Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144420.roa
File: AS144420.roa (raw, json)
Hash identifier: FmOF8GjMhV50TMrADrp7sZeAvgFlZnD/CnPZvJpe5gM=
Subject key identifier: 9D:E4:BF:76:4F:6A:57:99:7B:F2:B5:BF:8B:7B:22:ED:0E:41:FB:CA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 761C22E506994FD3859019D78C561FE9BAFC5147
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144420.roa
Signing time: Mon 25 May 2026 03:19:38 +0000
ROA not before: Mon 25 May 2026 03:14:38 +0000
ROA not after: Mon 24 May 2027 03:19:38 +0000
asID: 144420
IP address blocks: 240a:a6ea::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:1c:22:e5:06:99:4f:d3:85:90:19:d7:8c:56:1f:e9:ba:fc:51:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:38 2026 GMT
Not After : May 24 03:19:38 2027 GMT
Subject: CN=9DE4BF764F6A57997BF2B5BF8B7B22ED0E41FBCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bf:e4:93:e1:af:45:46:8f:b9:21:5d:e3:41:
2a:73:89:7a:1c:eb:96:e7:69:5d:4f:fb:ef:f4:e5:
50:db:d0:0d:6a:f6:06:14:a3:9a:59:a6:b4:ef:15:
df:ce:a7:bd:7b:29:5d:3d:d7:bb:db:e5:cf:2b:47:
64:c0:a4:30:a7:aa:da:06:48:49:ac:a3:bb:0b:4c:
37:92:50:3d:53:d6:1d:60:45:56:c1:13:3c:18:e9:
1f:30:16:1e:5c:70:3b:e7:01:86:cb:60:e5:75:16:
f7:e5:93:e3:73:33:0a:35:ac:de:82:f3:4c:58:88:
69:65:15:ba:db:d1:b6:f6:92:7f:f1:b3:ad:20:03:
4f:bb:1d:c7:17:78:e1:40:53:19:03:aa:71:ae:eb:
de:b5:d1:f9:ec:af:a0:ac:59:7b:b2:31:df:f8:18:
8a:f4:98:cb:75:01:22:4a:16:50:25:bd:45:83:93:
b5:af:fe:a2:c0:c4:93:9b:ea:12:de:b6:6c:a6:8c:
c5:2d:10:5d:84:c4:70:b9:38:96:94:81:d1:7a:00:
ec:ec:be:2f:25:8e:4c:3e:be:c6:f2:6f:a2:b2:51:
6e:b9:57:4f:c8:46:98:98:64:37:8b:80:c3:56:ee:
b1:69:15:4d:b5:02:2c:c8:b4:f8:ae:75:33:eb:61:
be:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E4:BF:76:4F:6A:57:99:7B:F2:B5:BF:8B:7B:22:ED:0E:41:FB:CA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144420.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a6ea::/32
Signature Algorithm: sha256WithRSAEncryption
1b:33:77:4b:ac:3d:d9:33:8a:e5:fe:4f:0e:75:a3:e4:55:43:
e9:69:ca:a0:fd:ae:f9:5a:b9:1f:79:5d:d3:08:72:62:f8:5e:
33:df:d5:2f:15:6b:64:43:f6:cb:d3:0b:53:f4:50:1e:c2:d7:
48:eb:22:86:0e:cb:d6:e1:cc:f4:ad:e6:27:56:49:c1:21:e2:
61:e2:9a:e8:95:46:8d:b2:f6:39:45:eb:98:32:9e:c5:dd:15:
97:62:b8:42:e7:37:e8:94:af:e7:62:a9:75:a5:b3:b8:9e:99:
72:e3:4f:ae:5b:35:6b:04:34:42:62:31:0e:83:c6:05:02:39:
d6:ae:4f:26:23:23:11:74:e0:b9:ea:c8:e2:ee:40:ff:f6:1e:
c4:0a:10:19:07:bc:7a:3e:c3:8c:63:bd:19:04:da:87:2e:38:
44:9f:f3:b3:26:d3:58:11:d0:88:ea:75:49:04:30:a5:1d:47:
e6:c2:7a:d5:e7:aa:65:42:58:19:e5:71:57:d0:fe:be:ea:c6:
46:61:f3:db:b1:21:34:f2:79:34:16:df:e9:91:b4:17:b4:9e:
6e:16:49:b0:9d:82:77:36:08:d4:45:4f:22:66:71:80:f2:6a:
a9:b0:14:7e:48:48:4c:0b:50:2f:14:5e:d4:39:56:e6:df:80:
c8:cc:fc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:24 2026 by rpki-client