Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144143.roa
File: AS144143.roa (raw, json)
Hash identifier: 3TI5aUVGi0JX+igvU0HAX0eah8kJNbj9ZY23sVpcwXc=
Subject key identifier: 75:70:6A:4E:6B:DC:D1:C8:BB:1B:E9:C8:47:EB:D2:F4:B1:23:A8:2A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 35DC639DBC20B12D91CD17B4F017E30800FC5C9E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144143.roa
Signing time: Fri 22 May 2026 07:32:23 +0000
ROA not before: Fri 22 May 2026 07:27:23 +0000
ROA not after: Fri 21 May 2027 07:32:23 +0000
asID: 144143
IP address blocks: 240a:a5d5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:dc:63:9d:bc:20:b1:2d:91:cd:17:b4:f0:17:e3:08:00:fc:5c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:23 2026 GMT
Not After : May 21 07:32:23 2027 GMT
Subject: CN=75706A4E6BDCD1C8BB1BE9C847EBD2F4B123A82A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ea:64:a5:c5:ab:db:a7:c4:0c:ed:7a:ca:d1:
b5:ee:4c:eb:52:0d:77:ab:85:2e:8d:14:3c:35:e4:
65:41:d0:05:22:8a:b8:16:9f:ce:1c:63:ed:b1:f9:
44:5f:0a:78:e0:93:cd:8d:ec:c3:f1:b7:c7:a7:ac:
12:a5:67:cc:a8:b8:52:af:21:a4:f1:2c:68:10:d6:
6a:6a:9a:c8:20:6c:dd:eb:ac:0b:99:dc:fe:b0:61:
7b:48:f3:e6:7f:73:50:e7:f2:40:27:a8:57:5b:b5:
7f:42:11:ca:49:dd:38:f3:85:20:ba:ab:b7:b2:b8:
09:14:9f:3a:c1:87:60:a4:f7:3b:e1:c4:a6:2d:89:
09:ae:ad:45:f4:f1:b9:d8:5a:b6:08:3a:19:74:d7:
1b:56:6d:1f:de:ec:75:58:ef:d3:43:ad:ba:d5:79:
be:e7:6e:44:48:65:d7:fd:d3:02:1e:c7:8f:10:cb:
3a:00:69:a4:ae:6c:ec:86:ed:ef:b1:ab:ac:12:71:
f3:82:de:94:d6:dc:6e:bb:76:46:12:b6:3b:f4:23:
be:36:c4:8c:5f:bb:10:3b:40:5c:3b:bd:91:66:43:
c2:f0:a3:83:8a:78:d3:74:51:fb:52:96:58:c9:9b:
f8:8e:c3:82:2b:35:f1:0d:c7:15:88:73:eb:4d:11:
f6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:70:6A:4E:6B:DC:D1:C8:BB:1B:E9:C8:47:EB:D2:F4:B1:23:A8:2A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144143.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5d5::/32
Signature Algorithm: sha256WithRSAEncryption
61:12:16:73:6f:1d:bd:44:7d:f9:e6:4f:cb:14:6f:d7:5f:95:
12:64:5e:66:83:08:0c:0c:83:c2:b8:d4:82:fd:cf:6e:aa:36:
47:6c:ec:c4:84:0c:9e:c4:96:47:e2:d2:c4:35:a9:5f:95:d0:
88:2d:88:81:b4:48:4c:77:ef:d1:39:82:65:19:84:8a:cd:41:
9f:9e:03:e0:a4:ee:5b:23:4d:0f:e4:bd:9f:03:54:20:f1:e6:
18:02:4c:7a:f4:c1:8b:4e:30:c5:d8:0f:cc:b8:67:c4:f6:90:
8b:b0:0b:96:16:b7:9e:68:f0:f3:fc:08:d0:cf:a3:21:ad:62:
2f:87:b7:54:02:88:23:41:16:fe:90:63:11:07:40:b9:53:47:
f8:bc:26:9e:63:81:d1:bc:ce:88:ad:ab:a7:6f:00:3f:5f:49:
ca:a6:65:75:f7:46:01:3e:ed:ea:fa:25:81:37:55:7c:83:70:
62:02:bf:cf:64:6b:e3:4d:03:73:d8:69:0e:e9:e7:c7:0e:43:
11:a2:ea:10:46:90:93:76:ef:ad:6e:eb:17:b0:d5:a4:46:b9:
d6:4f:d4:18:f7:ac:56:c1:6b:31:0c:6a:ca:c8:ea:d2:11:c9:
16:28:42:af:d0:37:5e:88:8e:84:5e:11:b1:50:3f:dd:c5:01:
ba:ab:3b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:06 2026 by rpki-client