Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144376.roa
File: AS144376.roa (raw, json)
Hash identifier: yJw8ucyzX91DEi6qxKYPjWroZ5+Mvb8Bb8n2JVjjnFs=
Subject key identifier: 66:32:9B:3D:34:CB:7B:16:B4:2C:07:49:1F:F5:A9:B5:50:08:17:10
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 65DBD4BD86DA6AC157004D936662065909B2968B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144376.roa
Signing time: Fri 22 May 2026 01:50:24 +0000
ROA not before: Fri 22 May 2026 01:45:24 +0000
ROA not after: Fri 21 May 2027 01:50:24 +0000
asID: 144376
IP address blocks: 240a:a6be::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:db:d4:bd:86:da:6a:c1:57:00:4d:93:66:62:06:59:09:b2:96:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:24 2026 GMT
Not After : May 21 01:50:24 2027 GMT
Subject: CN=66329B3D34CB7B16B42C07491FF5A9B550081710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9d:59:78:36:a2:a3:51:3d:1a:e9:2e:3c:5e:
56:0a:2e:03:15:24:62:ab:84:82:7c:ab:4a:46:47:
d6:6b:74:34:bd:34:7f:f9:7a:e7:68:60:8f:52:6c:
c8:08:a5:19:36:61:ae:03:b8:50:62:0c:4d:aa:82:
d4:4f:db:14:83:76:78:61:61:4d:61:a3:3d:a1:4d:
09:09:00:6b:b0:a5:11:93:4c:7f:d9:5a:53:09:e8:
27:e6:f7:0f:c4:95:44:b0:48:24:07:ae:ce:5d:cb:
e0:88:59:4c:b6:04:33:58:b4:0e:4b:3f:a2:8e:d5:
f2:72:d0:19:52:e4:b9:e7:41:74:26:0c:b6:f8:c0:
42:cc:c1:2b:6c:85:48:7e:3e:bf:b7:db:b7:6e:fc:
36:08:b5:67:0d:f7:64:89:bd:b7:da:04:ca:d1:86:
3a:28:1b:22:45:18:7c:5c:94:1d:9d:be:61:d4:1c:
06:4e:13:ff:89:c0:91:80:18:71:3d:65:cc:4c:90:
ec:aa:76:15:63:86:24:20:3a:5c:4d:9d:70:6e:8e:
0a:18:35:62:a0:3e:a9:23:91:25:26:62:86:87:9e:
8a:c0:83:b5:14:87:ea:59:bc:14:ff:20:5b:04:87:
7b:29:14:37:dc:03:d0:49:87:ab:a6:b6:64:51:74:
b1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:32:9B:3D:34:CB:7B:16:B4:2C:07:49:1F:F5:A9:B5:50:08:17:10
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144376.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6be::/32
Signature Algorithm: sha256WithRSAEncryption
4a:d0:99:46:11:81:84:4d:c0:02:80:1a:e8:6d:97:d4:bb:14:
36:a2:62:44:1d:61:c7:f8:19:2e:da:8c:45:a0:0f:db:71:33:
df:35:3a:bd:23:57:1b:af:2c:9e:02:34:d9:ab:f1:e5:99:44:
0c:45:f0:8f:b5:8b:93:0b:27:a4:e5:c9:06:6e:6c:1e:eb:3d:
73:f0:b3:a4:b2:d8:ad:ff:51:f2:f0:79:60:05:06:9b:15:29:
53:7a:93:78:2c:5c:f7:31:0c:6e:66:4d:0b:30:8e:5f:54:89:
27:26:04:8e:64:c8:f0:d4:76:91:fe:8e:d7:64:97:1c:32:7d:
ef:49:06:74:e0:42:ed:6e:4b:e3:1c:c2:cb:d3:98:a1:2b:be:
b7:09:c8:d4:a0:2b:7d:2b:e5:a1:1b:ac:61:05:04:69:09:f1:
33:40:fd:36:54:9e:37:cb:aa:a7:4b:cf:44:04:07:e3:28:8f:
76:ca:a6:3d:d5:c6:89:84:4b:f8:c2:6a:c3:cc:97:a4:fd:53:
77:5d:20:41:3d:99:fd:4f:7d:83:9f:d9:56:23:0d:c7:e2:78:
b8:11:83:6b:eb:35:9f:9b:39:ec:44:ce:d3:6f:e8:bf:79:5d:
1e:c3:3d:7c:b3:36:42:dc:c9:75:2d:6d:6d:71:7a:46:50:7b:
0f:8d:43:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:21 2026 by rpki-client