Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144149.roa
File: AS144149.roa (raw, json)
Hash identifier: 7hJTfzPimz0sd5VzMqYd7ePoq1TL7gD2EIKuLX9aGqs=
Subject key identifier: E2:EC:B9:9F:77:CC:37:D2:7F:B8:53:AA:87:EE:F7:3D:5A:08:9D:86
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 74CA04609C6EBE45E6F8AC6B22D0E8257B02A7F6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144149.roa
Signing time: Fri 22 May 2026 01:50:18 +0000
ROA not before: Fri 22 May 2026 01:45:18 +0000
ROA not after: Fri 21 May 2027 01:50:18 +0000
asID: 144149
IP address blocks: 240a:a5db::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ca:04:60:9c:6e:be:45:e6:f8:ac:6b:22:d0:e8:25:7b:02:a7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:18 2026 GMT
Not After : May 21 01:50:18 2027 GMT
Subject: CN=E2ECB99F77CC37D27FB853AA87EEF73D5A089D86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:91:a8:26:81:80:f0:b8:18:b1:4c:c4:37:88:
e6:6d:66:f6:1f:20:4e:81:32:be:42:c8:4e:ba:c3:
dc:79:12:7c:04:f5:9f:83:2f:6b:7e:82:92:2c:65:
7a:d4:60:21:94:07:0f:73:e3:70:57:e2:ad:d0:8f:
dc:08:1c:9f:ad:6a:96:03:a9:bf:96:c2:9d:51:dd:
2b:80:68:a5:a2:a9:f7:0b:8e:5b:92:ae:6a:24:57:
ce:90:c0:db:65:7e:29:f8:85:a6:2b:76:5f:93:5c:
3b:b3:ba:94:2e:19:94:72:8d:d8:1f:81:76:f1:7a:
db:d6:b1:8f:25:03:60:e5:ad:47:d9:07:2a:9c:6b:
91:24:d0:3d:57:99:78:84:d6:9e:01:48:d8:22:55:
33:b3:14:22:4a:49:88:c6:67:14:c4:b6:61:a7:ae:
0b:31:ce:c8:b4:47:7e:ee:3f:10:c6:2b:fb:1f:b3:
fe:4a:91:0b:03:9a:7f:72:1e:73:06:09:f3:83:0e:
ae:2e:4a:f7:6b:09:ae:e3:3b:3b:40:b8:ed:12:0f:
15:00:c5:34:05:5e:15:53:09:10:80:4f:0b:a9:12:
1c:bd:79:f2:09:f4:4a:fb:37:40:0b:20:da:7a:98:
f3:c3:6d:79:09:e9:a9:d5:16:17:31:45:e6:eb:77:
5e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EC:B9:9F:77:CC:37:D2:7F:B8:53:AA:87:EE:F7:3D:5A:08:9D:86
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144149.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5db::/32
Signature Algorithm: sha256WithRSAEncryption
34:7f:e4:96:47:3c:21:be:87:1b:ee:da:f5:b6:13:5c:6a:07:
90:96:79:fd:d4:22:05:79:a5:56:7a:90:10:83:64:80:cb:d7:
da:1d:45:19:d3:03:ae:a6:e2:18:68:01:b8:55:db:ef:b1:2e:
cf:fd:04:f0:06:70:73:a9:2d:c8:df:62:e0:8e:cc:3d:82:a8:
ae:55:5b:aa:89:d8:a6:18:f5:b1:f5:4b:13:cb:1e:d9:01:f6:
48:09:4e:b8:04:45:9c:73:1b:af:6b:7f:d9:3e:38:9b:ee:42:
f8:04:f4:0c:db:72:4b:9b:f2:31:ca:91:cd:93:58:ff:68:ab:
80:c2:ef:09:6c:e5:8e:37:51:0b:ad:fd:45:79:c3:99:db:ab:
af:30:4c:f6:b8:47:e0:05:3d:52:78:fc:11:53:2a:b5:10:83:
7e:d4:d7:0a:5d:a7:ea:69:d7:e0:95:db:05:07:06:8c:86:a5:
d9:33:e2:a7:69:5b:e2:45:f8:03:7e:76:2a:e5:9d:f9:80:09:
33:04:35:df:59:83:ff:5c:fa:0b:5f:e0:fd:90:54:62:90:c8:
49:39:0c:a9:47:d4:85:e4:74:e2:03:cd:65:1a:63:9f:19:01:
88:3f:bb:44:db:aa:95:49:7c:31:5a:3c:e2:f2:0a:1d:55:1f:
6c:cd:7b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:16 2026 by rpki-client