Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144182.roa
File: AS144182.roa (raw, json)
Hash identifier: MesxDasBi1XyIyWp1V1kEUUagic+UGOs0RzHPQcloc4=
Subject key identifier: E2:2C:12:A1:7E:F7:98:ED:24:D2:C7:0A:7B:58:4C:93:81:A2:A7:48
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5158D048D7DF17531EB86045F90F122D9C9189D3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144182.roa
Signing time: Tue 26 May 2026 06:12:30 +0000
ROA not before: Tue 26 May 2026 06:07:30 +0000
ROA not after: Tue 25 May 2027 06:12:30 +0000
asID: 144182
IP address blocks: 240a:a5fc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:58:d0:48:d7:df:17:53:1e:b8:60:45:f9:0f:12:2d:9c:91:89:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:30 2026 GMT
Not After : May 25 06:12:30 2027 GMT
Subject: CN=E22C12A17EF798ED24D2C70A7B584C9381A2A748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:a7:8a:cb:59:94:58:78:9a:34:b5:cd:73:
f7:05:04:02:47:5f:32:dc:68:47:ed:b9:7a:a6:21:
54:c7:d2:91:46:48:3a:4f:96:d6:0f:d8:09:2d:8f:
f0:cd:63:90:1d:ab:50:ec:a6:e9:19:b7:5a:d8:a5:
68:99:55:78:3f:e6:93:a6:74:d5:24:40:55:da:e1:
b9:5c:ab:65:81:c1:bb:97:fe:79:62:13:16:75:58:
99:81:eb:db:05:ed:b5:99:dc:20:0b:b5:59:3d:15:
84:25:40:a1:b4:ab:01:7a:66:58:8b:26:1f:7b:85:
ef:33:73:a1:a7:23:01:21:50:7a:17:fa:71:f8:83:
0b:51:e5:ae:83:0b:bf:25:f5:94:c0:9e:2f:d4:e2:
a3:38:81:71:5e:3e:0e:1c:8a:4c:f7:49:8e:b9:cd:
d2:55:12:ed:d2:a7:24:6c:64:d0:7f:10:16:0c:34:
cb:d6:46:ce:35:67:e3:2e:8a:59:02:fa:1a:e4:ac:
6d:65:2c:8a:ed:30:9c:61:3d:01:f0:6f:2c:d6:dc:
87:14:d1:06:fe:e3:a6:66:79:e1:fb:61:17:01:c5:
64:d5:85:0e:ea:53:2a:4e:da:3c:d9:a3:05:25:b1:
45:ea:ec:19:4e:ff:f2:70:fd:af:fd:54:01:6d:3e:
ec:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2C:12:A1:7E:F7:98:ED:24:D2:C7:0A:7B:58:4C:93:81:A2:A7:48
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144182.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a5fc::/32
Signature Algorithm: sha256WithRSAEncryption
54:f5:33:81:56:b2:89:68:df:36:6f:0d:da:18:83:10:be:5c:
a9:c7:70:f6:5d:88:f4:24:7b:e9:4b:8b:4e:b1:02:ab:08:8e:
88:8a:5e:f6:9d:ff:26:a8:02:bc:97:b2:c0:3f:70:73:f0:97:
ed:a8:ff:f1:34:60:de:6a:6b:04:d4:13:db:f8:b6:d6:04:23:
82:dd:37:52:9d:9b:02:bd:0a:fe:17:e5:ed:70:a0:3d:5a:bd:
db:99:b7:d6:c2:52:38:9e:f8:ae:aa:5f:ee:e9:10:e2:51:b2:
ba:40:56:d7:48:14:87:bb:46:9d:7a:61:dd:e9:32:50:1d:c4:
71:56:29:74:69:8e:17:cd:01:c6:08:d6:e6:64:61:eb:48:68:
bc:b6:77:95:36:9d:f3:42:0e:34:bc:ab:be:ef:1d:93:33:5f:
a5:cc:c4:58:05:6a:ad:08:a4:e1:fa:11:18:50:44:0a:f5:cc:
22:06:65:2b:59:61:df:c1:ef:be:e8:a2:86:ae:1a:d5:e4:47:
22:dd:51:c3:d3:d7:ad:fc:ed:81:5f:a0:11:71:ce:3c:05:db:
ff:0b:c8:69:c8:f7:46:e1:89:53:1d:f8:68:0c:ad:b8:7e:9d:
e5:25:cd:a7:51:60:0b:5c:04:ab:ea:8b:57:a8:3e:db:e5:3a:
0a:db:2b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:55 2026 by rpki-client