Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144552.roa
File: AS144552.roa (raw, json)
Hash identifier: wMrhwfP208dOLHOHdWCUpIz8thECbgi+5RQpcYXAlQk=
Subject key identifier: D1:E4:1B:54:12:15:32:1B:21:53:0B:8D:E8:66:6B:EF:76:B6:D3:D2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 15285EDE982C71D7CD596D9858F9A29930F65433
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144552.roa
Signing time: Tue 26 May 2026 01:13:16 +0000
ROA not before: Tue 26 May 2026 01:08:16 +0000
ROA not after: Tue 25 May 2027 01:13:16 +0000
asID: 144552
IP address blocks: 240a:a76e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:28:5e:de:98:2c:71:d7:cd:59:6d:98:58:f9:a2:99:30:f6:54:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:16 2026 GMT
Not After : May 25 01:13:16 2027 GMT
Subject: CN=D1E41B541215321B21530B8DE8666BEF76B6D3D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fd:ad:dc:ec:ec:6e:4c:92:93:48:d8:da:a9:
f9:fd:42:38:e0:6c:2c:60:93:c6:99:24:0f:90:b3:
67:ff:46:d5:b5:3e:7d:d2:64:13:a4:53:14:02:fa:
7d:dd:79:bb:bd:17:c6:d3:28:12:c5:cb:74:41:54:
49:c6:5f:79:39:cb:ff:66:10:51:1c:bb:7e:d1:e2:
d1:37:0f:f2:d3:18:ca:42:70:9c:36:46:98:86:87:
40:52:10:33:e3:92:46:1b:4b:c6:f8:5e:05:b5:96:
73:fb:e8:4f:5a:11:a0:6e:c6:a0:f9:43:1f:fe:20:
a0:20:e4:46:d7:8e:ea:34:df:79:b1:c6:0e:39:c6:
f8:5a:eb:5b:8f:3e:8b:a1:da:07:a7:27:67:d2:dc:
0d:76:89:8d:75:ac:e7:32:4e:5b:5d:b9:a6:7a:31:
a6:f8:b9:02:ec:87:91:21:ea:a1:86:77:1a:14:76:
60:13:54:fe:18:44:1c:f8:77:69:10:6c:fd:91:60:
88:65:23:ef:4c:0b:b5:05:a6:3f:16:c2:7e:14:68:
11:cc:97:16:81:34:5b:2a:8f:47:a5:4f:92:2d:83:
f4:7b:ce:ee:3f:f4:08:2d:3b:b6:eb:96:07:0d:c6:
8b:14:18:c5:46:f1:31:8a:54:2e:de:04:7a:54:b8:
a2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E4:1B:54:12:15:32:1B:21:53:0B:8D:E8:66:6B:EF:76:B6:D3:D2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144552.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a76e::/32
Signature Algorithm: sha256WithRSAEncryption
7d:e4:83:2c:11:99:b8:70:aa:6a:64:d6:d4:d2:1a:12:07:1e:
f9:ed:32:20:32:85:b5:fb:d7:5c:f2:33:92:ac:82:ce:a7:e2:
1f:3c:e6:c6:37:19:9c:c4:a9:99:94:d8:df:e2:1d:1e:ef:eb:
4f:bc:29:66:aa:45:86:d6:d1:c1:2b:71:31:8b:dc:d6:e1:2a:
9e:9e:4f:8e:09:6c:ee:7f:8e:5a:52:05:75:ac:26:74:97:8b:
62:60:9d:1a:b7:1b:08:2f:fa:18:f1:63:2f:ca:ff:1f:41:71:
26:05:ac:6d:66:65:2e:43:21:fc:82:e1:8f:ff:de:cb:6f:a4:
70:bd:e4:a7:18:93:19:30:6f:dc:ab:50:3d:4e:c4:0e:3d:c8:
8b:72:d3:5f:cf:c7:4f:9e:ad:8c:4b:16:91:c3:c0:f7:8c:29:
4a:9d:9a:c4:bb:f1:97:5e:83:f4:eb:70:fe:e1:4b:84:c1:12:
0c:3b:ba:11:74:18:3a:11:71:64:c2:7b:be:16:a8:da:ae:c4:
77:b9:c0:af:4b:a8:29:32:2a:35:56:b4:14:9b:8b:b4:78:12:
1d:55:3d:c7:55:a6:fc:e4:bd:55:71:1a:c6:15:34:74:c7:cd:
2c:0b:40:75:27:62:d8:e7:0b:a4:1f:4d:69:65:7e:eb:1b:bc:
06:b6:4e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:51 2026 by rpki-client