Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144134.roa
File: AS144134.roa (raw, json)
Hash identifier: 3eAe7yBpiTSUIrQhhHg3w4qwTAodVZEsstRD05H9l5o=
Subject key identifier: F2:86:C6:01:40:17:0B:A8:98:F7:32:FC:12:DB:F4:2B:3C:F0:B2:03
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6DDDEE0E44175C39EC02F1EF728585BB609B9338
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144134.roa
Signing time: Tue 26 May 2026 06:30:42 +0000
ROA not before: Tue 26 May 2026 06:25:42 +0000
ROA not after: Tue 25 May 2027 06:30:42 +0000
asID: 144134
IP address blocks: 240a:a5cc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:dd:ee:0e:44:17:5c:39:ec:02:f1:ef:72:85:85:bb:60:9b:93:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:42 2026 GMT
Not After : May 25 06:30:42 2027 GMT
Subject: CN=F286C60140170BA898F732FC12DBF42B3CF0B203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f6:a8:25:31:49:42:51:ae:42:e2:14:38:8b:
64:2c:91:3e:e8:a3:ff:8d:8d:dc:9e:a2:8b:2b:94:
8f:75:4f:b9:5a:c5:ef:f1:2c:e2:92:f9:53:44:be:
60:65:4b:e2:dc:aa:ed:25:ad:d7:06:ac:48:66:ee:
df:d8:76:93:25:27:32:62:fe:7b:a9:cc:5e:2c:13:
69:20:c2:0c:75:d8:9d:80:31:06:a2:57:de:7b:8e:
d4:ad:ff:42:50:4e:fa:a8:ac:9c:bd:5a:27:07:a0:
7d:04:cd:4a:10:1b:c6:b8:30:b1:7d:b4:48:36:74:
7d:20:c2:c8:85:16:25:6f:d2:b1:9f:82:34:cf:da:
da:04:43:cf:b9:c8:81:18:22:66:b2:39:15:f8:4d:
42:e4:d0:10:14:4e:aa:81:73:fb:ff:52:94:4e:72:
c6:2b:0b:ef:e7:3e:ef:cc:05:0f:b7:0c:59:05:2a:
77:4c:ce:9a:ae:83:83:6c:ca:3e:a6:0b:e8:99:97:
05:ca:b1:e6:96:4e:6e:5e:89:8a:e1:e2:66:c7:e3:
e1:b8:7c:7c:0a:e6:4a:61:5a:4d:9f:d8:d9:dd:c7:
af:df:e4:e2:5f:3f:42:c4:ab:ac:b9:7f:94:d7:1d:
50:eb:1d:19:b5:6b:b3:a9:f3:5a:cd:84:d2:d5:5c:
9a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:86:C6:01:40:17:0B:A8:98:F7:32:FC:12:DB:F4:2B:3C:F0:B2:03
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5cc::/32
Signature Algorithm: sha256WithRSAEncryption
76:fe:a5:d4:c1:c8:ab:be:e6:7f:0d:47:44:db:96:e7:97:2c:
97:96:81:9c:da:cb:7b:5f:3b:72:1f:58:d8:70:9c:98:63:3c:
f1:5b:d7:ec:85:7e:7c:98:a4:06:f7:2a:e3:48:d9:b1:29:a5:
de:ce:b7:67:45:97:ad:50:1f:3c:72:4e:8d:4f:ab:43:f1:0c:
00:49:2d:27:e2:05:3a:49:77:cc:12:28:58:f5:55:21:44:f6:
e4:b9:58:6d:61:b5:a2:7f:29:7f:75:2a:32:09:14:ad:d2:29:
8f:0b:95:05:64:a2:22:dd:42:19:21:f9:ec:a0:f9:bb:0c:7e:
5d:d7:88:ef:ba:01:75:87:32:4e:e4:fa:5b:3b:2b:d1:3f:8c:
b6:4f:53:ab:c6:e8:c6:e8:65:df:40:03:0b:8f:93:b3:39:92:
3b:24:9d:4a:0c:df:57:b5:47:ef:50:73:61:43:38:29:6a:e4:
3d:39:03:59:17:94:b4:a0:3a:01:66:3e:3d:7e:5e:7c:2f:03:
74:2f:8c:e2:40:48:fa:47:94:d3:cc:56:b7:cd:65:d5:69:1f:
ae:0e:6a:e9:7d:e7:0c:bd:e5:56:60:d2:16:28:63:6d:9d:3e:
49:4e:38:2a:0c:06:03:e6:4e:c5:79:68:6e:b9:ac:7e:89:be:
8d:da:2e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:30 2026 by rpki-client