Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144157.roa
File: AS144157.roa (raw, json)
Hash identifier: e69cB5lKiwh3SZtNJuYz020SEKEfFQBnnCJ0A4xqBTo=
Subject key identifier: 33:C3:FC:5E:C0:FF:F3:25:53:5A:AB:A1:EA:EC:C0:62:C9:07:4B:4A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4A9494AD4F3F0A434728EB0F6F2D672A7B1FD3FB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144157.roa
Signing time: Mon 25 May 2026 01:20:04 +0000
ROA not before: Mon 25 May 2026 01:15:04 +0000
ROA not after: Mon 24 May 2027 01:20:04 +0000
asID: 144157
IP address blocks: 240a:a5e3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:94:94:ad:4f:3f:0a:43:47:28:eb:0f:6f:2d:67:2a:7b:1f:d3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:04 2026 GMT
Not After : May 24 01:20:04 2027 GMT
Subject: CN=33C3FC5EC0FFF325535AABA1EAECC062C9074B4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:04:53:c3:89:4f:8c:0a:3a:da:cd:b9:ff:e0:
39:05:51:c7:21:0a:2e:9f:3d:b8:52:0d:3b:7d:93:
31:2a:68:65:3a:c8:b5:52:1a:f8:cb:36:56:bc:af:
19:6f:d9:ad:be:85:b7:af:ba:97:9e:04:19:2e:31:
57:f4:b5:ac:82:71:51:c8:e5:23:95:26:44:21:8b:
fa:8a:57:40:ea:74:35:4d:ac:80:c2:59:83:bc:e4:
57:f5:34:0a:e1:78:1a:ca:ce:e2:34:a0:15:b5:ad:
f1:ae:2b:e3:20:ae:37:62:40:89:f7:44:58:75:f6:
ee:82:5d:47:99:77:ea:75:d6:76:5a:48:9e:e1:59:
c6:63:78:2a:87:93:b9:91:25:31:ee:42:47:d5:82:
0a:f8:3c:05:bb:99:64:5a:79:33:25:0f:32:f2:b5:
6d:84:8e:fd:c4:e9:0c:46:db:c4:36:81:74:75:fb:
74:98:2c:c0:ff:36:eb:8e:0f:92:b3:b9:5f:b9:45:
60:0f:f7:e3:72:78:e9:99:40:12:10:ad:39:18:0a:
08:d3:63:62:3e:9c:76:93:c3:2f:c5:aa:7a:cd:15:
44:a0:18:e3:54:70:f7:a9:eb:e2:dd:d2:a6:8d:f6:
fc:57:8e:65:c3:25:2e:87:42:32:be:96:e6:d3:a1:
73:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C3:FC:5E:C0:FF:F3:25:53:5A:AB:A1:EA:EC:C0:62:C9:07:4B:4A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144157.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5e3::/32
Signature Algorithm: sha256WithRSAEncryption
4c:12:5e:f4:f7:9b:fe:58:34:3f:1c:58:8d:ab:9d:1d:2e:13:
32:c4:da:1b:27:9c:e1:40:66:b6:1d:89:94:2e:91:e2:00:18:
57:24:b8:42:0d:cb:5b:12:61:8a:dd:57:f6:7a:b5:42:25:e5:
ee:f2:31:6c:a1:68:2d:6d:cb:e1:eb:9c:61:50:d8:cc:9b:c7:
a2:4d:b6:55:10:9e:4e:28:07:f8:41:3d:2a:d6:a8:95:7e:c7:
74:2b:19:40:8b:2e:4d:e7:90:f5:32:f9:86:56:80:bd:4c:d7:
76:4f:56:a6:01:fe:5a:f1:39:5c:01:dc:18:df:04:5c:18:3d:
19:bd:24:6b:d0:22:ee:c0:58:cd:b7:22:58:c1:c2:2f:d5:07:
7f:64:7f:27:6e:78:ec:4e:db:90:09:37:e6:f7:55:e1:2d:d8:
29:b9:48:35:c2:3b:d3:1d:db:a3:13:cc:28:f7:dc:19:17:32:
d3:b3:24:d6:15:5f:16:17:23:4b:1a:4a:da:c1:f5:32:18:25:
6f:83:3c:6a:92:b8:9d:44:f4:02:66:b0:4f:eb:70:d2:15:06:
e8:62:1a:14:e9:9a:dd:55:19:95:0b:c4:c0:b4:97:53:c8:01:
5b:17:ad:a1:43:90:41:7d:ae:7b:51:2f:f1:9d:0f:09:f0:0f:
df:d1:e7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:10 2026 by rpki-client