Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144386.roa
File: AS144386.roa (raw, json)
Hash identifier: h0N5A31FnTY7ABWuKzJ4N8iIdNGoim6ARK8Ffu8hvQw=
Subject key identifier: 0F:53:7D:50:4E:BF:02:C0:DD:F2:67:0E:11:C6:43:F7:59:ED:E4:CC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5DE7FE38F5102F84E3FACCB97564EAD69312DF2B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144386.roa
Signing time: Fri 22 May 2026 04:26:56 +0000
ROA not before: Fri 22 May 2026 04:21:56 +0000
ROA not after: Fri 21 May 2027 04:26:56 +0000
asID: 144386
IP address blocks: 240a:a6c8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:e7:fe:38:f5:10:2f:84:e3:fa:cc:b9:75:64:ea:d6:93:12:df:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:56 2026 GMT
Not After : May 21 04:26:56 2027 GMT
Subject: CN=0F537D504EBF02C0DDF2670E11C643F759EDE4CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8e:6b:5d:81:fa:c9:c7:06:86:55:98:c6:94:
a9:70:ca:39:cf:26:db:7d:29:48:eb:57:43:0e:67:
d9:4a:f9:2a:fc:6e:62:ed:08:44:07:5d:cd:92:6a:
31:ba:fe:6b:5a:62:84:21:be:e4:c3:1e:d3:9a:67:
e1:e4:ba:a5:d8:22:22:9e:6a:10:2d:2c:51:90:d8:
66:9f:1b:96:f3:2d:0f:18:e9:76:a3:e2:3c:29:80:
13:66:98:31:93:2a:32:76:12:c9:33:d5:1e:7f:70:
a3:69:2f:e5:90:34:e8:5b:22:56:49:eb:34:1b:88:
a8:cf:12:aa:0e:cb:8a:62:75:17:f3:27:1f:48:64:
18:0e:1a:c2:2e:8d:89:aa:55:3b:73:cf:29:db:64:
77:32:4b:bd:c0:fd:a4:de:d1:8c:27:47:62:92:25:
ab:01:36:f9:98:b8:33:e5:89:ed:23:0d:a3:40:20:
97:ca:97:43:ab:29:ad:ab:49:1e:6f:65:08:85:21:
9f:e0:9d:ad:02:3c:c9:0f:ae:37:5d:d6:02:14:6e:
6e:83:f5:95:8a:13:12:62:9e:c2:e4:9c:74:8a:89:
2e:6c:50:fc:9b:d1:e4:63:3b:d2:70:e2:9a:85:ba:
7c:72:fa:6e:d7:b3:be:08:9f:b0:ac:ff:06:07:67:
7e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:53:7D:50:4E:BF:02:C0:DD:F2:67:0E:11:C6:43:F7:59:ED:E4:CC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144386.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6c8::/32
Signature Algorithm: sha256WithRSAEncryption
4c:5f:45:6d:1f:86:6e:68:0c:91:25:d1:b1:3a:87:98:f1:71:
59:25:13:37:94:e2:4a:1d:45:89:c0:c0:e1:25:b1:43:09:f5:
ec:ff:b8:4d:ad:69:3a:82:98:39:ea:a3:09:c7:05:f6:f2:61:
18:92:0e:11:bf:d9:82:1a:98:44:b0:4d:d2:d1:57:9f:1b:0e:
70:87:93:70:2a:ba:46:f4:f3:50:e4:d1:fb:e7:a2:ac:d4:21:
cb:1f:0c:3e:f1:51:aa:5f:8d:4b:5c:33:54:d2:ed:21:e7:d2:
e9:32:c9:d8:39:6e:bf:bb:90:c8:bd:1e:3d:8b:83:07:cb:f1:
fd:47:8d:eb:57:3d:c0:c1:6b:60:51:ea:4b:6c:d8:12:66:c2:
40:a4:ec:a1:5d:1b:38:bb:c6:39:e0:b7:ce:71:a8:4b:2c:81:
5a:33:64:40:df:8e:2e:50:58:96:f8:83:ee:25:25:9d:0f:2d:
43:b2:1c:61:94:bd:c7:71:11:27:f8:9f:5c:2d:36:38:d1:b6:
06:81:f1:f3:76:3f:bc:7a:e5:ed:91:d0:59:2c:7a:f3:41:04:
a2:f8:28:35:3b:fe:f6:77:97:65:23:fe:55:f3:a1:c1:c4:8c:
39:d5:d2:52:eb:1e:ff:11:37:b4:8e:c4:f0:1e:64:b6:61:61:
55:53:36:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:21 2026 by rpki-client