Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144384.roa
File: AS144384.roa (raw, json)
Hash identifier: 3w3DPFkrfJo5L6IYAWnNJzpwYuTKreYXnvPG5P5EXF8=
Subject key identifier: B6:6E:7E:40:E9:9F:B3:5A:1C:09:07:85:AF:46:E0:34:58:5B:A7:EF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1D630D07797F426AAB7EC076929DFEDFAA578A6F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144384.roa
Signing time: Fri 22 May 2026 07:24:48 +0000
ROA not before: Fri 22 May 2026 07:19:48 +0000
ROA not after: Fri 21 May 2027 07:24:48 +0000
asID: 144384
IP address blocks: 240a:a6c6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:63:0d:07:79:7f:42:6a:ab:7e:c0:76:92:9d:fe:df:aa:57:8a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:48 2026 GMT
Not After : May 21 07:24:48 2027 GMT
Subject: CN=B66E7E40E99FB35A1C090785AF46E034585BA7EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:43:2c:36:59:d1:44:b6:65:bb:3b:b7:3c:
2f:fd:d7:b0:88:fa:d8:72:49:d0:b3:5c:f5:01:06:
75:ae:0a:f7:12:8f:e8:7c:1e:01:62:90:8c:dc:8f:
fa:a5:1c:dc:25:16:ae:db:06:19:8e:be:b1:70:6a:
c8:32:75:aa:9e:f1:4d:62:25:05:20:b8:e8:c8:93:
9a:f8:65:29:c1:d7:e2:f3:b0:aa:39:ac:61:fe:0d:
4b:d4:e1:ab:9d:5f:8d:df:27:23:4a:24:b8:dd:9c:
83:68:77:f1:64:b9:ef:b5:b3:42:e4:50:e6:a9:09:
f8:05:55:34:ac:d6:ef:21:4b:8c:8b:00:94:8c:c0:
b9:b5:72:b0:b0:44:54:82:f7:97:76:17:19:f0:dc:
98:fa:58:a7:28:24:16:d9:f6:34:98:62:a7:3c:26:
72:f6:32:71:63:6f:93:c8:a4:61:8d:91:79:24:53:
50:28:31:51:42:43:18:63:74:c5:75:52:4a:b3:cd:
67:03:bc:b5:1c:91:33:70:fc:4e:e1:55:e5:78:f3:
06:1d:e4:a5:e6:93:9f:50:15:c8:c5:44:ac:03:f8:
54:9f:97:00:0f:a3:34:ce:c0:45:98:40:32:40:22:
f3:ec:6d:f1:7a:b3:24:64:ab:9a:f4:75:81:dd:58:
30:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6E:7E:40:E9:9F:B3:5A:1C:09:07:85:AF:46:E0:34:58:5B:A7:EF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144384.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6c6::/32
Signature Algorithm: sha256WithRSAEncryption
55:9e:9a:7e:61:55:27:a4:30:68:24:8c:f4:d3:4c:cf:2d:05:
01:2a:3e:a4:ca:2d:39:5b:2a:86:8a:86:98:7d:06:0c:c7:24:
dd:0b:c3:05:4e:2b:cf:dd:6b:57:63:c0:0e:f1:83:76:17:b1:
21:05:12:71:23:40:35:33:03:3a:32:82:3c:c7:e6:78:e4:62:
be:5c:90:ac:4d:95:b7:d7:f4:b6:e3:86:9c:ff:26:9d:81:c5:
03:7c:6e:9e:fd:eb:50:82:6d:f9:3d:6d:5c:39:ef:24:35:05:
bd:85:00:57:55:e0:6b:39:a3:05:a5:be:fd:9f:64:62:6d:6b:
55:5d:fb:00:88:b1:c1:5b:97:33:4b:1d:59:18:5f:44:6f:2b:
9b:6d:ea:83:4f:19:d2:38:42:e3:d6:41:e6:80:ea:a9:8b:1c:
b9:f5:9c:0f:ae:40:3e:43:76:46:8f:18:86:3c:c2:ad:13:cd:
fb:8a:e4:b3:fc:53:25:c1:05:08:f3:ae:ff:46:ab:66:ca:2e:
1d:c8:f9:43:71:63:b8:94:e6:5a:ad:ad:af:fc:22:1b:58:37:
9b:6f:3f:8b:85:1e:a6:34:bf:69:24:a8:5c:3c:9d:6b:e3:1f:
ee:97:60:a1:16:3e:ef:d7:f1:d3:53:11:8b:07:be:1d:d7:57:
82:1a:21:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:39 2026 by rpki-client