Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144304.roa
File: AS144304.roa (raw, json)
Hash identifier: t7xsLuNBxdoXHYrEhK9I7L3+/l9k1Z7gGDJvHkIEUi0=
Subject key identifier: C4:E6:0C:BF:B5:CB:65:3E:19:44:2A:D0:2F:DC:AC:AE:70:74:78:13
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 37FD2AADB082709497809EFDFE6433C655746442
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144304.roa
Signing time: Fri 22 May 2026 02:47:54 +0000
ROA not before: Fri 22 May 2026 02:42:54 +0000
ROA not after: Fri 21 May 2027 02:47:54 +0000
asID: 144304
IP address blocks: 240a:a676::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:fd:2a:ad:b0:82:70:94:97:80:9e:fd:fe:64:33:c6:55:74:64:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:54 2026 GMT
Not After : May 21 02:47:54 2027 GMT
Subject: CN=C4E60CBFB5CB653E19442AD02FDCACAE70747813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e8:8c:3a:ae:c1:67:9b:34:cc:47:aa:e0:8a:
e0:98:be:19:28:a5:d9:e4:a2:e7:6d:cb:3b:a8:f3:
88:86:e6:24:44:a3:91:75:19:6b:64:5e:6e:98:97:
54:49:01:92:70:30:81:e3:ec:95:26:87:ca:f4:ed:
40:fe:6a:7d:af:97:4e:3b:d7:a4:38:e5:90:5d:3e:
aa:2d:66:95:08:90:9b:a6:b4:f0:fd:4a:b6:46:bb:
b0:e4:e4:d6:e5:7c:0a:87:3a:11:b8:3f:53:b2:ae:
d4:de:6d:9d:b5:d9:59:86:39:0a:8f:34:0f:3f:a2:
ad:82:d3:a3:6c:02:a2:6d:ef:0a:5c:9c:74:52:1b:
2b:67:32:5a:19:0a:9f:5a:e6:45:22:33:52:02:52:
9d:2a:87:37:ca:4b:67:ac:55:83:01:c4:86:43:ed:
19:e0:17:d8:82:4c:3e:38:1b:5f:38:30:00:04:bb:
c1:3a:fa:e7:ce:9d:be:91:cc:25:1e:53:61:78:aa:
cc:be:44:cd:2b:76:7c:64:67:11:a7:91:2a:6c:30:
9d:a8:83:bb:ed:93:9a:52:29:85:95:b6:de:50:9a:
94:5d:51:04:69:e4:42:3a:ec:57:2c:a7:e1:04:88:
9f:47:b4:32:e7:90:d5:0e:81:de:4c:94:95:2d:61:
a8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E6:0C:BF:B5:CB:65:3E:19:44:2A:D0:2F:DC:AC:AE:70:74:78:13
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a676::/32
Signature Algorithm: sha256WithRSAEncryption
69:de:7b:88:ed:1b:42:85:30:3b:2c:2b:8e:e5:32:10:1a:a3:
11:b7:fb:44:84:88:b1:59:be:4e:3d:2f:77:62:5c:92:4d:c9:
2f:76:31:01:ab:3b:e5:89:f8:0b:17:4d:3c:64:c0:91:9e:83:
15:e3:d9:05:ca:1c:ce:f4:76:46:b9:05:47:b7:43:bd:04:d3:
02:15:91:fc:b1:2d:0b:2b:0a:ff:2e:b8:2c:df:32:fc:fe:7b:
c4:ff:ea:af:9d:e7:5f:e4:3c:7f:61:89:a5:e4:40:93:5e:c6:
d2:44:57:29:c9:71:d1:79:e4:74:43:e2:6a:9d:24:89:05:d3:
f8:00:af:15:8e:90:18:54:4e:a8:7f:b4:d2:97:77:cb:05:71:
7e:88:8f:75:d9:62:fd:5a:66:58:4c:3f:4e:1a:11:a5:75:e8:
4c:a7:80:da:85:bf:28:4e:f3:20:0c:a8:60:0b:40:86:d1:67:
c9:cd:d7:d1:5c:95:6b:6d:82:94:8f:92:0e:9b:d2:a4:20:af:
02:50:47:eb:f0:61:4c:d8:f2:5b:21:ee:0f:13:15:96:28:68:
55:9e:8f:a6:1b:27:90:8d:33:35:ab:13:37:74:3c:82:ed:75:
cc:74:f9:4e:ab:fa:91:3b:17:60:ac:21:15:cb:e4:e0:0a:ec:
de:37:03:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:44 2026 by rpki-client