Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144314.roa
File: AS144314.roa (raw, json)
Hash identifier: GxpLWmL3b+nk5m20wd0B0kfB1AHnbCsWL6Qv9V7Zp4M=
Subject key identifier: 60:00:05:07:D9:C3:B3:5B:AF:A0:ED:80:AF:22:1D:80:AC:08:A3:BB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2CDA207E20D84B586280F996B596E61D5C9C95
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144314.roa
Signing time: Fri 22 May 2026 07:40:48 +0000
ROA not before: Fri 22 May 2026 07:35:48 +0000
ROA not after: Fri 21 May 2027 07:40:48 +0000
asID: 144314
IP address blocks: 240a:a680::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:da:20:7e:20:d8:4b:58:62:80:f9:96:b5:96:e6:1d:5c:9c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:48 2026 GMT
Not After : May 21 07:40:48 2027 GMT
Subject: CN=60000507D9C3B35BAFA0ED80AF221D80AC08A3BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a2:c3:93:4c:fa:1d:48:d6:54:dd:85:61:27:
d0:b4:3e:98:29:9f:b5:d9:30:2d:77:5e:58:48:b3:
e2:59:11:73:b1:d9:d1:2f:51:d4:b5:83:91:82:6e:
19:54:e0:e3:24:47:74:f0:00:7e:54:de:5a:6e:6a:
dd:d1:f0:4d:91:1d:fc:42:1e:ea:8e:05:a1:5d:36:
2a:f4:87:c6:19:9d:6b:80:95:26:45:f5:09:29:82:
b9:e9:bd:c9:21:b3:ff:dd:25:01:c6:e4:2d:05:d4:
71:84:f7:2f:2b:19:1f:d5:b3:2b:5e:f0:93:0e:11:
79:f0:de:b9:3e:b7:5d:56:ab:7a:33:4b:e9:44:84:
c3:e5:01:be:f1:fa:9a:ba:33:00:5d:6e:49:23:28:
3e:96:8e:ec:b9:49:14:b1:c0:eb:fb:7e:6b:d1:a4:
e7:ca:6b:c7:01:d9:ea:cf:56:3c:54:3c:25:69:b0:
f2:b7:52:cc:2e:f3:36:ca:19:da:3b:99:d1:af:52:
c3:21:d7:78:30:42:23:0e:58:f4:55:e4:07:d9:89:
24:3c:8d:7a:75:59:3e:f3:6e:59:23:46:73:4f:b1:
fd:82:eb:47:af:9a:c5:33:28:13:24:59:9b:40:1a:
ca:ec:51:97:5d:d6:24:ca:77:22:d4:65:1b:b7:f8:
4d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:00:05:07:D9:C3:B3:5B:AF:A0:ED:80:AF:22:1D:80:AC:08:A3:BB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144314.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a680::/32
Signature Algorithm: sha256WithRSAEncryption
59:e1:8d:6d:e8:9f:6d:db:d5:0f:f2:83:6e:8b:fa:02:0f:42:
43:fc:99:63:b9:05:4e:58:68:a4:42:4b:e2:4b:2e:d6:b1:55:
9d:6b:f9:0a:35:c3:c8:23:89:bd:da:7a:8a:d8:ea:38:36:05:
22:71:cf:a0:06:af:82:44:ca:ed:d2:b1:09:1e:77:35:e0:f5:
c2:bf:b1:56:1e:c3:42:33:cf:9c:a2:2b:0a:84:c7:00:41:be:
ea:e4:c4:e5:af:0d:60:88:5f:50:96:98:2e:6a:6a:87:27:80:
cc:fe:4f:04:40:71:85:2c:49:65:f3:4b:90:62:18:4e:fe:44:
4e:a3:ca:45:eb:0e:fa:a7:ee:a2:d7:2a:4a:48:6c:ec:c2:c4:
ec:69:b5:50:40:8d:3d:c0:f9:ba:6c:4a:7e:df:b1:13:cd:38:
b4:6c:2f:e6:9d:cc:61:c7:2d:95:90:32:7e:d9:4d:8d:b3:55:
b7:83:1e:67:68:e1:2c:6a:94:72:86:c4:d5:90:e5:a3:0c:3a:
aa:bb:f9:16:46:ca:24:be:e5:35:04:3c:a3:e1:75:6e:09:8a:
5b:88:89:9b:d7:e5:74:a5:73:dc:e4:c0:d5:26:13:fe:13:e7:
e6:77:11:6c:36:38:5e:14:fb:89:60:6c:fb:e3:b0:a2:f1:cf:
f8:c6:dd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:10 2026 by rpki-client