Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144120.roa
File: AS144120.roa (raw, json)
Hash identifier: TN20ebewq52X9zIVBDy+dzOIF/xgLn9Fx8LyUPzrTl4=
Subject key identifier: D8:65:50:68:57:14:CC:CC:2E:BC:EA:E0:7E:4E:EA:ED:0F:D2:37:24
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 46E4125E8EF435091D977B801967625D13E177DB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144120.roa
Signing time: Mon 25 May 2026 01:51:23 +0000
ROA not before: Mon 25 May 2026 01:46:23 +0000
ROA not after: Mon 24 May 2027 01:51:23 +0000
asID: 144120
IP address blocks: 240a:a5be::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:e4:12:5e:8e:f4:35:09:1d:97:7b:80:19:67:62:5d:13:e1:77:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:23 2026 GMT
Not After : May 24 01:51:23 2027 GMT
Subject: CN=D86550685714CCCC2EBCEAE07E4EEAED0FD23724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:14:f0:68:ca:97:56:6f:4e:38:ef:51:a5:c4:
0b:3d:a7:2d:7f:f3:d0:9e:1b:15:61:40:d4:0d:1b:
7b:41:a3:4f:15:bb:84:ff:7e:8f:b2:96:e4:1f:7e:
0b:b4:fc:6d:99:83:b4:69:92:d9:91:84:41:fb:3c:
43:6e:0f:8d:d7:0f:c8:47:dc:62:f8:51:cc:5b:51:
ce:ab:c8:d3:96:30:5b:e1:75:82:4b:76:57:0e:05:
bc:56:2e:cc:da:16:24:1b:20:3e:b7:fc:e3:07:f5:
83:eb:0e:c7:54:7c:9b:94:09:eb:47:77:e3:11:c3:
5e:20:63:fc:cb:89:f2:f4:6b:41:00:a2:3c:61:e9:
cb:55:2a:3d:06:8e:17:70:b6:9c:b2:15:e0:8f:5a:
0d:ab:9a:61:44:a9:a0:f5:0a:cc:88:02:f4:c3:39:
5c:f5:d9:1d:b6:55:34:2c:ae:14:87:11:80:af:75:
aa:e4:e0:25:78:f8:d5:47:61:be:f2:e1:28:1a:10:
81:4e:7a:f1:bc:fa:16:ed:24:44:82:bf:43:f8:94:
d5:19:a9:42:7d:75:15:ec:a2:df:e0:b4:54:4b:02:
f2:87:b7:45:44:41:c0:09:2c:d6:8b:9c:13:71:39:
3d:30:eb:36:04:2a:4f:cd:12:27:ad:9f:08:e3:8a:
26:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:65:50:68:57:14:CC:CC:2E:BC:EA:E0:7E:4E:EA:ED:0F:D2:37:24
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144120.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5be::/32
Signature Algorithm: sha256WithRSAEncryption
03:79:38:b7:db:27:59:eb:e6:07:70:50:0c:df:a6:a3:ef:bb:
23:4e:af:a0:ca:45:48:99:f9:6d:c1:b4:26:bc:1d:6a:e5:d6:
7d:f4:53:6b:64:c9:df:e9:08:f5:8d:b2:45:fa:5b:29:c0:58:
0d:17:39:31:b7:c2:e3:5d:dd:6d:13:75:32:89:cc:e5:3e:9b:
0a:8d:ae:ac:00:e3:fd:8e:85:7e:63:7a:01:ac:c6:06:72:82:
53:c0:8c:58:3e:e3:63:50:86:60:28:79:d8:6d:f8:07:5f:3c:
be:38:54:b7:be:d2:86:44:d9:d1:c7:a8:ab:4d:27:3c:4f:92:
c2:18:0f:91:9c:f7:19:d6:bf:e7:21:13:28:91:04:97:59:e2:
d5:00:e2:c9:14:db:3d:77:05:f9:88:0b:c3:7b:72:a7:87:70:
ef:15:00:b9:18:91:11:21:7b:6f:e3:1c:bf:bf:55:72:62:45:
b0:62:a9:45:ee:f5:d6:58:c7:36:75:2f:8b:03:47:53:23:8b:
86:12:45:a0:cb:3c:dc:b2:5e:2a:65:ed:60:d7:84:a2:e6:18:
64:af:ad:c0:80:77:4e:66:1d:9c:96:31:50:b3:8b:90:e3:e7:
d4:95:69:8b:b0:c9:e6:64:1c:79:27:51:ce:2d:c1:ce:f9:4d:
9b:69:45:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:33 2026 by rpki-client