Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144352.roa
File: AS144352.roa (raw, json)
Hash identifier: gMu04HhAFynPB9PsXvu5Gc4CaVphL7g50EYqHnMDLG4=
Subject key identifier: 2C:0B:C9:7B:77:54:2E:50:69:A1:11:5D:79:33:9D:AA:96:DF:30:09
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 29BFB86A9C034F360E97823C717E7D6898B4494D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144352.roa
Signing time: Fri 22 May 2026 04:27:18 +0000
ROA not before: Fri 22 May 2026 04:22:18 +0000
ROA not after: Fri 21 May 2027 04:27:18 +0000
asID: 144352
IP address blocks: 240a:a6a6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:bf:b8:6a:9c:03:4f:36:0e:97:82:3c:71:7e:7d:68:98:b4:49:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:18 2026 GMT
Not After : May 21 04:27:18 2027 GMT
Subject: CN=2C0BC97B77542E5069A1115D79339DAA96DF3009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8e:29:f0:a7:75:cc:99:c4:26:49:13:93:59:
05:27:07:6f:96:18:e9:d9:17:0c:a6:18:9a:4e:35:
67:44:19:65:20:4f:d9:85:68:40:50:5a:a2:b6:c1:
01:dd:83:13:53:18:04:e6:13:8b:e4:f4:8d:6c:3b:
39:0d:22:c3:08:6f:73:78:60:62:39:14:5d:b7:49:
fb:da:99:1e:7b:a2:c1:9d:be:ad:24:04:25:b4:70:
9f:99:3f:69:fc:62:51:6f:03:0a:43:2c:a8:59:d0:
b2:56:d7:6e:5f:a7:02:fc:ba:36:55:44:35:ff:97:
53:a4:21:75:c6:95:00:61:77:63:ee:58:f8:9d:4a:
db:50:ce:66:3d:67:7d:9d:12:4f:1b:8c:d9:b8:34:
88:b4:5c:d8:0b:ab:01:c8:94:14:f3:d4:f1:de:75:
8a:2a:b9:0b:3e:1c:f6:56:81:4f:d4:7f:fa:08:45:
33:8c:1a:c0:66:be:0e:ae:b2:31:1c:6a:13:4b:30:
fc:15:85:9d:2e:94:f5:e3:ee:90:0a:3a:1a:38:e6:
c1:1e:39:ba:45:62:5a:23:4d:78:8f:11:07:7e:b6:
2f:58:a8:e7:f6:48:79:a1:c7:51:76:41:05:46:0a:
8b:71:07:f1:7f:17:7f:20:8b:4a:fc:bb:61:e2:6f:
0d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0B:C9:7B:77:54:2E:50:69:A1:11:5D:79:33:9D:AA:96:DF:30:09
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144352.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6a6::/32
Signature Algorithm: sha256WithRSAEncryption
73:b3:7e:93:9e:15:e1:25:94:f5:cc:40:51:51:f9:11:51:87:
98:94:15:e1:e1:cf:5f:c2:ab:e0:2f:6d:63:fe:75:04:6b:10:
e0:f4:88:8f:b1:cf:ff:84:c5:f9:c7:bf:d5:7c:23:4f:24:d0:
2f:c2:06:e8:72:14:83:6e:44:40:8c:10:22:0e:81:da:0e:99:
a2:b8:20:31:b7:db:ac:88:ce:6f:d5:ad:d8:b1:a3:6b:77:db:
8f:fe:a9:27:d7:c7:8d:0e:fb:32:06:38:c9:8c:f3:51:09:a2:
a4:db:ae:f3:90:70:2a:81:28:d8:1f:f4:c6:3c:36:e6:93:9f:
a6:09:f1:f1:99:a9:83:d2:06:3a:c9:ee:eb:2f:2a:ad:ae:5e:
f3:17:00:fb:34:43:aa:1f:46:a6:29:4b:70:20:11:56:70:56:
2e:e6:c5:03:0f:d5:40:67:1f:a4:20:14:f9:fc:03:0d:0e:49:
ae:12:74:2f:f4:6f:5a:b2:aa:2d:f1:d7:4d:d0:f9:fe:b4:e0:
55:83:63:ab:c0:6a:c2:56:47:d3:75:a9:de:f3:b7:69:9e:e3:
a5:65:e3:f9:f1:6a:06:22:8f:9e:19:dc:69:0d:93:ec:8a:95:
e3:5d:72:e4:68:6b:bf:a0:4c:cb:a2:65:1f:2f:31:20:48:5f:
f2:de:ab:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:38 2026 by rpki-client