Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144390.roa
File: AS144390.roa (raw, json)
Hash identifier: LmRiBKNNYit5p1HNqBFCezOMrxhQfak7s6DIlV29Bik=
Subject key identifier: BE:0E:4F:EB:1B:9C:C3:AB:C5:48:BD:D7:F7:7B:A5:CB:A7:F0:2E:8F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 28EADFACD53017A89347E65F2E1BA32BA1FABF68
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144390.roa
Signing time: Mon 25 May 2026 01:51:14 +0000
ROA not before: Mon 25 May 2026 01:46:14 +0000
ROA not after: Mon 24 May 2027 01:51:14 +0000
asID: 144390
IP address blocks: 240a:a6cc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ea:df:ac:d5:30:17:a8:93:47:e6:5f:2e:1b:a3:2b:a1:fa:bf:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:14 2026 GMT
Not After : May 24 01:51:14 2027 GMT
Subject: CN=BE0E4FEB1B9CC3ABC548BDD7F77BA5CBA7F02E8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:21:1c:53:0b:e5:84:88:07:62:5a:a1:b7:d1:
af:bc:08:46:13:db:e5:da:00:3b:f6:69:fa:39:41:
96:0e:ae:24:82:46:0a:43:4f:52:fc:4e:26:cd:7c:
27:0a:67:65:46:ee:31:8b:eb:93:15:30:42:39:58:
51:1c:3a:9f:d5:a5:af:9d:9b:ee:64:b0:57:9a:a9:
3d:9d:2b:c3:61:a4:06:f4:27:27:a4:ca:c0:ab:f7:
e9:d3:a0:8f:d8:9f:06:de:41:20:cd:ab:a9:85:38:
52:17:4f:7d:f3:a2:28:ab:8d:f0:c5:eb:df:55:b2:
e7:e8:46:ff:7e:c2:85:ed:3a:e2:30:59:27:a3:f1:
60:cd:03:ef:b8:ba:f5:8c:a7:c7:fc:ca:17:fe:d2:
f1:a3:dd:d7:c3:6b:36:8f:f2:48:f4:f1:97:44:c2:
91:ad:89:9a:2f:8a:9a:d7:6e:9d:f1:8a:7e:84:eb:
7d:fa:0c:47:32:fc:61:4d:ee:df:ca:cf:db:d4:6d:
a0:e7:11:32:f5:fc:15:38:c6:d1:20:cf:f8:42:05:
dd:b6:7a:ca:52:3c:0a:2a:80:55:32:2e:a1:6d:c6:
85:68:8e:e3:3d:b0:38:66:14:2e:49:cf:b8:c4:21:
7e:fb:4f:38:5a:34:f9:30:5e:c2:48:91:23:4f:f0:
c3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0E:4F:EB:1B:9C:C3:AB:C5:48:BD:D7:F7:7B:A5:CB:A7:F0:2E:8F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144390.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6cc::/32
Signature Algorithm: sha256WithRSAEncryption
2a:75:85:20:71:11:9b:22:2d:e2:25:d8:3d:88:f1:bd:48:d1:
63:6c:94:ee:f5:a5:8c:a4:10:c0:98:c7:47:01:c6:89:0f:5b:
63:c4:79:3c:a6:6e:1c:8b:10:85:30:4d:4a:c9:89:40:55:94:
c4:f1:5c:2d:9e:58:9f:8c:d8:56:8e:55:b3:7f:cf:67:4e:19:
4c:42:bd:b5:e7:4c:e5:1d:f4:49:e2:42:7d:29:ba:23:d2:39:
52:dc:84:0c:7f:ed:ae:13:b5:16:c3:4f:b1:6a:bb:3b:70:44:
5b:f6:8f:71:a6:04:d6:2d:28:85:90:61:47:d3:e9:3d:bc:1e:
92:60:18:11:93:97:c3:27:1a:09:c6:47:95:55:5d:2f:65:02:
e7:53:28:94:c1:bd:b3:12:8b:17:04:b8:bc:2b:86:4d:6b:75:
11:56:b3:47:f5:54:c2:aa:6d:01:2d:43:a7:7c:8f:f5:93:68:
33:d3:02:c5:6a:a0:4b:28:42:51:5f:4f:34:16:7c:0e:d4:37:
3b:3b:9e:66:be:4f:2b:43:63:0a:06:c6:48:4d:f6:5f:6e:9c:
48:45:ed:a7:9d:63:e8:83:7f:1d:6d:4e:10:93:e2:b7:f2:76:
6e:83:49:5c:ac:7e:77:93:c8:2c:43:fb:b9:bc:f3:bc:b1:62:
27:a1:dd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:50:02 2026 by rpki-client