Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144351.roa
File: AS144351.roa (raw, json)
Hash identifier: SRta0vCzKck/X6H3pLV74N5GwEbzDga18zRfHTf0O/Y=
Subject key identifier: 4A:A7:85:6F:02:9C:02:F5:C0:47:26:C3:3F:71:02:E1:44:B5:91:1B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2A3F7735AE66EFA3FAB1B2E86FC218731DD57ED5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144351.roa
Signing time: Tue 26 May 2026 06:12:41 +0000
ROA not before: Tue 26 May 2026 06:07:41 +0000
ROA not after: Tue 25 May 2027 06:12:41 +0000
asID: 144351
IP address blocks: 240a:a6a5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:3f:77:35:ae:66:ef:a3:fa:b1:b2:e8:6f:c2:18:73:1d:d5:7e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:41 2026 GMT
Not After : May 25 06:12:41 2027 GMT
Subject: CN=4AA7856F029C02F5C04726C33F7102E144B5911B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:80:9e:6a:cb:f1:da:f9:57:06:65:d1:30:92:
c8:5d:80:d3:d0:e0:6a:8a:b5:93:ea:c2:52:50:46:
7d:90:c9:50:7a:cc:45:a0:82:3c:fc:c8:20:ad:45:
cb:2f:d8:71:26:32:02:ee:80:c3:76:40:28:ed:89:
39:1f:de:4b:31:7b:a5:4b:21:d6:d0:ba:50:06:b2:
18:05:4c:35:70:c1:13:f6:d0:6c:87:a1:56:69:38:
e2:42:f7:b0:ca:8d:f1:d6:08:ab:35:0b:b6:7b:55:
93:aa:13:e3:b6:36:50:aa:66:9b:f7:e0:9e:88:93:
56:b5:28:03:ca:d7:70:32:34:1a:59:e1:91:0e:73:
c9:09:2e:c8:52:ef:1a:1b:25:65:40:05:75:e3:95:
60:71:04:b1:e0:3f:cb:ce:99:18:6b:dd:7c:55:d0:
e9:3a:aa:c7:4f:4a:7c:e3:d2:cf:e4:1a:d2:87:cd:
40:e4:c2:e5:37:56:e6:43:b6:0b:77:50:98:b0:dc:
3a:ef:91:01:e1:1e:24:f6:48:37:f5:3d:b7:2a:d8:
6b:44:7e:31:5e:7d:38:7d:a9:d9:fc:ba:98:1f:02:
42:00:da:45:17:b4:45:0c:e9:d5:44:f1:38:bf:cc:
d8:df:4f:96:68:61:a6:b5:d4:7b:c3:be:45:56:3f:
19:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A7:85:6F:02:9C:02:F5:C0:47:26:C3:3F:71:02:E1:44:B5:91:1B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144351.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6a5::/32
Signature Algorithm: sha256WithRSAEncryption
98:8c:aa:99:4e:17:17:14:21:14:00:4c:10:55:ed:d3:9c:e2:
c3:96:33:90:fa:21:15:36:0d:4a:09:40:90:77:8a:c3:8f:92:
e3:70:ea:94:d0:12:92:90:fb:0d:c0:39:24:3d:1e:37:32:0b:
6d:74:d6:ef:d8:09:27:d9:ad:eb:0e:0b:02:f7:bf:6e:bd:18:
b0:9c:74:ee:f9:7a:09:29:60:f1:7a:7e:1a:d5:72:33:61:f5:
b7:7e:2b:c8:38:eb:b9:4e:51:d0:90:15:a0:87:b6:d3:ea:dd:
44:e3:5c:39:7e:4f:2d:54:1a:96:2a:98:f0:4c:d3:c7:9f:b5:
34:1b:b7:9f:ab:a8:9c:d7:96:41:a9:ec:5a:ea:99:72:5c:aa:
90:b7:ce:54:77:b5:69:e7:d4:9e:a0:53:24:3b:cb:75:57:9c:
db:6b:10:34:0e:4a:de:fe:0d:9a:a2:fa:a8:57:d3:69:d1:26:
0a:66:3b:d0:c2:e9:fa:ca:28:23:b2:4b:ae:31:db:19:14:e9:
e3:7f:43:b4:f6:c9:00:f9:6d:ad:fa:be:57:34:d6:d9:92:42:
92:d2:37:40:ee:45:f2:2e:f0:aa:57:8a:c2:fa:3b:46:4e:08:
fe:21:a2:e0:82:71:d7:73:60:0e:1f:88:72:80:92:2f:8b:fc:
91:17:8a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:47 2026 by rpki-client