
Subject key identifier: 1E:1D:CD:6B:A7:D3:26:9C:83:80:EE:45:E0:E2:40:24:9E:81:5F:96
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5C24DD7C38C10885D095A97866A3881E9F90444B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144116.roa
Signing time: Mon 25 May 2026 06:49:06 +0000
ROA not before: Mon 25 May 2026 06:44:06 +0000
ROA not after: Mon 24 May 2027 06:49:06 +0000
asID: 144116
IP address blocks: 240a:a5ba::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:24:dd:7c:38:c1:08:85:d0:95:a9:78:66:a3:88:1e:9f:90:44:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:06 2026 GMT
Not After : May 24 06:49:06 2027 GMT
Subject: CN=1E1DCD6BA7D3269C8380EE45E0E240249E815F96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a6:6d:a4:44:b0:ce:08:75:53:2e:cf:ec:21:
92:c0:30:2b:d2:c4:a1:3b:0e:85:50:e3:04:4d:01:
28:70:18:fd:a5:aa:31:d7:54:ff:7d:d1:8f:ff:5f:
22:74:18:03:76:ca:83:da:4a:52:70:ef:d3:79:05:
e8:36:01:4c:12:04:54:0d:01:af:08:28:4c:92:ac:
91:80:89:3e:00:1b:7d:09:22:99:4e:ad:fd:31:a3:
48:59:b9:ba:12:c2:dc:f6:c0:94:a7:7b:19:65:a3:
d0:78:db:eb:d3:88:cb:13:c7:6b:cc:12:c9:5d:ab:
2c:c3:68:79:06:f8:80:3d:f2:cb:b5:86:5a:c0:33:
0f:98:d9:61:8a:96:c4:64:0a:ac:1b:82:d4:ad:90:
d4:b8:d9:b2:3c:42:ba:cd:96:94:38:95:91:9e:95:
44:c8:01:c4:f6:eb:0d:c7:3f:0d:8a:07:f2:70:94:
a7:f4:87:ac:48:ff:0f:d0:25:a3:a9:df:4b:9d:b3:
ea:ea:fa:35:bc:b5:dc:d7:57:27:65:15:e9:91:4a:
df:41:32:a0:f8:af:6b:d9:b7:a1:9f:54:ed:11:2e:
ab:7f:6d:b2:a6:5f:f7:69:82:e2:d1:af:47:23:a7:
38:79:08:47:34:ac:b5:fa:f5:72:20:a6:c8:a0:62:
a0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1D:CD:6B:A7:D3:26:9C:83:80:EE:45:E0:E2:40:24:9E:81:5F:96
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144116.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5ba::/32
Signature Algorithm: sha256WithRSAEncryption
5d:c0:43:e3:b6:d2:ec:da:21:9e:96:65:a2:75:ab:bb:a3:74:
c0:89:22:7a:13:9f:aa:bc:b6:83:0a:ce:3e:ef:95:fd:bf:5a:
ef:41:02:b0:f2:f3:69:30:d8:09:47:12:76:8b:4a:46:f5:fd:
bb:b7:54:b9:b1:34:4f:3f:26:37:fa:5c:e8:3e:69:db:49:ac:
d8:fc:f4:e6:d7:75:d2:44:fd:e4:ad:ff:64:e1:6f:f3:bc:b3:
71:99:50:2f:3e:c2:ac:8b:f9:d5:d3:39:b3:e8:80:00:1c:22:
a2:3a:41:97:8c:46:f5:2a:d0:1d:10:50:66:fa:57:dc:80:4d:
5e:5e:7e:c1:d3:b9:c2:7a:30:27:7e:d4:21:39:ea:90:ee:fc:
b3:83:55:14:ce:ac:dd:d4:ff:fe:e8:17:32:fa:bf:78:fe:04:
b9:0e:cc:2d:2f:2d:6f:f9:54:3c:c9:9a:58:d9:5b:01:d2:5c:
43:c6:de:37:d2:f5:cc:ad:1b:c9:56:96:83:40:04:5a:06:1e:
69:12:da:da:10:c2:58:45:b0:2a:1e:ae:f6:d4:6b:ea:55:ae:
80:a2:42:53:b8:26:3a:55:ac:77:8f:5f:6e:0d:72:e2:16:c1:
42:4b:9c:35:00:45:f5:25:47:c4:da:28:cb:fa:8d:6c:18:18:
a9:08:2d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:15 2026 by rpki-client