Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144329.roa
File: AS144329.roa (raw, json)
Hash identifier: oAAKzNx1XAEPp3dCMNYRSzJgK9cnm4+JNA1rUVBs+8Y=
Subject key identifier: 1E:4E:36:9F:32:93:DB:D3:8B:40:D6:10:79:94:99:63:ED:EC:1E:51
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 60B4482294F189CFB6F1F682F8EFD3A6AE2EF802
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144329.roa
Signing time: Tue 26 May 2026 03:17:17 +0000
ROA not before: Tue 26 May 2026 03:12:17 +0000
ROA not after: Tue 25 May 2027 03:17:17 +0000
asID: 144329
IP address blocks: 240a:a68f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b4:48:22:94:f1:89:cf:b6:f1:f6:82:f8:ef:d3:a6:ae:2e:f8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:17 2026 GMT
Not After : May 25 03:17:17 2027 GMT
Subject: CN=1E4E369F3293DBD38B40D61079949963EDEC1E51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a7:98:28:91:66:2b:ef:cf:86:39:35:11:3c:
98:cb:19:ee:32:2f:0f:7f:dd:d2:cb:16:fc:4c:d6:
21:84:56:33:b0:fe:86:9e:11:d6:c5:cf:62:d9:1a:
dd:b2:42:dc:a3:03:58:60:8d:15:50:7b:9f:3b:8a:
4e:cc:3a:62:85:a1:21:8c:03:0f:63:f0:d4:90:3b:
b0:b4:a1:91:5b:02:af:b3:b4:d2:d2:f6:d6:57:6c:
d4:a9:b4:34:a2:77:0b:f3:d1:a0:2b:cf:53:72:a1:
6f:23:f9:16:72:dc:d3:e2:e3:63:66:ff:e8:54:e4:
d5:bf:8f:c4:9c:6c:63:15:36:a5:96:35:f3:c5:05:
01:72:fa:8b:8e:cf:98:32:5f:28:4e:64:b8:da:02:
a2:6f:02:d1:09:10:09:aa:f1:89:39:19:f0:09:df:
ae:92:e1:a6:34:91:66:92:4b:8e:e3:eb:e0:ed:31:
58:1c:b3:f2:81:d1:69:88:78:3f:58:df:8e:81:32:
a4:08:25:eb:c7:72:de:79:85:7c:12:e5:60:46:7f:
af:01:77:17:23:69:db:a4:95:11:bf:0d:9a:c4:cb:
dc:28:b0:27:a2:b4:9e:14:3c:a6:0c:42:e7:6d:70:
50:ab:35:ac:f1:a6:39:f7:48:22:58:74:8b:b2:35:
25:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4E:36:9F:32:93:DB:D3:8B:40:D6:10:79:94:99:63:ED:EC:1E:51
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144329.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a68f::/32
Signature Algorithm: sha256WithRSAEncryption
8a:39:97:b5:88:8d:4f:12:0b:1c:80:08:27:cc:8c:e3:aa:c3:
39:ea:e9:5e:89:ce:a5:cd:ae:2d:c1:15:61:80:57:6f:ec:11:
ca:6c:a9:b9:ea:f1:d3:d3:de:de:78:96:50:19:83:aa:16:12:
79:97:7d:4c:1c:82:74:ee:04:05:4f:23:e0:9b:1b:6f:39:ba:
bc:18:63:d1:f0:ac:aa:2e:72:4a:d2:f5:b5:73:6f:51:99:97:
fc:e0:41:b2:1c:aa:3d:15:26:9a:95:4f:b4:59:19:67:ab:71:
a4:17:49:00:10:7c:39:79:8e:d2:4e:6c:9f:a9:22:1b:ed:31:
4e:ac:ec:0f:cc:12:a4:9d:19:e5:cc:54:d7:fe:c9:5b:fe:60:
37:be:fb:d6:87:aa:33:78:c8:3f:ee:49:ab:fc:8d:12:60:24:
ae:9a:df:36:26:e0:12:f4:94:3b:bb:4c:7d:0f:5e:3b:f2:cb:
14:75:1d:b2:45:c5:1a:4e:9e:1d:4b:11:25:cf:34:83:02:71:
8e:d7:bd:d6:88:61:6d:2e:4f:bd:b1:fa:31:c8:9a:cb:48:7e:
57:b5:9d:5b:f5:d6:91:30:26:cd:c8:8e:de:da:ac:19:9b:cd:
20:75:ba:04:fa:d8:cb:46:5c:15:3a:67:80:93:bb:df:fa:0d:
b3:cf:61:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:01 2026 by rpki-client