Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144218.roa
File: AS144218.roa (raw, json)
Hash identifier: dFV6LLoS8V5KoPrZ8Bt1vBg00QO7MT5lAFU0dHlwX3g=
Subject key identifier: 34:01:10:F6:BC:A2:98:6D:B9:67:1B:B4:6C:C4:59:05:15:6F:E1:70
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 22149D5AAC96F6AFC559C45B08B81DBE39561083
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144218.roa
Signing time: Fri 22 May 2026 01:50:32 +0000
ROA not before: Fri 22 May 2026 01:45:32 +0000
ROA not after: Fri 21 May 2027 01:50:32 +0000
asID: 144218
IP address blocks: 240a:a620::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:14:9d:5a:ac:96:f6:af:c5:59:c4:5b:08:b8:1d:be:39:56:10:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:32 2026 GMT
Not After : May 21 01:50:32 2027 GMT
Subject: CN=340110F6BCA2986DB9671BB46CC45905156FE170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1b:8e:35:6c:8d:e2:72:81:ae:8c:3f:39:c5:
c1:d8:96:e7:87:3b:b5:b7:ff:b1:67:a1:90:3b:07:
07:e5:ab:89:ec:20:03:31:ea:64:f7:e1:e6:25:3e:
3b:dc:df:65:1c:b0:73:bf:4d:b1:68:33:97:44:a1:
cb:9e:68:47:47:dc:50:b6:a2:7e:d8:bf:5b:73:39:
2b:a3:09:f5:f0:b6:b0:cd:29:ca:3d:51:9c:dc:07:
a7:1d:0d:06:77:d9:e0:cf:95:ed:fb:bc:22:b4:3d:
57:a4:e7:6e:c7:ca:a9:0f:ca:c1:fd:e0:e6:d8:b3:
ec:09:06:07:97:1b:b0:a2:3b:af:43:e8:62:81:a8:
f2:db:63:d0:1e:76:61:e9:b9:f4:d6:14:82:30:11:
62:42:62:41:18:3d:98:6d:31:a8:ff:10:2b:28:e4:
fa:cb:c1:26:8f:d3:fc:4a:a4:43:87:d3:9b:c0:c0:
34:cd:43:2a:e5:48:8c:88:8a:6d:9e:a3:77:25:3b:
8f:55:be:39:75:55:2d:8a:8b:47:f9:ce:d2:db:24:
95:49:1b:74:3b:b0:67:b6:35:ed:0d:d4:25:a5:45:
9b:f2:5f:56:9c:85:76:01:98:e8:96:31:56:29:8e:
08:c8:f4:44:cb:71:1f:c5:26:45:03:5f:af:0f:b4:
0e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:01:10:F6:BC:A2:98:6D:B9:67:1B:B4:6C:C4:59:05:15:6F:E1:70
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144218.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a620::/32
Signature Algorithm: sha256WithRSAEncryption
73:5a:a0:6e:08:ad:9f:83:71:ff:94:15:0f:be:5f:55:b0:10:
f0:14:39:5b:77:24:d4:a0:c2:e5:69:0b:40:3b:6e:d8:2d:66:
fc:89:76:24:8a:27:54:40:3f:1a:0d:71:c6:c3:e1:23:8a:4a:
b7:17:fa:b3:1d:55:8c:c8:69:d2:2a:ba:76:17:d3:a3:db:62:
9a:44:ab:c0:1d:d9:76:79:df:62:b2:fd:eb:19:ca:9e:47:76:
2f:89:33:c5:24:12:35:50:5a:b9:ce:2e:26:f4:41:97:6c:64:
f5:f0:ab:e6:c8:85:e4:3b:be:a7:10:77:b4:ed:73:71:47:1e:
43:b6:4e:e2:74:b3:a1:86:69:61:ac:3b:2b:e0:63:d4:06:dd:
58:9c:79:30:0f:00:a2:32:0e:5a:03:57:04:94:01:7e:de:98:
ab:e4:95:14:c5:69:0d:02:c9:81:1d:1d:4a:7f:d8:ca:33:f2:
67:d1:78:3e:42:59:ee:ed:59:a8:5c:50:1b:3d:32:b8:23:c1:
b5:17:a2:d0:ca:62:dc:b3:33:01:bb:d4:b8:fa:b8:c8:50:d2:
18:09:32:3b:ad:23:16:08:24:36:5d:17:7f:a7:95:0c:6a:be:
30:24:12:3e:e8:75:ff:b4:23:34:d0:ec:93:1b:34:8e:84:33:
7f:f1:82:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:48:59 2026 by rpki-client