Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144501.roa
File: AS144501.roa (raw, json)
Hash identifier: yhXlMfoGF4Kvyf9wwyakT/v0ClT9/+Zzt01xqb2aVxw=
Subject key identifier: EB:74:DE:C6:87:3A:D5:D8:97:28:1C:82:27:88:02:18:3C:B0:5A:CC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 54286974D3D83F000433B060C349A636479A5ED4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144501.roa
Signing time: Fri 22 May 2026 02:47:39 +0000
ROA not before: Fri 22 May 2026 02:42:39 +0000
ROA not after: Fri 21 May 2027 02:47:39 +0000
asID: 144501
IP address blocks: 240a:a73b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:28:69:74:d3:d8:3f:00:04:33:b0:60:c3:49:a6:36:47:9a:5e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:39 2026 GMT
Not After : May 21 02:47:39 2027 GMT
Subject: CN=EB74DEC6873AD5D897281C82278802183CB05ACC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:10:d3:02:85:78:e4:a9:ea:10:8d:b1:54:e6:
e0:d7:07:89:11:b1:00:e1:48:59:4a:31:92:ba:b6:
50:84:35:0a:50:87:a6:18:01:d7:59:56:ab:47:da:
fb:64:62:9f:da:4c:f4:f7:4b:a0:cf:a5:c3:09:8a:
f4:90:44:d2:82:9c:f9:28:28:2a:a2:91:10:27:22:
0d:66:d6:5c:91:df:25:9c:15:c3:bd:3c:c7:7d:15:
4c:5e:6b:6a:cf:09:f1:9b:9a:47:d1:3b:d5:38:ad:
ee:fe:4b:16:e1:b9:c1:c0:e1:84:3d:b2:0f:24:c0:
5a:75:93:65:1c:07:d9:5a:41:d5:8f:48:4f:52:88:
71:80:44:1a:05:55:16:17:bd:88:39:ed:e1:96:31:
dc:1f:84:b2:46:f3:d1:d9:ae:d1:40:32:c6:24:76:
9d:2d:c6:22:29:09:16:f8:62:cf:7a:eb:79:47:ce:
79:37:f7:cc:e1:08:d6:4b:00:55:94:40:f9:6b:a6:
8b:c7:74:4a:4f:e5:e6:05:b9:12:84:f5:34:80:eb:
47:0d:dc:24:68:e8:be:53:49:c3:1a:31:3b:eb:0a:
be:dd:8a:de:61:8e:71:d0:fc:cc:9c:0e:64:27:c6:
87:fc:54:f3:92:f6:48:e3:61:e6:7c:33:2f:98:d4:
9b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:74:DE:C6:87:3A:D5:D8:97:28:1C:82:27:88:02:18:3C:B0:5A:CC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144501.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a73b::/32
Signature Algorithm: sha256WithRSAEncryption
7d:b2:78:35:ca:62:75:3e:e7:72:06:61:81:df:d5:2d:bc:cf:
b7:b8:06:94:56:03:fc:fd:d7:97:c4:f7:c1:c0:41:ca:8f:a9:
32:93:af:e8:3f:96:c1:17:25:4c:23:5b:43:47:8f:97:1f:b2:
b4:48:e4:54:bd:7e:2d:eb:cb:ac:e4:27:cd:e4:77:0f:ff:1b:
75:8c:fd:15:0c:9f:fe:33:b6:22:0f:61:1c:86:88:80:78:91:
4e:f3:4f:c0:11:02:1f:03:a0:92:42:03:3b:2d:55:85:1e:f6:
4f:f6:6e:2f:43:2d:8b:f1:22:fb:8b:14:65:69:9d:22:e8:af:
ce:00:45:b1:ee:0e:b1:2a:52:9e:85:f7:32:9d:77:5f:52:9e:
ad:22:60:d9:fb:65:2d:55:fe:45:9b:40:83:82:e5:1a:24:01:
85:7b:29:d5:6f:ae:4b:39:33:46:af:c6:54:c1:0c:a4:43:1a:
b4:5d:72:f3:7d:da:31:b3:c4:2c:5a:55:d1:67:81:22:e9:ff:
27:3d:f6:bb:70:8f:ff:ee:b8:78:bc:08:1a:ca:a9:da:90:84:
58:72:af:9a:3b:dc:62:9a:94:63:ff:2b:65:d1:cd:bb:20:d4:
e2:74:ff:ba:9a:42:24:bc:60:6e:55:15:87:78:6f:ec:38:c0:
d3:55:b1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:13 2026 by rpki-client