Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144477.roa
File: AS144477.roa (raw, json)
Hash identifier: X6XpL2J+V07zevME9IB8VPXMGn2f2N1SSqiti43yDHg=
Subject key identifier: AC:C1:2A:A0:4C:B5:B1:B0:25:C6:DE:AC:A0:97:38:09:9A:D1:56:40
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 703E413A5300926EEEDC241668B466ED748F38F7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144477.roa
Signing time: Mon 25 May 2026 01:38:04 +0000
ROA not before: Mon 25 May 2026 01:33:04 +0000
ROA not after: Mon 24 May 2027 01:38:04 +0000
asID: 144477
IP address blocks: 240a:a723::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:3e:41:3a:53:00:92:6e:ee:dc:24:16:68:b4:66:ed:74:8f:38:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:04 2026 GMT
Not After : May 24 01:38:04 2027 GMT
Subject: CN=ACC12AA04CB5B1B025C6DEACA09738099AD15640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:46:6d:5b:86:c5:ff:0f:19:de:99:89:81:
4e:d2:28:32:d2:01:14:82:1d:f9:71:9e:27:55:c1:
51:ed:8f:e4:31:38:da:76:39:f6:30:13:c7:98:40:
05:68:3f:62:18:20:1b:1a:47:9b:89:33:2f:a2:33:
74:05:8e:52:26:59:50:22:31:6f:a1:6c:ed:12:0a:
be:ec:bd:eb:32:ee:9d:a1:78:76:ea:fd:e1:0c:41:
49:75:51:ea:43:09:e4:82:0a:27:d7:06:36:3e:9a:
e8:69:10:dd:b6:19:97:a0:83:ee:af:e2:67:76:1b:
b3:74:d1:90:fb:4b:59:ed:3a:7a:96:22:75:80:bf:
80:ee:3a:6e:8f:80:47:bd:78:c9:89:ef:a3:70:87:
e5:2e:14:17:8d:67:73:3a:4b:ed:b2:99:0a:e4:e8:
53:dc:53:7f:ce:cf:7d:65:aa:3c:65:a5:20:f4:f5:
bc:3c:9d:c7:9e:0c:dc:3e:56:13:32:95:d4:60:b9:
f7:77:15:91:b0:3f:56:4a:d0:f4:ee:24:7e:2a:ad:
a5:78:22:04:44:a3:bc:2c:73:e0:c9:ff:91:2c:98:
73:ca:e7:f4:2d:30:1f:e6:a3:8c:83:66:49:84:3c:
c0:48:56:00:ca:a5:b8:15:67:ea:2b:80:e1:f9:ee:
f2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C1:2A:A0:4C:B5:B1:B0:25:C6:DE:AC:A0:97:38:09:9A:D1:56:40
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144477.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a723::/32
Signature Algorithm: sha256WithRSAEncryption
2c:d0:bb:31:41:36:48:9a:22:5d:67:06:a5:b4:f2:ab:33:07:
cb:64:9b:19:c3:40:c5:fa:69:74:3d:b6:dc:9c:86:7b:be:cc:
66:1e:d1:8a:f9:83:b9:41:5c:45:36:ca:9b:a6:37:e1:84:ef:
e5:eb:f0:cf:50:97:96:73:3e:15:da:eb:85:b3:5d:a5:74:9a:
09:fa:2a:72:8b:51:7f:68:6e:04:9e:0c:5f:73:69:25:2f:61:
ac:9f:77:86:a5:9f:6c:bf:ef:92:91:6b:f9:b1:cd:08:36:b5:
61:c1:75:46:5c:65:26:a6:14:f3:74:61:b8:93:1b:d2:79:08:
f5:a1:5b:e9:b4:bd:e0:cc:3a:a5:9c:0a:ff:d1:48:77:fa:54:
b1:3f:65:18:aa:b7:fb:78:0c:10:e1:f5:a8:f8:eb:b4:1f:d6:
38:25:40:88:2e:0c:a9:c2:88:14:56:b8:3b:43:23:17:cd:bc:
c4:00:28:8b:ec:b0:cc:a6:b5:e2:1c:e7:5b:d4:b5:d9:e9:72:
eb:6b:dc:d8:28:34:9c:45:86:74:22:e6:26:09:de:69:c1:fa:
88:05:1e:cc:45:47:f7:71:d1:88:52:d7:8d:1f:4b:85:13:d4:
aa:25:20:ee:ea:21:1e:a7:fe:23:0f:38:98:e0:64:15:db:75:
52:20:bd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:30 2026 by rpki-client