Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144572.roa
File: AS144572.roa (raw, json)
Hash identifier: SNW2i4JtmiCfm7C2XGctznvuJ3kNiwO7CMYByiznAjo=
Subject key identifier: 97:9F:D3:A6:E1:63:36:F1:7C:77:2C:75:9D:6A:6E:EE:D5:1D:B8:BD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7CE4F7CBB9ABAA25BBD45D24984F794DB61E63D5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144572.roa
Signing time: Fri 22 May 2026 07:08:51 +0000
ROA not before: Fri 22 May 2026 07:03:51 +0000
ROA not after: Fri 21 May 2027 07:08:51 +0000
asID: 144572
IP address blocks: 240a:a782::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:e4:f7:cb:b9:ab:aa:25:bb:d4:5d:24:98:4f:79:4d:b6:1e:63:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:51 2026 GMT
Not After : May 21 07:08:51 2027 GMT
Subject: CN=979FD3A6E16336F17C772C759D6A6EEED51DB8BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:66:fe:57:95:55:50:9e:88:e2:2c:34:bb:83:
c7:06:8d:3a:58:e3:6f:7e:90:46:8f:e6:b2:6a:fd:
e6:d1:4a:24:1e:df:a2:e3:43:54:86:da:76:03:db:
13:60:f3:c3:d1:3b:8f:c2:00:59:6e:a7:af:fc:6b:
9e:e2:21:d0:7b:2b:31:34:fa:80:6a:1e:29:5d:e1:
9a:40:03:eb:03:05:c6:94:1e:ac:3d:36:75:27:a3:
95:f4:cb:73:11:dd:14:82:e6:e3:d4:43:85:b2:0d:
b1:f3:42:e8:2e:2b:35:e7:91:81:c1:02:96:0e:00:
bf:c0:b1:6f:b4:eb:f2:41:fb:9c:46:cc:49:ae:4d:
ad:f7:66:a0:19:64:50:fd:91:14:03:52:d6:b9:9d:
db:ec:0e:4c:b7:a6:57:08:7e:3d:c6:ed:f0:1f:55:
8e:40:06:ae:4c:fb:6d:af:85:27:ae:8b:64:d9:64:
c6:17:f2:d3:ef:ce:3e:77:4d:a5:f2:64:e8:84:05:
88:dc:6d:49:55:08:d7:f6:1a:d1:40:76:62:36:ed:
3f:4b:b7:6d:57:c8:2d:8d:bd:ae:0a:db:74:31:2a:
b2:c7:13:40:1e:76:06:e5:e5:42:ae:37:8e:27:78:
1c:d4:df:c3:ab:04:80:47:a1:f4:8e:c3:fc:30:1b:
07:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9F:D3:A6:E1:63:36:F1:7C:77:2C:75:9D:6A:6E:EE:D5:1D:B8:BD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144572.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a782::/32
Signature Algorithm: sha256WithRSAEncryption
8c:fb:7a:5c:67:4f:61:ed:11:24:20:b9:aa:f6:af:88:d3:c2:
b6:a3:32:00:bb:78:40:56:61:92:c3:fd:e4:ea:d9:65:11:5d:
36:81:5a:ee:7e:60:d9:eb:e9:3a:ca:03:43:4e:12:79:ab:d7:
ab:76:b5:d7:50:bb:43:74:9d:75:35:90:c3:b7:5a:21:db:0c:
85:42:e4:db:e3:a5:60:78:cf:9d:f2:55:ec:4e:92:c7:a5:c5:
7e:bb:04:af:2b:41:fb:55:e2:7f:35:48:0f:e5:9f:16:78:df:
a7:88:d6:15:bc:5d:dc:e5:ab:4d:27:8a:d9:65:8b:f5:0a:4a:
ea:d3:ab:80:a3:88:fe:de:bc:2c:a7:cf:48:d9:db:31:b4:69:
d8:42:93:9f:20:97:89:4c:02:cb:d1:4e:5a:89:10:6c:e5:3b:
91:e3:d5:a0:cf:2b:b1:9c:0d:40:19:da:64:d2:6c:a3:24:fb:
a0:3f:ae:0a:3c:38:a9:f1:62:36:e2:4f:9a:4a:6e:1e:c5:28:
48:42:af:a7:d7:64:ce:0c:cd:43:ee:00:84:50:31:0f:37:89:
50:19:67:46:bb:0b:a1:b4:76:25:3e:8d:a6:3e:dc:c0:5a:0c:
c1:3d:25:89:c6:24:57:20:cd:7e:cd:3e:f5:47:ab:dc:bd:fe:
b1:f0:f2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:28 2026 by rpki-client