Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144133.roa
File: AS144133.roa (raw, json)
Hash identifier: OryLRPiN4DLmwzza/cB9cC8YDJtDApQXgnIkj1VYHKk=
Subject key identifier: EF:14:BB:10:8B:44:15:1D:88:10:D9:10:BA:B8:B2:A6:96:3C:B8:10
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 724B7026EDE571F9A242DF97FA11DEB6922269C7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144133.roa
Signing time: Tue 26 May 2026 01:13:24 +0000
ROA not before: Tue 26 May 2026 01:08:24 +0000
ROA not after: Tue 25 May 2027 01:13:24 +0000
asID: 144133
IP address blocks: 240a:a5cb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:4b:70:26:ed:e5:71:f9:a2:42:df:97:fa:11:de:b6:92:22:69:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:24 2026 GMT
Not After : May 25 01:13:24 2027 GMT
Subject: CN=EF14BB108B44151D8810D910BAB8B2A6963CB810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:43:af:b4:9c:f2:8c:87:31:1b:59:3a:1f:4f:
71:d3:b2:fc:d0:e5:e5:26:71:57:77:62:e8:bd:69:
ea:d3:fd:9f:0c:ef:08:12:14:df:38:ff:8d:bb:ad:
14:67:95:a0:65:09:41:a1:e4:ab:6a:ac:19:d9:73:
43:67:8d:79:88:e8:43:86:6a:98:3a:29:31:b7:09:
11:7a:dc:23:5c:d0:8e:8c:94:ec:85:b4:5a:16:35:
03:d9:09:4a:53:90:2a:c8:50:a7:27:25:01:60:1c:
54:31:05:cd:7d:86:32:50:b5:c2:03:f9:84:d8:ed:
64:3e:3c:34:2b:6d:72:f9:ff:70:03:51:5b:59:3a:
58:b2:65:b0:c8:ee:17:76:a9:ac:8b:71:ea:55:b0:
58:36:77:f4:5a:fa:31:cf:f4:83:b1:bc:a9:36:ab:
94:c4:e5:f2:1e:ec:b3:ff:92:17:b4:57:3d:26:b1:
8c:37:2c:b1:d3:f0:a4:47:26:d8:3b:c2:42:53:cd:
e3:5f:12:63:20:ac:3e:8c:64:9d:90:cf:91:cc:de:
2c:c1:c5:63:08:1e:72:20:86:dc:b3:5c:a6:8e:94:
dd:4f:d5:39:74:18:c4:84:75:9d:25:0b:2f:e8:cb:
05:8f:51:66:ba:39:0b:31:44:e7:ad:ca:b8:43:10:
45:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:14:BB:10:8B:44:15:1D:88:10:D9:10:BA:B8:B2:A6:96:3C:B8:10
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5cb::/32
Signature Algorithm: sha256WithRSAEncryption
16:f7:bd:53:f0:84:e1:5a:8e:0a:b8:be:9f:39:57:30:6c:d2:
e8:41:02:ff:1d:49:bf:86:88:30:88:57:4c:67:82:30:18:73:
eb:b1:1a:f2:f1:42:33:87:01:36:79:fe:84:5b:7b:9a:7c:40:
84:30:64:31:9b:db:09:4f:63:e4:a5:8b:e4:6a:f3:db:7f:2d:
b4:b2:b1:66:52:73:1a:7a:8e:18:ae:9a:c6:02:6a:11:02:45:
2b:42:9b:f2:4e:85:cf:84:5d:e4:8d:a3:5d:8d:85:ea:3f:a0:
35:be:d6:2c:90:b6:41:40:d7:ff:9e:88:65:04:ed:ed:a2:2d:
97:8d:6f:fc:2d:ff:1a:4d:5d:86:b1:ec:f4:17:69:76:7e:3e:
8f:d7:d4:e3:66:11:ac:02:c5:92:06:03:15:b3:c2:56:2e:9e:
c1:04:f9:7f:57:99:be:9f:33:ff:97:33:80:d9:13:11:d9:dc:
98:6d:21:4d:66:17:64:aa:b1:6f:be:9c:e1:3c:b2:29:3d:6f:
c6:d1:6d:dd:34:6a:35:c3:cb:5f:a1:03:1b:b9:58:e6:c9:9e:
9f:fb:0e:60:5b:b7:f0:40:c6:13:79:a1:02:f1:15:3d:88:4b:
47:be:70:d4:cf:3e:ca:2b:19:1d:12:13:f2:66:e0:6c:6b:79:
95:ba:9e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:50 2026 by rpki-client