Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144405.roa
File: AS144405.roa (raw, json)
Hash identifier: 3N8tLxdvWYGSzm8oXyORTC4l1groaXCT3blSBYzerNc=
Subject key identifier: 99:7D:5C:5A:C7:12:06:B2:4E:43:57:05:3C:CD:1E:AD:D9:06:F5:A3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2AEC9F9D2B92DF0A47FF62E2D9A54A7098ABD3AF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144405.roa
Signing time: Tue 26 May 2026 01:13:11 +0000
ROA not before: Tue 26 May 2026 01:08:11 +0000
ROA not after: Tue 25 May 2027 01:13:11 +0000
asID: 144405
IP address blocks: 240a:a6db::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:ec:9f:9d:2b:92:df:0a:47:ff:62:e2:d9:a5:4a:70:98:ab:d3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:11 2026 GMT
Not After : May 25 01:13:11 2027 GMT
Subject: CN=997D5C5AC71206B24E4357053CCD1EADD906F5A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c1:c3:72:a8:b0:53:c8:a9:b5:33:50:a0:a5:
a6:ee:ac:3c:a5:fa:f6:68:97:b1:6c:60:e6:67:63:
e7:90:94:cd:5c:d7:e7:50:26:6c:97:3d:f7:37:2a:
1a:53:c9:bc:b1:fd:f1:96:f0:6a:9a:fb:e5:6f:72:
47:4f:ae:90:c2:83:37:b4:3c:4a:91:ef:2c:ee:0b:
04:20:17:f7:1a:a4:19:14:05:3c:5a:ad:af:e4:62:
b0:07:d9:57:68:c1:c4:a8:8e:29:55:26:3a:fd:11:
e1:70:f4:5b:fd:66:18:db:77:c5:2d:05:1c:9d:62:
c2:62:50:62:5c:9c:84:64:71:e3:36:e4:44:00:c0:
04:ed:4d:2f:f6:eb:41:a0:e0:ed:dd:ad:b8:8f:1b:
44:fd:2f:e9:cf:dd:84:10:4c:29:82:36:d0:c0:22:
cf:8c:91:90:05:a5:dc:2f:86:6a:be:c3:7f:67:4d:
c1:47:c9:2e:b9:3f:e6:d5:da:7c:dc:24:41:6d:33:
86:13:9e:90:46:1f:3f:de:14:03:9e:70:3d:60:07:
f4:8f:73:69:6f:30:7d:6b:02:5d:9d:38:90:13:07:
32:d2:9a:b4:f9:1a:03:95:66:d3:21:dc:16:44:cc:
f1:bc:e5:49:a6:3c:69:68:bd:7e:89:4c:48:dc:c2:
37:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7D:5C:5A:C7:12:06:B2:4E:43:57:05:3C:CD:1E:AD:D9:06:F5:A3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144405.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6db::/32
Signature Algorithm: sha256WithRSAEncryption
ac:27:98:69:ad:8f:77:ab:8c:65:ec:c4:58:7e:30:bf:e0:f9:
44:1d:f0:39:7b:b2:c2:a2:b7:4c:82:b3:e3:d0:59:b9:ea:cf:
96:f2:59:e4:73:98:39:a2:4a:00:c0:ec:cc:19:3a:fa:0d:5a:
9c:79:64:8f:f0:fd:4c:69:96:c0:97:7e:ef:2d:1f:21:89:36:
13:fa:79:c8:19:14:82:7b:8f:32:29:02:1a:da:ca:d9:15:e7:
46:07:32:1a:33:bf:7c:d5:94:e6:0f:c1:78:ae:0d:9d:e7:ac:
95:47:d1:07:25:e4:7e:bf:58:23:bf:cd:dd:11:52:1c:43:7f:
c7:b6:24:f7:23:a3:d8:55:10:1e:2a:d7:22:44:45:08:ac:aa:
af:f3:de:5e:e6:c0:f4:4b:c0:3e:55:6f:2b:3f:a5:23:f0:a7:
cb:2d:81:f8:c5:4c:7f:dd:c1:f5:a2:8a:e8:f2:95:f2:f8:28:
89:08:0b:d2:4c:90:e4:44:ed:26:ab:69:6b:96:21:54:9c:9f:
23:b1:56:0e:cd:31:3b:5c:fd:f3:59:13:a4:ed:f5:7c:b8:c7:
93:fd:5a:76:d3:e0:6d:79:1a:5b:89:3e:78:e5:9a:25:ee:a3:
e1:0e:73:2c:a6:10:3b:d0:42:bf:ad:09:ae:a1:36:e8:21:68:
9a:16:6b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:17 2026 by rpki-client