Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144542.roa
File: AS144542.roa (raw, json)
Hash identifier: F/TG4k2p+nPgOgTKQEvOTl86dzVgHmaMJEzNmJIyNWc=
Subject key identifier: 51:86:41:95:F0:09:A1:40:69:97:40:F2:A7:A5:85:3A:F3:CE:30:49
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3288C8F267AD042BA4422D12536150EC0C253A32
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144542.roa
Signing time: Tue 26 May 2026 03:16:46 +0000
ROA not before: Tue 26 May 2026 03:11:46 +0000
ROA not after: Tue 25 May 2027 03:16:46 +0000
asID: 144542
IP address blocks: 240a:a764::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:88:c8:f2:67:ad:04:2b:a4:42:2d:12:53:61:50:ec:0c:25:3a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:46 2026 GMT
Not After : May 25 03:16:46 2027 GMT
Subject: CN=51864195F009A140699740F2A7A5853AF3CE3049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3a:b2:aa:42:93:30:ea:96:c8:63:dc:9c:89:
77:7e:7a:56:69:3e:1f:b0:da:06:d9:ee:d1:13:5b:
75:77:23:f1:85:33:28:93:42:46:fc:90:c3:b3:d6:
f6:d9:a0:1b:37:dd:ae:df:08:8a:c9:4d:60:21:57:
c7:2c:36:b5:43:f9:64:fc:ee:21:5f:3e:9f:92:a8:
b5:e8:c5:d2:1d:e1:48:c8:48:fe:28:a8:5e:87:10:
28:70:78:f3:52:75:4e:52:bb:59:37:55:88:10:da:
79:a8:94:e6:e8:02:41:3b:e1:7b:0d:2b:50:c8:dd:
8f:f1:cb:70:01:b0:8e:36:2b:47:bf:b1:3d:95:28:
c8:99:62:aa:5a:72:3e:00:f8:aa:ba:b0:cb:6e:8c:
dd:b8:35:05:56:00:a3:fa:9b:4f:f9:88:34:84:d9:
ab:6f:62:72:82:42:fc:d4:d6:da:b7:8b:97:77:a4:
67:5f:70:c3:bc:b2:4c:38:a7:83:0b:9f:9f:8f:53:
bc:ad:b9:f1:47:16:e6:af:a9:2a:43:b9:fb:11:f8:
1b:17:99:46:9a:14:2c:04:1a:7f:81:e0:3a:10:5f:
f9:40:d9:63:0b:61:c0:21:b0:5d:d1:b3:39:0e:84:
6f:80:59:b2:4e:6e:61:92:d4:02:d8:fe:4a:fa:64:
01:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:86:41:95:F0:09:A1:40:69:97:40:F2:A7:A5:85:3A:F3:CE:30:49
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144542.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a764::/32
Signature Algorithm: sha256WithRSAEncryption
4d:c5:8c:fa:d5:8a:8e:6a:b3:5f:5c:cc:41:99:31:f8:98:4a:
ad:29:ed:ca:a9:4b:aa:56:4e:36:6b:b8:c2:bc:cb:2c:9a:8d:
b1:8f:fb:e9:92:f4:7b:ab:8f:af:85:f0:82:d5:b9:ce:e8:50:
2b:ce:e0:96:99:72:14:8e:76:a5:22:0c:0d:0d:67:5b:8f:be:
91:35:6c:e0:71:a7:9f:b1:25:9e:d7:91:b6:70:68:fc:14:c4:
5a:2b:49:4d:a7:cb:b3:5b:35:63:b3:a7:de:6e:7b:8d:92:a9:
20:de:1e:d1:10:1b:4f:9c:da:2e:38:90:e9:e8:f6:27:36:58:
a2:e8:69:f1:11:fa:dc:49:cd:e9:81:35:ed:a9:e4:54:c4:87:
dc:bb:8d:0b:57:49:b8:90:0c:40:e9:4b:f4:63:fb:46:05:a3:
0d:26:dc:67:c3:eb:14:e9:ef:d3:cc:0f:25:6a:a3:c4:d7:48:
95:78:3a:45:01:ee:05:f9:a9:09:8c:1f:a7:f9:f0:13:2f:78:
0c:08:f8:fe:3e:12:f8:56:1b:0d:8b:c7:b3:e7:0f:3e:66:7b:
18:06:77:56:69:2a:5e:f2:2a:ca:86:44:39:44:d6:4a:5e:ba:
fd:0a:dc:66:37:29:d6:de:de:99:39:ad:de:56:cb:3d:82:cb:
7c:31:d2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:36 2026 by rpki-client