Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144549.roa
File: AS144549.roa (raw, json)
Hash identifier: ERd0hW9xgWUC3HtlFs+hZJOT8q1SfBX5M6ntLUx3Mhg=
Subject key identifier: FF:ED:82:D2:78:F8:63:4A:59:7B:AB:43:69:7E:2A:28:E6:7B:92:F4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 02637BBE6C91FB91BDE2EFDD802EC1F0132FD37D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144549.roa
Signing time: Tue 26 May 2026 03:16:51 +0000
ROA not before: Tue 26 May 2026 03:11:51 +0000
ROA not after: Tue 25 May 2027 03:16:51 +0000
asID: 144549
IP address blocks: 240a:a76b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:63:7b:be:6c:91:fb:91:bd:e2:ef:dd:80:2e:c1:f0:13:2f:d3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:51 2026 GMT
Not After : May 25 03:16:51 2027 GMT
Subject: CN=FFED82D278F8634A597BAB43697E2A28E67B92F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ca:d6:a6:9b:1f:8e:7d:26:39:09:c4:57:ba:
e1:eb:1e:b0:e3:50:57:1a:09:19:d4:56:83:ea:a8:
57:d9:fa:f3:d8:36:71:13:9b:a4:77:71:6a:67:b4:
47:8b:26:67:4c:69:99:51:0b:35:2b:43:dd:75:37:
fc:28:a2:92:1c:2f:6c:27:47:e5:da:e8:4f:0f:96:
c1:55:cb:93:cf:18:ae:fb:0e:f9:0e:fc:4a:78:2c:
cb:a3:e7:94:b4:04:5a:93:dd:8f:82:c7:3c:08:8a:
20:84:28:08:68:a3:72:eb:71:50:2a:99:1a:e7:d3:
1b:a9:4f:15:b1:0c:79:85:a6:00:e6:39:14:05:96:
54:f2:d3:11:2c:fb:b1:55:d9:83:28:7d:37:cb:b2:
85:59:74:dd:ab:1d:c0:ed:09:98:38:1d:c2:fe:f1:
d1:eb:90:dd:95:b2:10:8c:d2:2d:d4:63:e2:61:a1:
31:90:9c:d8:a9:6d:dd:0b:7f:b9:57:c6:f9:be:6c:
e8:73:05:b6:0d:eb:b4:5c:d4:06:18:52:03:d1:fc:
9e:d4:df:b7:3f:d4:48:70:e5:95:d8:96:e8:28:89:
40:37:b0:9e:b4:01:c4:63:c0:19:71:91:e4:90:2e:
af:f3:4c:70:4a:12:f1:cc:db:fd:b1:33:8b:e5:b4:
27:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:ED:82:D2:78:F8:63:4A:59:7B:AB:43:69:7E:2A:28:E6:7B:92:F4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144549.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a76b::/32
Signature Algorithm: sha256WithRSAEncryption
82:c4:12:d6:b4:d1:16:3e:3c:cd:27:b1:d1:3f:64:f6:cc:da:
17:d0:a1:42:58:07:bf:ec:2d:76:4b:96:64:ee:29:2e:c9:da:
54:da:72:ec:a1:ec:51:03:e1:9e:d2:a1:b6:18:f4:ee:4f:b4:
ac:90:73:5c:b2:fd:5e:cd:70:d2:c7:dc:e2:e1:39:b9:95:27:
7c:61:d7:b7:a3:59:44:d5:f7:02:98:95:9a:63:fb:08:40:75:
98:66:27:c0:51:24:20:03:a6:30:60:8f:df:21:bc:5f:24:9d:
82:5f:ec:e6:66:d7:5b:55:24:42:b1:bb:2e:a4:39:ac:d0:07:
c0:a8:a0:34:56:c2:f8:2c:78:0d:9a:97:66:5e:e5:44:b3:68:
e8:51:b2:41:3f:0b:c3:0b:d4:3c:7e:09:bf:1d:56:3b:a7:4e:
e9:91:cf:32:8a:96:84:7c:81:b2:fd:33:ec:3d:c4:66:0f:96:
4d:bc:c1:a5:5b:62:47:c6:f8:18:af:4d:0a:18:04:94:74:38:
dd:3a:14:ca:b8:b5:4b:4d:b6:13:9a:4a:5a:4c:66:06:94:3f:
cf:48:d8:31:98:56:c4:62:b5:28:f3:3e:54:dc:89:18:aa:bd:
b4:a4:ce:40:51:a0:22:3b:ce:68:2f:5a:dd:21:85:5d:b5:53:
01:65:03:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:47 2026 by rpki-client