Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144135.roa
File: AS144135.roa (raw, json)
Hash identifier: LJDSx8h8uQDnJ1zq6fM8Ys4kINO2mv08ymKTQaATdRY=
Subject key identifier: CF:9B:71:C5:3E:CB:A8:E3:BE:61:60:2A:97:D8:C5:7E:E6:2E:70:AC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 70BD093A90C3E66CBCBD189CA87B51593F497070
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144135.roa
Signing time: Mon 25 May 2026 06:48:52 +0000
ROA not before: Mon 25 May 2026 06:43:52 +0000
ROA not after: Mon 24 May 2027 06:48:52 +0000
asID: 144135
IP address blocks: 240a:a5cd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:bd:09:3a:90:c3:e6:6c:bc:bd:18:9c:a8:7b:51:59:3f:49:70:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:52 2026 GMT
Not After : May 24 06:48:52 2027 GMT
Subject: CN=CF9B71C53ECBA8E3BE61602A97D8C57EE62E70AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e8:a4:51:06:45:78:b0:7f:3c:ae:48:13:56:
68:95:35:4d:9b:15:31:fb:5b:09:1c:7d:f4:2b:59:
42:2c:bf:ac:d2:7f:bb:40:39:d8:77:20:da:24:a0:
8f:56:f6:30:d9:75:96:6b:85:d6:3e:f6:3a:9e:87:
cd:e9:42:7c:a6:e1:b0:59:e2:37:e9:8b:a8:d0:f2:
4c:49:bf:3a:5f:9e:11:3f:a9:07:bb:03:2c:54:f7:
24:4b:a2:36:83:23:1a:85:15:43:16:51:e5:97:7f:
fb:4e:ac:95:dd:52:cc:e5:60:f8:81:bb:c1:86:53:
67:06:31:02:d4:89:d5:5d:c3:7a:22:b2:d4:0f:b1:
e1:a4:92:69:bb:46:71:71:f6:ab:4d:28:4c:fe:06:
ef:1e:5a:77:3c:3a:ce:29:b2:38:43:96:d0:a2:b3:
19:92:b9:46:c6:88:9a:b6:d5:87:45:a5:d2:28:30:
e0:10:70:78:23:7a:16:e2:09:fa:9b:c8:23:a8:4b:
40:f4:18:ab:e3:c3:7a:59:a7:71:9a:de:a1:3c:3f:
e0:d5:ee:14:81:0c:51:dc:a7:4e:83:3a:7b:22:c2:
ec:f0:7e:e5:a7:49:32:44:8e:ce:7f:e3:ca:3f:3d:
65:18:c5:8e:cd:69:f7:69:92:1e:e8:c8:41:60:0e:
12:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9B:71:C5:3E:CB:A8:E3:BE:61:60:2A:97:D8:C5:7E:E6:2E:70:AC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5cd::/32
Signature Algorithm: sha256WithRSAEncryption
34:32:f0:61:ea:ef:ee:e1:7e:f3:a3:bb:00:03:6f:7f:83:a2:
8e:81:f0:d3:07:8c:41:fa:a5:20:31:24:71:42:cb:51:f5:c8:
9a:1d:4e:0a:ef:4c:e9:1c:1a:23:ef:5f:5e:f6:fa:76:d2:a2:
cd:6f:f3:71:5e:75:49:a8:3c:2f:be:5a:18:7f:6e:2f:b1:9c:
71:91:a9:ec:bc:47:5e:ce:91:e1:4d:c3:a3:52:43:eb:fc:0d:
cf:d3:00:71:e3:99:b9:ac:04:bf:9d:94:af:52:23:d6:e4:58:
f2:6b:af:3d:d1:4a:2e:88:a9:42:7a:d5:71:f7:04:ed:65:5c:
d1:b4:8c:29:79:1a:cd:a3:93:eb:a4:b7:6f:5c:12:aa:d2:f1:
2e:7f:2f:93:d7:14:14:c3:35:41:d9:96:1d:50:f0:5b:6b:eb:
f7:e4:f1:d7:08:f9:ce:42:4c:57:31:29:5b:3b:95:9e:e5:65:
46:cb:c0:4a:84:a7:13:57:5d:b5:84:2b:c0:a2:3d:53:22:25:
d0:4d:29:7f:30:f5:b0:80:9d:5c:49:df:d9:97:b4:39:60:a3:
3d:f9:30:99:96:cf:c5:66:00:77:cf:58:ff:37:30:a5:13:0f:
ae:19:42:8d:9f:33:ee:8b:9c:c8:39:9c:05:33:64:4a:2c:0e:
35:19:30:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:08 2026 by rpki-client