Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144293.roa
File: AS144293.roa (raw, json)
Hash identifier: XMJ4cYgIO6Anf1dijU3npkx24Rk/efDTjJEgGWZhzGs=
Subject key identifier: 40:A8:72:AA:E1:2E:71:E0:21:9A:9D:56:23:BF:04:C5:F8:73:D7:65
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 54E583A523744D5213347412423CF445E5611280
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144293.roa
Signing time: Fri 22 May 2026 07:24:38 +0000
ROA not before: Fri 22 May 2026 07:19:38 +0000
ROA not after: Fri 21 May 2027 07:24:38 +0000
asID: 144293
IP address blocks: 240a:a66b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:e5:83:a5:23:74:4d:52:13:34:74:12:42:3c:f4:45:e5:61:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:38 2026 GMT
Not After : May 21 07:24:38 2027 GMT
Subject: CN=40A872AAE12E71E0219A9D5623BF04C5F873D765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:f9:f9:91:aa:92:5c:a0:c5:34:92:54:66:
89:b8:fe:cc:bb:20:1e:73:5c:6b:b7:99:a0:e6:8f:
a9:ad:7c:5a:9f:01:71:c2:af:2c:48:a7:03:a5:e7:
57:62:42:b2:b9:fc:90:b3:bb:25:03:f5:3f:61:eb:
4e:b9:f9:2c:3c:c3:e6:34:61:73:1b:72:d0:17:b6:
dc:d4:b8:fb:4f:32:6a:21:9f:ac:7d:d3:84:27:52:
02:94:09:a4:b6:9e:d8:6e:b0:7d:93:04:77:fe:55:
2e:b8:9b:0d:d6:0e:0b:92:72:c2:4b:04:c9:de:e2:
32:37:56:c4:a7:63:66:2a:4a:52:83:38:ff:0c:59:
98:c4:1d:f0:0d:81:cb:3f:bb:06:c1:64:a8:8a:70:
c2:8e:e2:d5:86:cd:cc:19:d7:2e:03:81:d0:ca:dc:
bd:f5:12:8b:9f:51:ff:81:da:aa:a0:7e:3e:03:1b:
a3:21:91:55:d4:04:67:6a:c0:41:0f:1c:dd:cf:9e:
80:dc:7c:c5:89:8b:a8:63:93:c9:84:2d:3b:99:85:
f1:a7:cf:bb:68:2c:7e:a4:5a:6d:58:be:22:3c:b7:
f2:52:92:f5:72:6c:40:12:ee:34:06:13:cb:b6:5e:
6e:8a:66:1a:5a:db:e9:a6:dd:81:48:2c:1a:36:35:
a9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A8:72:AA:E1:2E:71:E0:21:9A:9D:56:23:BF:04:C5:F8:73:D7:65
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144293.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a66b::/32
Signature Algorithm: sha256WithRSAEncryption
31:d1:c8:d1:99:21:28:f1:67:16:f0:b0:a0:84:67:94:c5:63:
ab:db:23:15:f0:15:9b:e1:09:eb:a8:25:60:e3:f6:d3:00:80:
b0:41:c6:31:4a:6e:48:87:d9:b0:1d:7a:d9:1d:a1:61:b7:83:
24:61:7b:66:71:08:98:2c:28:b2:25:80:fd:4b:b8:7f:01:16:
97:41:26:e0:20:2b:60:3e:e9:ce:7c:ec:a5:2d:11:4a:75:4c:
a6:ab:7c:0c:3a:19:8f:18:d7:c4:76:5c:f1:bc:a0:73:34:2a:
2d:e4:65:23:0e:fc:0e:d5:85:24:8f:fe:ab:f3:18:3c:e8:5a:
8d:8a:f6:76:17:56:69:e2:00:92:99:60:1e:ae:a0:19:d0:3e:
75:38:35:6e:9d:93:21:c8:84:06:e1:09:97:71:bb:2b:34:a4:
00:21:81:21:99:05:0f:f3:cd:a2:42:79:a3:2a:cb:75:aa:4a:
9e:3e:81:a8:dc:98:c0:ab:4d:4e:65:5e:0d:4b:a5:22:cf:06:
71:e0:76:f5:0f:7d:e2:1e:ba:ee:38:2b:21:f9:28:20:ce:35:
de:01:66:40:86:e3:58:24:53:5a:19:45:66:73:15:cb:ea:ee:
ad:81:54:a8:23:d3:b7:0a:88:a2:25:f9:a1:5c:00:58:78:fa:
0a:c5:84:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:44 2026 by rpki-client