Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144239.roa
File: AS144239.roa (raw, json)
Hash identifier: 8q5TcmrcqivCKjK6ltq2MS4n0V7slkSqZXwH5rfx55Y=
Subject key identifier: F6:7C:B6:DC:2F:B4:2F:08:41:30:57:B4:7E:7C:7D:35:B2:FA:F7:E4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 255856F930F18F31B2D322555E70AB77C95FB66E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144239.roa
Signing time: Mon 25 May 2026 01:20:00 +0000
ROA not before: Mon 25 May 2026 01:15:00 +0000
ROA not after: Mon 24 May 2027 01:20:00 +0000
asID: 144239
IP address blocks: 240a:a635::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:58:56:f9:30:f1:8f:31:b2:d3:22:55:5e:70:ab:77:c9:5f:b6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:00 2026 GMT
Not After : May 24 01:20:00 2027 GMT
Subject: CN=F67CB6DC2FB42F08413057B47E7C7D35B2FAF7E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e6:ad:e8:6c:03:0a:22:2a:f6:cc:fa:5c:fe:
c6:a5:0a:e9:07:2f:e0:fd:9f:83:cc:77:52:9d:28:
db:26:b1:10:4e:08:1a:bf:8f:61:93:98:fa:9a:31:
a8:2f:38:30:6f:43:8d:06:5f:3e:96:b5:2e:c2:f1:
2d:58:2e:1a:5e:f4:31:ab:cd:82:32:e7:9e:f2:ec:
16:2f:46:b1:b0:25:b9:13:1c:16:1d:ca:b9:45:b0:
d1:2c:ef:bf:8c:c4:63:15:0e:14:ed:06:02:b7:0a:
95:72:52:d9:e6:27:cd:32:66:77:e5:43:54:c9:3e:
12:97:a4:4c:a9:a8:45:19:f1:83:96:d5:c9:bb:9d:
42:e5:e0:16:c4:b1:79:19:da:3d:5d:13:7e:f2:35:
59:bc:3f:a9:3d:ce:86:e4:96:ef:dc:30:da:a0:35:
9b:4f:7e:84:7a:d4:85:c7:06:cd:50:14:7a:76:41:
d4:c7:d3:10:26:7b:bc:de:74:41:ac:8f:0d:cc:59:
6c:e4:92:d3:06:eb:ee:7c:2e:d2:68:54:6f:fe:fa:
d0:d1:f9:a2:9f:1c:cc:29:58:97:05:24:f2:64:7b:
26:b6:f4:87:95:b2:5b:66:a6:1b:87:7f:e7:41:23:
c3:f3:42:e4:59:34:b4:44:4f:8b:f2:dc:74:a0:88:
36:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7C:B6:DC:2F:B4:2F:08:41:30:57:B4:7E:7C:7D:35:B2:FA:F7:E4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a635::/32
Signature Algorithm: sha256WithRSAEncryption
80:bb:c7:80:07:e1:8b:02:8b:82:e7:e6:85:24:4f:d4:89:7d:
7c:36:46:18:f7:b0:96:e9:6c:6e:fb:62:9e:3b:11:c5:fc:fb:
1b:ea:13:36:24:a9:e2:a9:81:2d:6b:c7:8b:5f:76:50:57:6d:
9c:0f:44:39:a9:e9:6a:6f:4f:66:d4:67:5d:94:53:91:da:8a:
3f:93:8a:3d:18:ee:de:6e:e0:42:ad:fd:d0:4a:d5:25:39:b0:
f4:bf:53:b8:28:29:0c:e9:32:8f:4b:3a:64:4e:ea:9a:60:14:
0e:1b:d8:f6:50:92:e1:29:6a:ba:95:3d:8d:13:94:56:a8:6d:
71:d0:dd:fc:96:95:40:20:cc:e4:d6:30:30:d6:02:49:d9:b8:
13:c8:8b:5e:9e:24:e2:ff:22:71:52:15:d3:0c:87:9d:b4:a3:
dd:c9:10:6f:de:53:e8:e5:fb:c2:55:51:9b:46:93:21:d1:17:
0a:1b:f4:82:65:65:fd:d0:22:c4:ea:f0:cf:a9:53:78:43:85:
26:6f:57:6b:3f:1e:88:fe:d6:fe:0d:57:3f:4b:02:25:3d:a3:
86:99:13:0c:60:14:e4:21:69:c7:86:bd:10:c4:53:03:59:6e:
d0:ca:4c:f8:2b:b6:1c:2c:e9:8d:46:0d:95:00:72:65:45:f1:
7f:b2:20:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:41 2026 by rpki-client