Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144289.roa
File: AS144289.roa (raw, json)
Hash identifier: mA6DfmxmbZKMigEvUfl6mdYoRpD+ZV2+VPbISwuPJ4Q=
Subject key identifier: 20:CA:F9:98:40:DC:9D:67:8F:34:AC:CA:1C:52:90:30:1E:9D:27:BD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 791AB964076F98420122F99A0986BD36AEFA0548
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144289.roa
Signing time: Tue 26 May 2026 06:30:43 +0000
ROA not before: Tue 26 May 2026 06:25:43 +0000
ROA not after: Tue 25 May 2027 06:30:43 +0000
asID: 144289
IP address blocks: 240a:a667::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:1a:b9:64:07:6f:98:42:01:22:f9:9a:09:86:bd:36:ae:fa:05:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:43 2026 GMT
Not After : May 25 06:30:43 2027 GMT
Subject: CN=20CAF99840DC9D678F34ACCA1C5290301E9D27BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:f5:6b:1b:0f:fd:da:19:62:4a:52:05:71:
b7:2e:40:8c:f0:ea:9e:4d:af:93:1d:ab:32:a2:1e:
45:85:9e:ab:9c:a1:41:a0:cf:29:03:6f:51:b8:1e:
8a:58:6e:55:0e:f2:1b:86:7b:29:1f:53:6d:b5:17:
e0:58:77:e7:fb:1d:b9:39:f0:0e:c0:82:6b:0b:46:
5a:8d:69:34:c2:cd:e8:bc:39:da:1a:6a:ac:46:d6:
c7:67:6b:2d:6a:9b:48:8d:74:3a:18:c8:23:fb:4a:
07:9e:2b:07:5c:6b:05:ae:f8:60:3c:af:07:73:da:
fc:55:98:5a:ff:6e:c7:e4:2e:e0:6a:e7:23:47:7b:
87:a4:c2:d2:18:bd:61:5c:8e:af:bf:da:41:b4:38:
4f:e9:b0:84:2a:09:7a:70:f1:e2:95:ba:a7:24:6c:
ed:19:7e:0e:20:b0:5f:7e:47:ab:15:cd:5a:be:b6:
77:50:73:69:06:39:b0:28:c1:89:26:68:3e:72:96:
15:c8:54:a1:ec:0b:03:90:ca:7a:f9:f2:49:9e:1f:
d2:cf:bb:5d:62:2c:06:14:e7:66:71:e8:61:cb:ea:
f1:fa:f6:25:b5:06:2a:d6:ba:a7:3f:37:ae:50:87:
32:c5:a9:a6:b5:da:3b:b1:07:59:03:d1:0e:44:bc:
3d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CA:F9:98:40:DC:9D:67:8F:34:AC:CA:1C:52:90:30:1E:9D:27:BD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144289.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a667::/32
Signature Algorithm: sha256WithRSAEncryption
46:1d:0e:39:02:df:34:ca:23:24:9b:1d:1a:ee:ad:4b:d6:5f:
02:ff:ab:23:57:a3:3d:eb:8d:36:48:0f:56:32:72:6c:b9:e8:
0c:73:be:35:bb:ba:bc:fe:34:65:1e:63:ab:7f:a2:12:e6:ea:
fe:6f:9c:a4:86:c8:c5:c8:5f:45:09:56:7d:ec:21:87:b2:d9:
bc:1d:1f:66:19:56:ce:c2:95:f9:bc:04:18:46:f0:b4:a8:99:
61:56:bd:a4:bc:49:37:93:32:28:28:2c:01:51:54:da:a0:e3:
12:6b:55:2b:40:94:41:e2:d6:5f:49:4a:0e:bd:df:d8:87:f1:
b6:c0:2e:f9:9b:ed:0c:d5:a5:f5:32:e5:d4:cf:3d:bd:44:56:
91:59:bd:78:d8:e2:cc:9b:f9:55:2b:91:6d:9d:23:74:b2:d8:
75:c7:fc:ea:7f:aa:d1:39:8e:4b:f1:80:e5:34:1a:73:cf:5b:
b3:de:fc:62:2b:66:19:84:5f:88:1d:50:7f:55:7e:44:94:b6:
52:c8:bc:17:c1:53:4f:2a:1f:ba:b4:1e:c0:40:0c:e5:ea:a8:
6e:35:de:1e:21:96:0c:bc:26:c3:c4:bc:35:57:c0:10:96:2c:
b7:a2:79:07:28:5c:6d:15:11:43:aa:dd:5c:3d:d9:d2:5b:76:
96:a4:9a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:16 2026 by rpki-client