Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144537.roa
File: AS144537.roa (raw, json)
Hash identifier: wxzjqjFkbQpfbsx1de1vdy6ViKX6Nn0014VODpWsU84=
Subject key identifier: 3F:54:06:8A:A2:3A:98:44:B2:25:22:2B:2A:B1:B4:22:84:10:65:CA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3CF0D1C0C283E3B94210E8198B23E124F3A45DF5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144537.roa
Signing time: Mon 25 May 2026 01:20:15 +0000
ROA not before: Mon 25 May 2026 01:15:15 +0000
ROA not after: Mon 24 May 2027 01:20:15 +0000
asID: 144537
IP address blocks: 240a:a75f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:f0:d1:c0:c2:83:e3:b9:42:10:e8:19:8b:23:e1:24:f3:a4:5d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:15 2026 GMT
Not After : May 24 01:20:15 2027 GMT
Subject: CN=3F54068AA23A9844B225222B2AB1B422841065CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2a:39:09:b1:38:74:63:40:97:f0:32:18:0f:
7f:7b:23:88:3c:d5:ef:49:62:cc:21:2e:84:07:bd:
83:12:9a:e5:a4:b8:58:a0:0f:0f:45:0d:a5:35:a6:
6c:89:a4:f0:dc:0f:3b:8d:ee:11:8b:c9:4f:8e:49:
9e:60:37:c5:0c:9e:1e:bd:dc:8a:a2:16:3e:df:7b:
1c:a1:bf:bf:45:13:9c:e1:68:5d:73:2c:e5:ed:4f:
d1:d5:00:29:cb:57:ab:4f:93:a0:33:ee:de:da:4e:
00:0f:31:8a:70:ab:fd:fc:76:2e:10:35:c0:17:65:
6b:44:81:81:aa:89:de:ae:92:18:66:82:0e:03:8d:
f5:3e:af:be:fb:e4:07:e0:a1:d8:ac:db:6f:72:7e:
3c:54:e8:e3:42:3d:42:aa:bc:cb:a6:b2:41:67:e3:
58:f3:45:c7:a6:a2:c0:ea:52:97:fe:42:36:b2:3b:
cc:35:84:4b:7e:8c:d0:49:95:e9:3d:d7:84:56:a0:
3f:54:e2:55:2f:c7:5a:6d:ed:81:c2:ed:b3:d4:87:
1b:f3:05:d1:1a:1c:6e:04:7a:96:65:a3:72:47:82:
64:af:86:34:0c:8e:46:17:4a:68:7f:84:54:58:99:
e1:b1:ac:a2:f8:8f:e4:63:13:26:c4:6e:8f:95:b0:
da:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:54:06:8A:A2:3A:98:44:B2:25:22:2B:2A:B1:B4:22:84:10:65:CA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a75f::/32
Signature Algorithm: sha256WithRSAEncryption
59:da:4b:2b:b7:06:5c:f1:b4:e9:58:bb:16:dd:99:2b:d2:38:
bd:21:1c:7c:75:32:33:37:13:6a:90:27:2a:73:e1:d4:3e:59:
29:80:8b:c5:71:81:03:9d:bd:58:39:f7:e6:3a:56:4f:eb:b6:
e2:f3:30:b1:da:7b:79:26:4e:5a:13:15:2a:f2:72:59:6f:ea:
ec:bb:1f:34:95:8e:ed:1f:0b:fe:68:c0:b5:87:58:e2:b2:05:
d8:32:e2:9b:0b:5f:e8:d2:49:d4:75:36:ad:0b:a0:92:90:59:
21:f0:01:c6:10:aa:37:91:9b:25:3a:1f:e6:c6:e9:d0:7b:33:
9e:fe:11:de:79:5f:23:15:2c:aa:84:21:7f:ed:43:91:fa:47:
5e:78:96:5d:79:65:83:b4:96:98:c7:95:eb:61:a4:db:be:93:
f3:d9:05:ac:48:4d:54:b7:15:6f:ab:77:23:40:ea:1a:2d:c5:
cc:58:55:b6:f3:c0:41:49:04:49:81:82:13:5f:c0:19:68:05:
7a:5d:7e:c8:a9:bf:ef:9f:a4:9b:0e:dd:1e:d2:cf:80:99:ea:
21:33:71:c8:4b:22:9a:9a:f7:20:f5:79:ab:6d:9c:5d:1b:04:
50:d9:cf:f5:8b:8d:64:f0:16:97:d5:5c:a1:a6:50:7f:63:4e:
1f:53:d1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:42 2026 by rpki-client