Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144138.roa
File: AS144138.roa (raw, json)
Hash identifier: hWXsOAUdTpQc+Ncn0VtnzF0U07SpZV1VVTnmpx1KzrY=
Subject key identifier: 40:67:D5:7F:90:E5:10:BD:FC:2E:8F:23:DD:B0:BB:A2:8B:7C:A2:F7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 215167093A765708862C7E154608A5FA69B0AC75
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144138.roa
Signing time: Mon 25 May 2026 01:20:18 +0000
ROA not before: Mon 25 May 2026 01:15:18 +0000
ROA not after: Mon 24 May 2027 01:20:18 +0000
asID: 144138
IP address blocks: 240a:a5d0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:51:67:09:3a:76:57:08:86:2c:7e:15:46:08:a5:fa:69:b0:ac:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:18 2026 GMT
Not After : May 24 01:20:18 2027 GMT
Subject: CN=4067D57F90E510BDFC2E8F23DDB0BBA28B7CA2F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:50:03:d5:a5:9c:62:ce:a2:ed:92:c9:89:c8:
ed:58:a9:a7:70:b4:17:b9:32:a4:de:f1:93:36:fc:
f7:f2:8c:c8:39:8a:b0:82:4f:80:d9:62:98:40:48:
91:ae:5d:cb:7f:49:70:06:a3:80:c1:fe:f5:47:21:
97:78:19:f3:f1:30:8b:c7:9a:b6:74:23:f7:01:cc:
7a:ee:b9:06:7b:9a:c5:9d:17:52:46:f1:1a:41:03:
58:7d:e8:d4:74:ae:03:b8:64:15:c7:d9:0b:74:0d:
c1:d8:3b:9c:be:97:f6:e3:a6:05:52:62:9f:83:f9:
93:26:6b:07:69:22:01:e4:08:97:54:6b:14:a0:78:
eb:b0:c6:d2:84:c3:c3:7e:93:a3:d1:01:b9:8a:93:
26:03:5a:cb:7d:56:57:1f:bd:5d:b8:45:f0:de:40:
11:11:69:23:ff:d6:37:a4:a6:18:ad:f2:b3:5e:24:
d4:34:3c:6d:12:07:62:fc:87:a9:ee:36:fe:e6:17:
bd:04:7d:53:2f:dc:63:3e:9b:d1:fb:30:04:12:e3:
0f:a5:93:fc:33:9e:e5:a2:a8:80:c3:de:41:89:65:
b8:84:91:02:ad:b5:07:90:17:68:3f:17:dc:db:45:
a1:df:ac:ec:c8:bc:62:01:57:81:d1:0d:2d:22:27:
99:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:67:D5:7F:90:E5:10:BD:FC:2E:8F:23:DD:B0:BB:A2:8B:7C:A2:F7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5d0::/32
Signature Algorithm: sha256WithRSAEncryption
2e:74:f9:d5:e8:26:9a:3a:e2:84:2a:79:26:83:98:2e:c0:5e:
7c:35:be:26:83:ed:c5:93:e1:44:cd:a2:11:8e:b6:05:16:95:
6e:7f:33:b5:d0:b9:83:2f:bc:58:74:95:56:5c:15:ff:eb:ad:
86:d5:5b:c4:51:7b:3c:42:9c:b5:e3:ed:e0:9b:84:ed:8d:95:
e3:14:03:6d:87:4d:e7:37:8c:ce:dc:16:93:f6:13:74:7e:34:
cf:c4:e1:2d:98:b1:43:41:a3:63:39:2e:7e:30:74:e8:ac:32:
32:39:f8:bc:a0:4a:d0:6f:eb:f5:f0:74:ae:9c:25:80:70:b3:
95:bd:6f:bc:7e:67:5a:a5:b0:78:6f:af:0a:b5:99:4a:04:77:
86:39:8a:64:a3:48:60:20:ce:a1:ca:f7:c0:59:60:bd:e5:aa:
31:57:5f:3f:13:a6:b8:54:83:be:9d:da:09:14:18:6f:76:53:
3b:82:fc:76:94:59:2a:09:02:41:9b:3d:66:72:73:e6:af:21:
f7:5b:1f:6d:50:5f:e0:d0:7a:b5:30:9d:74:9f:22:11:2b:3c:
d5:35:87:1a:94:b1:22:95:e7:77:47:f0:80:42:75:16:26:27:
8f:f4:47:cc:7f:fd:84:ce:ed:b7:42:61:06:8c:47:39:d5:ee:
e3:6f:25:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:28 2026 by rpki-client