Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144567.roa
File: AS144567.roa (raw, json)
Hash identifier: KhT7iBDatQmTLtnLi7Tg5zRbYvZ+xbUDgxRmOKWavGs=
Subject key identifier: 85:F6:A7:FA:64:EC:A2:53:18:DE:C8:EA:D4:46:A9:99:B0:15:E1:95
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7A509DB54FFF4BCBD517EDD9C12AB967F4694A0F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144567.roa
Signing time: Fri 22 May 2026 07:41:04 +0000
ROA not before: Fri 22 May 2026 07:36:04 +0000
ROA not after: Fri 21 May 2027 07:41:04 +0000
asID: 144567
IP address blocks: 240a:a77d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:50:9d:b5:4f:ff:4b:cb:d5:17:ed:d9:c1:2a:b9:67:f4:69:4a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:04 2026 GMT
Not After : May 21 07:41:04 2027 GMT
Subject: CN=85F6A7FA64ECA25318DEC8EAD446A999B015E195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ef:47:d8:ec:36:dd:cc:8a:bc:93:29:79:8a:
bd:5b:22:45:95:d5:88:56:8d:55:d4:c3:3b:d1:95:
25:62:0b:1a:16:bb:13:18:a3:46:d1:e5:61:fb:90:
09:ee:58:55:5e:79:43:4d:28:89:4e:0c:96:f7:ec:
c7:25:81:b0:4c:6f:ae:4d:86:b7:a4:aa:f8:75:68:
95:4c:ac:64:5b:97:4e:a2:d1:45:80:94:21:c1:8e:
ad:67:dc:42:d4:03:09:e0:e4:7f:4c:4e:1e:e6:1b:
25:4d:0e:59:fa:95:7a:30:86:bc:69:bc:0b:25:b6:
75:95:8c:9b:e5:f9:da:a5:3f:89:70:d5:b4:69:9d:
fb:5d:e1:3f:49:bb:65:47:28:6a:9f:55:fe:24:70:
94:70:82:90:9d:dc:35:38:36:e3:2f:9c:da:fb:18:
82:aa:43:4f:07:5a:05:f2:8c:91:96:b9:3a:4e:f3:
da:57:d3:70:f2:8d:cf:0a:49:49:3a:bd:d9:97:bd:
a6:95:c7:f3:9b:85:71:a0:23:b3:3b:6a:3a:9d:c0:
7f:60:03:02:23:25:23:5c:de:ba:40:69:e8:ee:6d:
6b:a9:a4:95:94:2d:ed:7f:28:6f:0d:a0:f0:09:6b:
c0:40:cc:d1:43:d8:49:9c:c1:97:92:10:15:40:62:
52:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F6:A7:FA:64:EC:A2:53:18:DE:C8:EA:D4:46:A9:99:B0:15:E1:95
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144567.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a77d::/32
Signature Algorithm: sha256WithRSAEncryption
0f:04:7f:92:a4:dd:ef:6e:8a:79:e9:63:42:60:1e:2b:fb:9a:
fe:f1:e4:c7:46:04:97:b0:05:e2:07:34:1f:ba:e3:d1:95:72:
34:d9:3e:04:de:1e:33:af:11:1a:82:5e:aa:21:74:d6:b6:d1:
54:2a:66:a8:d1:b4:36:cc:1c:72:42:14:56:fe:3c:61:74:ba:
a1:3b:8d:bb:ff:2a:5b:cd:cb:c3:2d:50:ca:f2:ed:ee:2e:09:
1f:91:84:41:b5:6f:d4:29:9c:a7:d3:fc:4b:25:51:bf:ac:62:
14:f4:d3:3b:b0:6b:74:c4:03:93:ba:8d:7e:ec:d8:25:66:f1:
18:9b:94:c6:ed:5c:de:ce:8f:5c:a9:c3:f7:c9:97:19:42:88:
86:3e:d5:b7:44:cc:94:14:8b:11:9f:4f:47:6b:5d:56:f1:77:
77:02:d8:2e:a8:a1:55:e4:ee:c5:36:aa:1d:01:5d:87:d4:82:
bc:60:85:68:04:4b:6e:ff:30:99:f4:b9:76:6a:e9:55:54:f8:
f1:30:b9:a0:14:85:e8:b6:6c:45:f1:84:14:df:eb:a1:fe:2c:
e2:47:92:5d:ac:c4:07:7d:24:11:1f:9d:b0:fd:41:bb:ac:90:
ec:e8:cc:fe:ac:99:ee:00:17:09:02:a7:aa:bc:dc:97:6d:ed:
78:06:17:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:21 2026 by rpki-client