Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144299.roa
File: AS144299.roa (raw, json)
Hash identifier: ulydiazew4T4pDqm+Bw5TPJ3pMtWy+3uaYAx7jBVUlE=
Subject key identifier: 17:0B:2D:3B:D4:80:A9:A2:41:77:C1:CB:30:9A:E5:96:52:7E:D4:6E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 51E7BAD59D0AD59C92E79C1A40C8C8FED5299484
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144299.roa
Signing time: Mon 25 May 2026 03:19:28 +0000
ROA not before: Mon 25 May 2026 03:14:28 +0000
ROA not after: Mon 24 May 2027 03:19:28 +0000
asID: 144299
IP address blocks: 240a:a671::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:e7:ba:d5:9d:0a:d5:9c:92:e7:9c:1a:40:c8:c8:fe:d5:29:94:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:28 2026 GMT
Not After : May 24 03:19:28 2027 GMT
Subject: CN=170B2D3BD480A9A24177C1CB309AE596527ED46E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c7:db:b7:b0:e7:cb:09:46:4d:6e:6a:6d:1e:
be:36:8c:27:d0:97:c4:de:e0:95:7c:1a:83:8a:96:
2a:58:22:83:98:d1:5d:db:00:3e:47:ff:35:4d:6a:
06:3b:b2:cb:48:2f:8f:66:6c:e5:a5:94:d2:ab:0e:
4b:1c:2d:28:b1:83:b4:83:95:e5:f6:0a:a5:b5:07:
3d:4e:b0:42:95:df:92:1a:0d:3e:89:20:12:20:79:
be:7b:79:86:4f:95:22:08:8f:c9:f2:60:44:9c:e5:
83:3f:08:2c:9e:c7:96:51:bf:18:ce:e5:2c:00:b2:
5b:87:80:d4:e0:7e:b8:7f:43:b7:50:04:55:1e:06:
45:cf:f6:bc:96:62:ad:43:3e:ca:e7:d7:af:91:ec:
44:68:9a:5f:ec:e2:e9:f7:7b:ce:56:74:8f:bf:e9:
3e:57:3e:ab:96:23:7d:b2:02:4e:2f:c8:25:96:8e:
bb:a5:56:cb:01:c1:72:b0:61:de:dc:f1:5d:eb:1a:
78:fc:aa:52:84:3f:6d:15:a9:89:e6:76:d9:30:ce:
1c:51:e1:e6:e5:15:82:0a:a3:63:5c:9c:2d:cf:d3:
d1:02:30:75:78:40:c8:0a:2f:33:2c:ad:03:36:20:
d0:dc:18:81:bd:f3:b1:92:49:0f:0d:b2:fb:28:1c:
30:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0B:2D:3B:D4:80:A9:A2:41:77:C1:CB:30:9A:E5:96:52:7E:D4:6E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144299.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a671::/32
Signature Algorithm: sha256WithRSAEncryption
05:d6:87:9e:c1:ea:60:14:3b:42:40:48:24:c3:e3:b8:77:d9:
db:a0:6d:f9:1a:f5:7b:99:47:db:0c:30:17:b4:1a:a5:40:7b:
fb:e9:81:6b:3a:94:e1:23:1a:65:0f:38:0d:62:af:1d:12:06:
c3:48:6e:ca:09:0a:1f:ba:f9:77:bf:50:af:f1:f1:10:a5:d0:
0b:36:4f:ff:c5:a9:43:d9:5b:88:c8:fb:0a:64:8f:87:1e:65:
3b:75:39:57:3e:57:16:50:79:24:f8:98:60:34:4c:b7:3f:46:
16:ca:8d:00:ba:91:49:25:2f:99:45:df:da:55:cd:06:1d:4a:
0e:85:45:b7:eb:4e:a0:03:d9:14:07:cc:3b:a3:f0:63:b7:35:
aa:23:15:fd:e2:d0:e3:35:d0:85:51:02:ed:0e:e8:d7:ca:37:
6d:d2:d7:05:3b:66:5f:9c:33:69:4c:9a:00:2b:08:f4:dd:4e:
71:8e:4c:1c:7f:23:e7:4f:5c:e8:6d:59:a7:a6:1f:30:f9:bc:
72:e7:d2:a6:04:1c:9d:11:60:a5:c3:ac:ff:22:83:60:2c:c3:
57:37:54:f6:f2:45:9e:9e:79:7f:15:e8:81:08:35:60:33:3b:
46:fe:de:95:8b:cc:49:bf:e7:05:b3:1b:0a:b7:de:16:5b:bd:
c2:e5:81:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:29 2026 by rpki-client