Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144468.roa
File: AS144468.roa (raw, json)
Hash identifier: a2Wq3XeZ1ji/68oBmvzjz/044ep7P8FYvDOfOx0pfH0=
Subject key identifier: C8:5D:49:8B:A2:74:41:3C:AB:18:F4:4F:F2:57:56:44:B3:B3:79:45
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 75D1505D89C324238F789EBA0C78A759941705BB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144468.roa
Signing time: Mon 25 May 2026 01:20:23 +0000
ROA not before: Mon 25 May 2026 01:15:23 +0000
ROA not after: Mon 24 May 2027 01:20:23 +0000
asID: 144468
IP address blocks: 240a:a71a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:d1:50:5d:89:c3:24:23:8f:78:9e:ba:0c:78:a7:59:94:17:05:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:23 2026 GMT
Not After : May 24 01:20:23 2027 GMT
Subject: CN=C85D498BA274413CAB18F44FF2575644B3B37945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:82:d1:db:e4:41:b6:f8:7e:54:25:15:85:ed:
ef:8c:12:a7:b5:a4:f1:44:6b:46:6a:9d:7d:a0:31:
1d:97:a9:1d:fc:be:6a:8f:e4:8c:0d:77:45:85:f9:
a0:38:67:d1:25:d2:3d:93:0e:d2:47:f4:f6:f5:06:
c2:05:8b:18:3c:89:b8:3a:16:8d:e0:13:23:b9:b3:
de:24:be:a1:7a:08:80:38:75:64:5a:4e:bd:d9:09:
61:52:53:85:0a:0e:13:d8:0b:55:58:a3:58:94:75:
d0:88:9a:5e:24:8a:9b:aa:5d:eb:ce:90:99:f6:e6:
bc:f0:9e:cc:0b:48:09:e0:35:04:ce:eb:b7:24:05:
8f:10:e5:9b:24:a9:d2:f9:84:d1:a1:6d:9c:50:00:
d5:ec:66:b8:de:17:a1:96:ef:21:ce:4b:8f:69:3f:
47:e0:bd:ef:a4:44:32:a8:60:41:51:66:53:52:d5:
54:ac:41:00:03:6c:b8:5a:64:f2:d9:4d:47:b9:da:
90:92:60:b1:7e:11:4d:47:37:6a:1e:39:d6:44:a0:
ea:b9:d7:71:ec:d6:94:a8:bd:3a:54:45:43:8e:d2:
3c:86:c2:e7:0a:a9:30:07:ab:7b:d3:2b:ca:eb:e2:
17:f0:08:0c:1b:09:bb:b0:48:21:9d:85:0f:f0:80:
07:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5D:49:8B:A2:74:41:3C:AB:18:F4:4F:F2:57:56:44:B3:B3:79:45
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144468.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a71a::/32
Signature Algorithm: sha256WithRSAEncryption
94:a6:3d:5d:67:51:ab:9a:8d:7c:b6:5e:38:8b:23:c1:da:e4:
82:ea:fd:b1:f2:28:45:69:67:cc:65:52:59:ea:fc:cc:ba:94:
ff:a1:f7:4b:f6:d7:d6:4b:b8:fd:b8:5d:99:ec:23:91:05:c1:
3a:b0:89:3a:54:e6:c3:2c:23:be:2f:95:e8:52:c6:b5:bb:a4:
9b:9f:83:b7:e7:90:34:96:5f:ca:59:d3:d2:a7:94:85:98:ec:
04:8f:9c:25:0e:b6:fd:b2:21:6f:ea:a7:ae:0b:bb:d7:96:b7:
4d:6b:17:46:20:42:4b:a8:7b:f4:a3:48:a3:12:34:c0:9f:5a:
8b:4b:6d:cc:34:8e:05:5c:14:d2:46:a4:54:7a:b5:ff:8b:91:
ee:af:f4:d6:77:9e:79:ad:0d:d8:ae:b6:49:b7:95:02:ca:1b:
eb:fc:e3:ba:2f:5a:d6:ab:64:dd:11:86:73:d4:6d:c2:8b:19:
cc:4a:52:e6:35:fa:69:4e:68:fd:28:c5:f5:1f:f4:25:78:85:
6b:4b:7e:07:c0:39:85:48:68:5b:ba:77:f9:89:b4:31:9d:ef:
90:8b:a2:58:fe:5a:39:e0:20:b5:db:5c:18:e0:18:fe:3f:78:
d4:06:9c:76:9e:fa:10:a7:87:5b:e3:65:e3:7d:97:ca:5f:23:
f7:14:49:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:40 2026 by rpki-client