Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144531.roa
File: AS144531.roa (raw, json)
Hash identifier: 2PPP7OafAwR6GARGaQTP9DH98cwLt8YtaBKYirwHvuo=
Subject key identifier: 0E:20:45:C7:23:05:52:F8:09:5C:AE:65:6F:93:F4:63:E4:10:9E:03
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1DA7929B92D59D477190E15D8A9F8DDF69D303E4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144531.roa
Signing time: Mon 25 May 2026 02:22:13 +0000
ROA not before: Mon 25 May 2026 02:17:13 +0000
ROA not after: Mon 24 May 2027 02:22:13 +0000
asID: 144531
IP address blocks: 240a:a759::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:a7:92:9b:92:d5:9d:47:71:90:e1:5d:8a:9f:8d:df:69:d3:03:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:13 2026 GMT
Not After : May 24 02:22:13 2027 GMT
Subject: CN=0E2045C7230552F8095CAE656F93F463E4109E03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d8:d3:76:59:a5:b8:27:55:c3:b9:45:82:69:
39:41:b6:aa:8c:cc:d5:8e:27:68:b8:ab:de:52:f9:
5e:4a:60:13:73:af:d9:8d:f1:45:8c:61:70:a4:9b:
b9:50:f1:4b:44:bf:1d:af:0b:ec:17:e7:90:85:e4:
0f:53:32:23:b0:67:e0:4f:26:5f:33:6f:fe:59:7a:
6b:29:cc:05:e4:eb:99:ca:9f:0c:09:a7:d3:c7:e7:
f0:38:6c:06:c6:f8:65:c9:49:ca:e4:15:8c:26:20:
07:fe:6d:fe:4c:a1:05:48:1f:3e:56:2c:8a:ae:99:
9f:f7:18:7d:ad:d6:0d:0b:a5:98:4a:4d:7f:d9:c4:
73:20:68:6f:f3:50:77:be:a5:71:d0:4e:57:cb:17:
01:fc:b4:88:16:22:d2:e1:52:ca:55:f5:1c:ab:6a:
53:c6:bf:9f:f0:78:0c:5b:1e:15:a8:22:9e:95:90:
b7:b3:2e:12:a7:68:83:4d:19:96:6a:de:6d:45:0d:
6e:04:1b:78:7f:27:11:ac:df:e3:8d:58:af:a8:d0:
27:55:e4:ec:93:f9:47:33:1f:61:15:bb:db:ac:57:
a5:f1:69:a8:ad:31:83:b3:32:ba:7f:9f:17:fb:04:
52:76:29:b5:af:5e:c7:f6:08:56:b2:d9:c9:7a:ed:
71:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:20:45:C7:23:05:52:F8:09:5C:AE:65:6F:93:F4:63:E4:10:9E:03
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a759::/32
Signature Algorithm: sha256WithRSAEncryption
8e:4d:5e:d1:5e:b3:cd:ff:dd:9b:c3:be:87:e3:64:c2:5b:e7:
d5:4c:a0:18:01:44:b9:8d:f4:ef:05:2c:3b:98:66:a2:4e:51:
75:d1:9d:9e:59:58:b8:20:89:00:99:16:73:22:8b:b1:09:8d:
04:f3:87:3d:46:97:af:8e:a9:e1:70:15:89:10:4e:6f:60:f9:
24:2a:24:b1:23:c5:1a:1f:80:33:d2:e7:b0:08:55:f2:e4:67:
bd:6a:12:45:c7:36:c3:83:17:45:9a:6d:f5:37:35:1c:d3:f9:
18:b5:99:5e:83:f8:07:84:91:cd:30:5c:03:0d:dd:05:15:51:
d6:a5:2b:98:c7:e9:70:43:f3:71:c5:ce:0e:29:80:42:4e:b4:
77:b2:2a:ba:ee:58:12:04:3e:e3:bb:42:22:0d:ad:97:fc:a2:
88:7f:e1:00:fa:60:1a:2a:b7:f7:c4:e6:f3:54:14:4b:a5:11:
51:95:94:ba:29:d3:32:75:89:0b:31:00:7c:96:ad:d9:39:bf:
52:18:87:cd:35:61:cb:92:11:06:02:ad:0b:a6:8e:f2:c8:12:
fa:e4:f1:9a:65:22:ad:5b:1e:f2:04:f5:9e:94:41:34:66:ae:
f7:97:f3:c7:45:62:42:b5:15:6a:44:0e:13:92:79:29:35:cd:
fc:f6:6a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:57 2026 by rpki-client