Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144243.roa
File: AS144243.roa (raw, json)
Hash identifier: obu4TONcS9ThE6GagP6xSjXWUwfvOZmWl0+ilvT846I=
Subject key identifier: 9E:D5:B1:6D:29:6B:56:AA:49:4B:71:AD:69:28:41:55:47:C6:C2:CD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 78F7768AE0F4A7B59B4A1482168FFC72145022EE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144243.roa
Signing time: Fri 22 May 2026 06:58:38 +0000
ROA not before: Fri 22 May 2026 06:53:38 +0000
ROA not after: Fri 21 May 2027 06:58:38 +0000
asID: 144243
IP address blocks: 240a:a639::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:f7:76:8a:e0:f4:a7:b5:9b:4a:14:82:16:8f:fc:72:14:50:22:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:38 2026 GMT
Not After : May 21 06:58:38 2027 GMT
Subject: CN=9ED5B16D296B56AA494B71AD6928415547C6C2CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:41:91:0f:fe:65:c1:aa:63:48:ad:01:11:f7:
6e:7a:4a:07:09:a4:ab:09:5a:6f:44:a9:c9:74:ff:
25:c4:54:3c:12:db:33:b5:bb:28:79:7d:90:d3:08:
71:95:03:5a:7d:c7:3f:65:ab:2a:6f:00:8a:37:3e:
8a:a9:85:28:96:b3:41:e4:ca:ec:80:18:4d:d6:23:
5d:62:83:21:95:72:be:2c:d3:6f:d9:1b:64:2b:57:
e8:52:72:53:4f:6b:7b:c7:aa:82:25:39:d6:c6:2a:
5f:91:84:bc:26:04:a3:82:a5:bc:87:9f:a8:2a:d1:
56:83:08:13:3c:24:06:66:70:57:9d:94:d3:a6:62:
fa:b8:bb:1c:2f:b1:1c:1e:e4:52:eb:0f:22:71:cd:
fe:fa:81:fd:42:4e:56:05:73:16:8e:41:7a:86:33:
56:6f:58:be:cd:5b:a5:d4:3e:cf:aa:d0:95:74:15:
39:9f:5d:77:7b:b3:f5:26:bb:34:a5:57:8a:75:fa:
d4:f9:37:7e:4d:21:ac:a6:c8:c7:9e:56:14:bd:6d:
fd:69:90:89:ce:f7:ac:06:76:3c:44:9c:33:6c:2c:
e7:13:41:83:6e:1c:ea:d6:2c:7f:2c:f0:fe:71:9f:
0d:4b:f9:f3:d8:55:78:13:4c:b4:10:7d:82:f6:25:
be:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D5:B1:6D:29:6B:56:AA:49:4B:71:AD:69:28:41:55:47:C6:C2:CD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144243.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a639::/32
Signature Algorithm: sha256WithRSAEncryption
26:10:50:f8:eb:31:c0:70:b7:ef:ed:18:c2:93:64:c4:fd:5c:
88:f5:9c:4a:75:18:17:9d:6e:dc:5b:d9:76:68:43:4c:de:4b:
af:74:3c:bd:82:07:dc:74:8b:95:f3:d8:cf:67:7c:e2:cc:f7:
f5:7a:7d:d3:47:02:11:5a:90:c4:1c:e2:24:46:21:02:ba:96:
f6:9d:f0:44:0f:60:d8:07:39:de:6f:c8:2d:f7:63:d6:22:a9:
84:ce:90:fe:5d:17:ed:dd:d8:c1:08:1d:51:cb:33:0e:32:dc:
ad:7a:12:da:fc:eb:85:62:75:3c:d2:53:82:79:77:70:82:b3:
ac:95:35:dd:cc:18:5a:35:70:1d:8c:9c:90:79:ef:fb:75:60:
32:e7:95:71:6c:fd:67:24:41:f5:f1:f8:ec:ca:ee:c9:84:83:
93:40:f4:8c:30:b2:33:6d:bb:ba:e7:d8:25:60:86:97:0b:07:
14:bc:d4:79:67:88:e6:7c:b6:c5:01:56:25:9d:e1:7c:55:ac:
0b:46:99:05:ac:ad:6d:8e:41:ce:d1:ec:96:1b:13:51:a5:1d:
28:af:dc:31:8a:af:c5:3b:a1:0b:e6:6d:47:60:96:e4:fd:dd:
03:bf:19:93:1b:79:ff:e6:a1:21:59:bc:a9:b5:1b:44:74:f4:
f6:7b:82:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:49 2026 by rpki-client