Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144410.roa
File: AS144410.roa (raw, json)
Hash identifier: l200b+p9+o1QWvfhWqoQU/7VYDAuMM8mzt3eEiX3k4U=
Subject key identifier: 17:80:DF:62:FD:64:10:2F:52:70:5C:32:E6:10:95:55:CB:73:18:17
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6073FBAFD6F6B16AF89AC3486EC1EB15FC8AB40F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144410.roa
Signing time: Fri 22 May 2026 06:46:16 +0000
ROA not before: Fri 22 May 2026 06:41:16 +0000
ROA not after: Fri 21 May 2027 06:46:16 +0000
asID: 144410
IP address blocks: 240a:a6e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:73:fb:af:d6:f6:b1:6a:f8:9a:c3:48:6e:c1:eb:15:fc:8a:b4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:16 2026 GMT
Not After : May 21 06:46:16 2027 GMT
Subject: CN=1780DF62FD64102F52705C32E6109555CB731817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:53:1b:46:07:7e:a6:f7:44:e1:c6:78:f8:73:
3e:a4:8d:a4:cc:47:d6:3a:60:cf:57:b4:bb:c5:d5:
a1:63:18:6c:7b:16:b6:00:f2:66:88:1b:8a:fd:eb:
48:d6:a6:d4:14:f1:02:91:b2:05:bb:ad:83:fa:0d:
96:0e:41:64:35:39:d4:1a:c6:83:c2:51:42:80:f3:
37:f6:1d:18:f8:a3:42:2f:bb:c1:82:ea:b5:b2:17:
e5:27:97:3f:31:7e:bc:f6:71:b4:6d:57:b6:69:41:
36:d1:fd:a3:2e:f9:df:35:03:e3:74:e5:92:c9:85:
22:ca:d3:dc:9a:46:ab:75:5c:dc:cf:a4:7b:91:47:
af:7e:41:97:14:42:15:e4:2c:f2:af:22:19:91:11:
86:21:ce:ae:0c:f4:1c:ae:a4:d8:fc:24:6e:ed:c4:
3f:3c:2c:b5:f7:0c:0e:1f:b3:3b:76:4c:11:96:0b:
9f:4d:1a:85:dc:9b:64:84:a0:38:e2:bb:b8:96:cb:
19:a7:0c:51:b6:39:b2:32:7d:78:2e:4d:f6:c0:6c:
e1:94:2f:7a:ba:46:4c:47:0f:1d:33:e3:c4:0a:a2:
80:a8:e2:40:cb:66:bb:c5:8c:f8:e9:66:0f:75:9f:
c7:c6:ce:51:e2:98:ac:04:31:17:01:78:fe:58:66:
ed:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:80:DF:62:FD:64:10:2F:52:70:5C:32:E6:10:95:55:CB:73:18:17
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144410.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6e0::/32
Signature Algorithm: sha256WithRSAEncryption
17:24:fe:b3:3d:63:f0:18:5b:74:30:c7:22:7c:02:05:c9:26:
81:7e:e2:d0:fc:12:ee:4a:e8:85:0c:64:28:74:bb:c3:ad:2b:
61:85:1f:bf:c1:b0:90:83:c7:57:ef:90:01:81:d4:11:6c:c7:
50:1b:cf:79:5f:71:e9:3b:89:01:e7:64:53:f8:76:6c:f1:c1:
5d:e0:34:6a:f4:02:62:f3:51:98:da:4a:41:ba:63:c0:c7:32:
9c:f6:02:2d:71:ce:39:c9:e8:9a:a2:b8:1b:e9:64:44:ed:fd:
07:a8:9f:01:34:62:68:67:4e:c6:39:fa:6d:de:51:ae:49:b2:
e7:d6:39:1b:f1:91:a9:f6:6d:69:70:70:24:d9:c1:62:26:05:
e4:b2:fc:be:20:4f:fd:30:37:9f:70:f3:df:c4:51:fc:6d:a7:
55:15:1b:3b:7d:06:80:f8:48:4a:f4:68:e9:6d:e0:f0:17:04:
ad:c2:1a:c6:a9:a1:ff:bf:5c:65:be:88:e8:64:47:de:01:f9:
db:cc:c7:4b:ed:e9:e8:e1:4e:fa:2c:76:fc:d8:f9:d4:ff:92:
8c:c2:bc:1a:4c:24:0f:43:93:f5:22:86:03:5a:a4:b6:03:76:
2d:08:4e:33:5e:36:83:8d:69:32:ff:bb:81:37:ed:8a:d5:2b:
22:b7:11:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:58 2026 by rpki-client