Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144305.roa
File: AS144305.roa (raw, json)
Hash identifier: JORiTXAS7/mVgXw8kpJqCrPyWVDrX2yduVqXzM2Holg=
Subject key identifier: 1F:76:4C:13:18:6B:11:AC:D9:85:07:15:A2:BA:EA:AD:20:8A:73:81
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1A513096A75781B372F2622AA9991E9CABA1E4B2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144305.roa
Signing time: Tue 26 May 2026 01:13:29 +0000
ROA not before: Tue 26 May 2026 01:08:29 +0000
ROA not after: Tue 25 May 2027 01:13:29 +0000
asID: 144305
IP address blocks: 240a:a677::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:51:30:96:a7:57:81:b3:72:f2:62:2a:a9:99:1e:9c:ab:a1:e4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:29 2026 GMT
Not After : May 25 01:13:29 2027 GMT
Subject: CN=1F764C13186B11ACD9850715A2BAEAAD208A7381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e8:e6:10:59:4a:d8:64:89:93:03:7e:54:d7:
22:dc:0f:c3:7a:93:a1:ac:e1:b7:6d:0f:08:f5:72:
34:81:80:27:f8:b8:6e:7d:42:36:04:5e:8c:4b:26:
5f:0f:d7:4f:76:10:64:5c:ce:5d:c5:a4:f6:af:a4:
55:c9:99:11:f4:79:69:20:74:eb:be:29:72:2a:fd:
52:9a:10:47:65:48:f7:67:0f:6f:d2:50:46:a9:9f:
59:eb:a7:2b:eb:3e:1f:be:e9:e9:17:c9:37:1d:4a:
f8:3c:83:9b:87:aa:1e:a9:95:6c:c7:f3:f9:d8:cb:
b1:1a:13:67:1d:04:3f:ce:88:e3:de:ff:cd:77:b3:
1b:0e:72:7d:21:3a:4d:1a:89:9c:2f:c8:2d:f5:58:
f5:fd:9c:b4:94:18:05:0d:c0:0b:ce:53:1a:14:95:
ed:a0:79:b6:33:f5:7f:bd:e8:40:20:d9:d7:79:ba:
29:2e:4d:88:ce:fa:03:98:1c:d6:b7:94:24:e5:e8:
e8:42:ec:8c:3b:57:d4:e1:40:ff:89:1c:51:73:46:
b9:89:77:23:85:5d:d2:0e:26:2a:ba:28:ee:32:4e:
f9:26:fb:9d:8b:f9:36:51:74:34:5b:56:47:62:63:
3b:96:62:a2:59:06:f7:14:3f:34:4d:8a:a8:54:4e:
35:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:76:4C:13:18:6B:11:AC:D9:85:07:15:A2:BA:EA:AD:20:8A:73:81
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144305.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a677::/32
Signature Algorithm: sha256WithRSAEncryption
3b:4b:c0:5d:f7:0f:33:c1:75:b2:2b:98:be:12:4b:28:b0:5c:
b9:03:e4:b8:c8:f5:10:fc:7e:03:e1:13:77:9c:8f:18:1c:94:
f5:16:04:b8:01:65:67:2a:c0:9e:23:d1:8f:b9:c1:8c:e0:3a:
ba:5d:7b:50:9d:4f:32:eb:88:f8:12:58:cf:b7:93:4c:44:ba:
d1:61:0d:ce:64:71:88:d5:32:9b:de:59:c2:8b:16:31:cf:52:
f3:09:b2:cc:fd:48:c0:2c:ec:c6:27:aa:0f:ac:6f:4c:0c:51:
f7:72:fa:9a:be:11:06:a5:21:d0:cd:58:bc:37:0d:2f:21:a4:
f0:32:61:52:c2:89:2a:c1:67:92:db:7f:48:e0:fa:8c:13:5a:
27:22:73:03:c0:ba:f8:e5:7a:38:d6:91:b0:46:ec:70:82:33:
fe:6c:46:c3:2e:4b:67:6a:85:6f:b2:fe:1d:45:51:6d:9c:69:
05:c2:5f:a2:2a:82:88:86:2c:86:71:d7:e6:ec:a7:b2:05:65:
54:47:0d:a8:39:69:9b:f0:45:9e:ef:41:a3:d7:ea:b4:ca:90:
ef:37:39:83:af:50:d6:fa:70:5a:d6:0a:3e:99:0e:aa:02:59:
65:15:ff:e6:77:ad:60:5a:22:67:7e:54:ef:ae:32:75:e5:d6:
1c:80:c8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:18 2026 by rpki-client