Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144229.roa
File: AS144229.roa (raw, json)
Hash identifier: pI7HJP6MwykyS5uyIvVR0UzpWgHKo6fOs9Rz/fwAOAw=
Subject key identifier: D8:C6:32:61:16:4F:9A:42:82:FF:43:4E:F8:7D:EB:32:93:C9:38:D9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 09C413B96A91B563276AA92C7C45230278EEE904
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144229.roa
Signing time: Mon 25 May 2026 03:19:41 +0000
ROA not before: Mon 25 May 2026 03:14:41 +0000
ROA not after: Mon 24 May 2027 03:19:41 +0000
asID: 144229
IP address blocks: 240a:a62b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:c4:13:b9:6a:91:b5:63:27:6a:a9:2c:7c:45:23:02:78:ee:e9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:41 2026 GMT
Not After : May 24 03:19:41 2027 GMT
Subject: CN=D8C63261164F9A4282FF434EF87DEB3293C938D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:50:e7:2d:8c:2d:59:c7:f7:91:33:1c:a2:
96:b2:4a:a2:c5:30:3b:68:31:6e:22:f4:22:b8:b8:
d1:1c:f2:59:54:a6:6d:5e:e7:c2:9b:6c:51:5b:ae:
47:ad:3c:1f:2a:e2:45:02:4f:2c:63:5b:2d:00:8d:
42:46:1f:17:77:be:5a:7f:04:54:91:3c:cf:00:9c:
66:a8:69:6a:a0:fa:79:5a:6c:5f:4d:36:0f:5c:f0:
8a:28:e3:14:77:c2:ad:33:ff:fe:4f:e8:aa:5d:7b:
81:46:05:f9:ad:e7:af:e7:16:da:6d:ba:41:cb:98:
1a:7c:92:5a:d0:7b:48:30:19:dc:39:ae:71:2f:e0:
c6:aa:34:4e:e5:ca:fb:e1:2b:24:5b:8e:05:ef:25:
2f:a0:e8:c3:6c:7c:4f:66:5c:f3:7d:dd:ae:df:61:
44:d7:02:6f:f1:9d:5b:ab:35:a4:19:20:c5:82:d0:
97:83:e7:0d:5f:37:1f:eb:6c:23:3c:ae:a1:af:01:
29:11:83:43:86:d3:d8:ae:b6:ff:38:d8:53:6c:1a:
5c:d9:9b:e1:f8:70:6e:d1:09:df:66:9e:4d:1e:70:
0b:42:db:52:62:b1:8b:91:98:60:3e:03:2c:c1:23:
7c:80:ce:4a:b1:9a:5a:ab:d5:4c:6d:3f:4d:7e:69:
a0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C6:32:61:16:4F:9A:42:82:FF:43:4E:F8:7D:EB:32:93:C9:38:D9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144229.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a62b::/32
Signature Algorithm: sha256WithRSAEncryption
99:b1:56:8e:5e:ff:2a:ac:88:16:e9:f5:0f:3c:0c:27:e8:42:
2d:3c:81:15:95:02:9f:29:a0:05:cf:bd:ae:82:1e:ae:79:c2:
b5:db:19:4f:5f:92:26:30:88:fe:33:62:70:2b:9e:61:c5:60:
ce:8c:1c:57:1d:0a:5c:e6:7c:08:70:01:bf:88:df:e7:98:c2:
b2:e7:59:20:ca:88:1a:88:47:50:e4:e2:f0:0f:14:20:f3:1e:
de:39:fb:6b:06:f0:bb:16:7d:3f:79:c5:2d:5a:0a:1b:34:2a:
13:db:6b:a3:22:4f:35:1c:8b:bc:ed:13:5f:fd:77:68:a3:60:
b1:35:2d:42:3a:6b:13:d6:cc:35:6e:6d:f2:03:c3:c8:74:80:
2c:05:27:dd:27:56:8b:cc:94:11:ac:af:11:ad:6a:6a:26:76:
2a:da:dc:91:e7:a1:37:ed:9f:96:49:de:e1:9f:66:3e:af:13:
9b:82:37:ad:d2:1f:f3:fe:c1:c3:aa:cb:0b:16:90:13:2a:42:
83:78:f9:93:5d:d2:7d:d4:b5:bc:45:a0:ed:e2:6d:f8:da:3a:
25:21:7a:6e:a1:7c:82:14:e5:ff:ad:0c:17:2d:37:3f:c1:60:
17:7d:db:70:c4:08:8d:67:bb:22:54:bf:3c:b4:f2:6f:e1:f6:
05:d0:d3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:18 2026 by rpki-client