Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144125.roa
File: AS144125.roa (raw, json)
Hash identifier: QJzl3aHl/b8BPjCvLr8mujHI0UqP5aHCmt4jvujQoW0=
Subject key identifier: 42:C1:23:75:A6:6D:A2:5D:D7:0E:C1:98:13:27:81:CB:2C:F5:6F:C1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2C9913B3D3A91A14154379B35FD2AE1A6A42A405
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144125.roa
Signing time: Tue 26 May 2026 08:52:53 +0000
ROA not before: Tue 26 May 2026 08:47:53 +0000
ROA not after: Tue 25 May 2027 08:52:53 +0000
asID: 144125
IP address blocks: 240a:a5c3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:99:13:b3:d3:a9:1a:14:15:43:79:b3:5f:d2:ae:1a:6a:42:a4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:53 2026 GMT
Not After : May 25 08:52:53 2027 GMT
Subject: CN=42C12375A66DA25DD70EC198132781CB2CF56FC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:24:d5:d9:4c:a4:0a:69:0c:6b:ba:ae:2a:
c3:40:ba:45:6e:dd:d6:32:c7:3a:77:7c:cd:29:77:
d4:18:6c:21:a2:d1:53:64:1c:20:da:b3:56:27:ac:
2d:24:ab:8e:02:05:9e:72:85:55:51:5e:3d:c4:bd:
79:e4:34:b0:8b:d6:dd:a5:04:55:ab:08:24:2c:f2:
b3:b4:0d:75:b4:3b:38:37:6a:e1:53:23:28:82:ef:
07:a4:09:d8:b8:fa:5b:b4:b3:76:54:f5:0e:76:8e:
f6:9b:76:37:2f:08:4e:ae:04:28:4c:ba:45:40:d4:
42:60:c2:33:15:6b:cc:2f:3d:ba:4d:07:90:91:81:
7d:65:c8:a6:09:0a:12:39:3f:a5:0a:26:0b:c7:35:
5a:49:87:42:02:35:5d:d6:fb:f6:a2:42:ee:75:1d:
b9:c4:77:90:51:5a:ff:32:61:29:e9:84:e5:47:59:
d8:6b:47:95:b2:32:d5:bd:fd:fb:c0:5e:77:e9:73:
58:66:22:a7:f9:66:f0:23:75:31:f7:fb:90:e3:d5:
a4:e9:36:91:93:e8:7d:49:c2:93:4a:4b:da:97:4c:
3b:f7:ed:34:d9:8f:5a:7d:53:0d:ef:69:19:ed:9d:
ae:a6:5a:b2:6f:bf:73:b3:c3:93:60:b4:a7:87:d5:
bf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C1:23:75:A6:6D:A2:5D:D7:0E:C1:98:13:27:81:CB:2C:F5:6F:C1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144125.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5c3::/32
Signature Algorithm: sha256WithRSAEncryption
ba:01:b2:5e:43:8d:8f:71:fa:f9:9a:16:d6:08:d7:77:a8:32:
3e:57:cf:85:54:f5:67:97:93:f5:0c:45:f4:79:b5:b1:0f:0f:
c3:b7:86:6c:1f:43:77:5e:73:47:61:9e:33:b4:33:47:6e:5b:
62:34:a0:d4:31:89:05:e3:48:6c:aa:13:a7:5a:20:40:b3:9f:
59:25:9f:19:77:41:59:e3:f4:04:a3:63:8d:90:42:9f:0f:6a:
6c:1e:e7:0c:db:c3:78:91:81:56:94:31:e0:22:5c:45:c5:61:
18:c3:8f:65:ac:0b:30:84:ce:27:c2:f4:86:1c:40:18:ad:e6:
6f:0e:e1:ee:7e:57:0a:d9:e4:d9:cd:e2:12:d0:e0:7a:71:99:
a0:d3:b2:ae:4c:b8:94:55:1a:28:17:f3:90:29:b9:2f:02:12:
da:d2:26:b8:f0:f1:44:0a:4c:58:c9:6e:87:90:ae:bf:8d:cf:
ae:da:f7:4b:9d:7c:d6:9a:57:b7:ab:01:20:80:9c:86:67:73:
35:06:95:6c:56:e1:24:4d:85:fc:de:9b:79:bc:24:89:13:78:
d8:b9:63:21:bb:f7:c5:3b:bf:80:a5:2b:a3:bf:9b:f4:d4:0b:
6f:68:5d:cb:bd:8a:ea:1c:05:e6:8a:aa:c4:8c:6d:8f:bc:1b:
af:9f:16:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:25 2026 by rpki-client