Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144453.roa
File: AS144453.roa (raw, json)
Hash identifier: ZZoPtj4+DCN6A38RKH5mogtMfQOkNxHOCQsaP8NStYk=
Subject key identifier: 25:8A:CA:B5:BB:AF:E9:A5:9F:34:D4:F7:0A:EE:39:3D:F2:6D:5D:8D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6491AA7DDB0187CB2AB1494DEA3DCF58EBD76632
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144453.roa
Signing time: Mon 25 May 2026 06:28:43 +0000
ROA not before: Mon 25 May 2026 06:23:43 +0000
ROA not after: Mon 24 May 2027 06:28:43 +0000
asID: 144453
IP address blocks: 240a:a70b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:91:aa:7d:db:01:87:cb:2a:b1:49:4d:ea:3d:cf:58:eb:d7:66:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:43 2026 GMT
Not After : May 24 06:28:43 2027 GMT
Subject: CN=258ACAB5BBAFE9A59F34D4F70AEE393DF26D5D8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:4b:ed:8a:c6:bc:74:a6:39:14:d9:62:10:
9d:7c:fa:43:c4:55:db:68:06:eb:5a:f8:47:cd:ce:
59:23:a9:9b:e6:a5:be:7d:2a:db:c8:4f:9e:b4:e5:
cd:bf:99:88:4b:40:5d:41:d3:78:5d:6e:0f:c7:c0:
ee:5e:a2:1f:c0:92:4f:23:0d:de:17:0c:c0:1f:f7:
bd:ef:d6:e7:f9:3a:38:a7:bb:1d:10:63:60:2f:31:
51:f3:a1:31:ea:d6:35:d7:ea:fb:5b:75:c0:12:ea:
c7:5f:19:14:77:9f:17:85:73:75:c4:27:60:9f:9b:
df:ca:5c:05:79:48:e9:77:e2:86:3f:07:8a:73:18:
e6:c6:61:5c:fb:23:22:2b:d1:c1:9e:72:44:e0:e8:
d3:9a:86:06:fc:ef:8d:58:cd:73:13:36:ee:5e:29:
28:d8:41:00:a5:2a:97:ab:57:d3:77:9f:3d:79:08:
e2:d0:3d:05:04:40:a3:5e:ba:cd:ce:44:99:a8:61:
66:52:7a:84:97:3c:3f:f3:bf:0c:3e:4b:a8:8c:6a:
00:6c:61:60:cf:60:0a:d1:62:b6:9a:85:08:ea:aa:
21:e8:6c:70:9b:79:7f:96:34:97:c2:ab:02:bc:3b:
62:5b:63:0e:77:54:7a:e3:02:03:8b:41:ef:1d:69:
df:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8A:CA:B5:BB:AF:E9:A5:9F:34:D4:F7:0A:EE:39:3D:F2:6D:5D:8D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144453.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a70b::/32
Signature Algorithm: sha256WithRSAEncryption
4a:df:1f:d7:36:3d:ac:43:d8:38:ee:22:a2:92:af:ac:39:ed:
ca:db:39:21:0f:89:79:19:58:be:51:3e:e8:34:7f:6a:5e:ce:
48:a0:02:38:1a:ff:83:6a:b2:1a:68:11:32:5c:93:58:be:cc:
be:b6:4f:ff:6a:8c:e1:15:11:21:33:59:1d:82:db:4a:75:aa:
0f:13:c2:84:74:9f:c0:d7:b0:c8:d1:22:dc:8a:e3:2e:c7:fc:
bb:6b:29:7b:e8:a3:42:30:aa:6e:a1:18:f9:42:a6:cc:23:5d:
f7:59:ed:6a:11:f4:64:f8:ae:af:99:f5:b7:51:7c:1a:ba:13:
a3:fb:59:c6:57:a0:f7:9b:d1:5b:fe:41:e1:45:c9:9b:e6:5c:
fb:95:11:d0:8e:e2:6b:5c:bc:ac:09:55:ec:b1:c7:b1:15:f7:
d0:e1:63:15:52:9f:5e:10:f2:9e:7f:a4:ae:c1:81:03:f0:31:
89:4d:8b:ea:85:a6:30:0d:3e:ce:fc:40:95:51:9f:cf:03:d0:
65:c9:fd:6b:bf:b4:5b:25:fb:6f:69:02:b1:08:82:14:8d:a7:
ad:9b:27:d8:ee:19:7d:26:dd:31:97:c3:82:89:ce:b7:8f:10:
6e:a2:b3:67:bb:86:f2:3a:42:c2:58:36:b5:82:f7:92:2e:c9:
dc:e4:0b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:58 2026 by rpki-client