Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144335.roa
File: AS144335.roa (raw, json)
Hash identifier: CumN+hMdVhOtb+cVacwX5kIHoOPlx81TUUWMlZbZ0Ug=
Subject key identifier: E6:B2:7A:5E:8B:E5:6D:02:D3:2C:17:02:30:C2:CD:FA:8E:0C:CF:81
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 44EBF359DAAF7D65BDEDC68B02BAD7417D6B0664
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144335.roa
Signing time: Mon 25 May 2026 06:28:35 +0000
ROA not before: Mon 25 May 2026 06:23:35 +0000
ROA not after: Mon 24 May 2027 06:28:35 +0000
asID: 144335
IP address blocks: 240a:a695::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:eb:f3:59:da:af:7d:65:bd:ed:c6:8b:02:ba:d7:41:7d:6b:06:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:35 2026 GMT
Not After : May 24 06:28:35 2027 GMT
Subject: CN=E6B27A5E8BE56D02D32C170230C2CDFA8E0CCF81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:6a:00:23:8b:69:b5:88:08:e5:f9:03:92:
81:68:29:09:67:31:81:96:56:c4:46:ff:7a:7f:a0:
ff:93:87:33:d3:b0:71:ce:5a:c8:62:cb:e0:80:ce:
92:78:97:5d:7a:c7:c7:40:b3:70:26:1a:d6:54:ff:
27:6a:9d:8f:f5:fb:8f:f3:9a:f6:c5:0b:14:ee:ec:
8d:bd:24:59:0c:eb:65:54:9b:13:3f:bd:17:ba:e7:
c1:ec:8b:aa:5d:4d:9a:4b:1b:1f:e3:37:04:c1:98:
63:65:7a:b5:05:60:99:e7:39:fb:fe:4e:14:3f:25:
5f:c4:42:3a:b9:e5:86:fc:b8:49:c0:30:9e:71:c1:
29:c3:eb:46:47:9f:2e:35:8a:fd:c2:87:3b:24:99:
c3:cc:59:dc:63:53:d6:0d:9e:c4:51:72:60:30:79:
92:52:99:95:5f:0f:b2:7c:46:e0:01:72:a4:c8:2f:
a5:c3:05:a9:73:3c:68:05:ba:f7:5b:cd:c1:8f:49:
31:92:f4:43:1b:f8:4d:ed:0b:fb:18:45:5a:74:4f:
84:fe:71:c9:47:d2:37:d9:49:e8:46:9f:d2:cd:94:
1a:72:48:5a:40:47:43:a6:7a:5b:95:9e:17:07:33:
ae:2d:7c:48:cf:ff:ea:6e:c7:a9:72:1e:5b:c3:99:
d0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B2:7A:5E:8B:E5:6D:02:D3:2C:17:02:30:C2:CD:FA:8E:0C:CF:81
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a695::/32
Signature Algorithm: sha256WithRSAEncryption
43:4c:7a:5c:b1:99:0e:10:1d:34:3f:48:22:80:ed:f8:a7:35:
bc:3f:9f:1e:5c:32:67:ef:fa:ac:8c:81:ed:a3:f1:3e:00:a6:
68:47:14:62:55:be:7e:53:f5:43:40:7f:8d:09:86:92:23:c7:
23:dd:37:6b:54:91:9b:71:f2:cd:37:a5:5a:34:6c:31:f3:4d:
34:5b:e0:3b:39:01:f5:51:44:fb:a5:99:c1:40:33:dd:c3:14:
d7:1b:dc:aa:0f:5e:9d:7d:8b:8b:2e:96:75:57:de:4b:5d:19:
fa:14:57:c6:b1:fd:9b:df:e1:2f:87:f7:d0:79:90:c8:31:10:
c7:2e:21:24:3e:fd:1f:e9:70:c3:93:d2:ff:6e:a0:87:32:cd:
81:b1:62:ae:35:fb:70:2d:21:00:0f:b1:1f:25:eb:6c:19:51:
f0:39:95:bb:ae:6f:47:8c:34:ea:4f:14:b3:db:2c:1f:97:16:
a6:a6:54:05:a6:e1:d8:4a:15:7f:3e:55:65:63:51:29:d5:cc:
20:f1:d5:cc:f0:a4:c2:ca:76:1e:fc:54:fb:3c:b2:7d:db:fc:
63:06:eb:ab:20:b4:7a:b7:f6:50:4a:35:1c:be:a9:f4:8e:e1:
82:86:66:05:fa:d0:22:66:17:d2:07:2b:21:85:3d:3c:52:8f:
2c:33:b3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:32 2026 by rpki-client