Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144288.roa
File: AS144288.roa (raw, json)
Hash identifier: 4F1QWWpFusolAWkL9TGys0EgPa6BC5yR/fTIegBKZww=
Subject key identifier: E8:67:5B:02:2C:C4:2A:6B:DE:3E:CD:C7:CD:F8:F4:44:49:FA:48:B6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 34124F46D23334859F1D9B8610411C8E47C7EACB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144288.roa
Signing time: Fri 22 May 2026 07:09:05 +0000
ROA not before: Fri 22 May 2026 07:04:05 +0000
ROA not after: Fri 21 May 2027 07:09:05 +0000
asID: 144288
IP address blocks: 240a:a666::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:12:4f:46:d2:33:34:85:9f:1d:9b:86:10:41:1c:8e:47:c7:ea:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:05 2026 GMT
Not After : May 21 07:09:05 2027 GMT
Subject: CN=E8675B022CC42A6BDE3ECDC7CDF8F44449FA48B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:42:8b:fc:41:db:35:4a:66:4f:8f:4c:e5:79:
d8:c1:ce:cf:f8:22:30:40:e5:d9:e9:f8:a4:b2:c3:
10:0d:db:eb:e0:af:3b:d1:63:94:23:b2:36:4d:e9:
e5:95:63:19:46:9c:9e:39:62:e1:0a:7f:bd:cf:52:
42:fe:d1:9f:68:26:52:c2:52:3e:c1:aa:2f:d3:06:
5f:e7:09:fa:7c:bf:3c:a3:15:47:d6:c3:27:58:ee:
69:f2:f4:2f:ea:d9:07:97:30:fd:95:45:bb:a7:bb:
9e:6b:8d:78:25:1d:5e:eb:fd:11:f1:e8:12:64:af:
f5:af:4d:34:1e:83:9c:8d:73:c2:a9:42:67:ac:fb:
d5:92:0f:cd:8a:7f:e9:dc:a3:e7:52:73:eb:f6:45:
98:c2:69:68:85:33:23:65:dd:0b:37:f0:7a:9c:8f:
17:9d:37:ad:2f:f7:b5:2e:4e:0e:f6:c4:42:5a:39:
13:42:32:ab:b5:62:50:5e:ef:35:f8:ae:a8:a4:cc:
25:fe:a2:00:a6:fd:36:c1:f4:86:f2:20:69:a3:72:
c3:46:69:3a:ff:3b:86:e1:0c:48:72:b5:87:0c:8d:
76:9b:6e:99:a1:c4:02:3b:1c:50:7b:b3:9a:96:96:
86:5f:4c:3c:f1:db:07:da:73:4c:09:d1:85:cb:6e:
06:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:67:5B:02:2C:C4:2A:6B:DE:3E:CD:C7:CD:F8:F4:44:49:FA:48:B6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144288.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a666::/32
Signature Algorithm: sha256WithRSAEncryption
9f:5a:22:38:50:ed:1f:2f:85:39:22:f6:be:2e:4b:1f:55:5e:
41:a3:38:09:24:3e:bd:b6:4c:ac:09:ca:5b:f1:a1:25:a7:00:
1d:89:ac:28:73:6a:7d:4d:49:fa:2e:6e:60:c1:7a:46:b4:08:
97:76:21:63:e4:15:4a:ce:f5:44:fd:d1:1f:86:14:62:48:c0:
0e:f2:70:a4:51:04:84:b9:b8:ac:53:e2:c3:7d:ef:e1:f4:c8:
99:c0:e7:22:56:c4:ee:3c:7d:bb:eb:ab:e9:25:78:c6:ef:6e:
4e:71:29:6d:23:40:b2:bd:62:bb:27:9a:b1:08:ad:ee:9e:d7:
43:8a:70:fc:4e:24:2a:19:30:df:13:22:03:3c:b3:b0:62:c7:
c3:13:92:36:f8:10:7c:87:f7:c4:c0:fc:c2:f6:98:74:ae:b2:
48:c8:c5:97:ef:87:30:6d:a8:82:f5:5f:20:b5:b4:c2:60:d5:
20:d6:95:cf:57:f1:da:8e:7b:e6:ed:a4:a0:0f:5d:ca:bc:06:
72:66:54:4a:9d:d5:6f:9a:6e:dd:af:41:e5:c8:88:3d:85:70:
2c:12:94:76:ce:79:fc:5e:bb:8c:bc:e1:e8:6c:97:f6:81:76:
51:45:56:51:80:fe:3d:ca:8d:54:d3:d3:f2:69:b3:0f:76:f5:
f6:8f:3f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:24 2026 by rpki-client