Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144580.roa
File: AS144580.roa (raw, json)
Hash identifier: 1HzYBHD3oacUhJQh6GYq+Wt2q2Miz8r18hxM0X/cV5I=
Subject key identifier: 95:72:8C:08:E7:CF:8A:26:B8:48:F8:4F:FC:6D:66:88:CD:98:40:7E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 67D3845E39EFA6326A2DFE1093F6D940A57FFD3E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144580.roa
Signing time: Tue 26 May 2026 02:35:10 +0000
ROA not before: Tue 26 May 2026 02:30:10 +0000
ROA not after: Tue 25 May 2027 02:35:10 +0000
asID: 144580
IP address blocks: 240a:a78a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:d3:84:5e:39:ef:a6:32:6a:2d:fe:10:93:f6:d9:40:a5:7f:fd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:10 2026 GMT
Not After : May 25 02:35:10 2027 GMT
Subject: CN=95728C08E7CF8A26B848F84FFC6D6688CD98407E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b9:35:4b:e3:81:01:d6:b6:08:b5:3f:5d:4c:
b0:cc:77:5e:1f:29:39:0a:bd:ce:a2:0d:8c:f5:52:
72:87:5b:a6:f3:e7:96:44:86:1c:cd:10:d3:de:00:
4e:36:ab:ca:9d:cf:ec:17:da:6d:0b:de:9a:cd:27:
00:be:55:37:a9:85:c2:e9:69:8b:9f:fa:2e:fc:9b:
98:b8:c3:67:da:22:b1:c0:1c:04:9f:3c:27:45:b8:
af:85:44:0b:2f:7c:36:f6:69:29:cc:ec:3d:49:eb:
dc:a1:13:3f:88:7d:76:c6:fc:87:eb:54:8c:25:5d:
42:d1:06:8c:e4:55:78:7c:98:d1:66:b5:48:d0:d4:
40:bd:b8:87:e0:10:1e:e3:e8:71:e8:a5:05:a0:12:
c6:eb:e4:51:e0:c3:28:1f:b3:56:42:30:aa:6e:26:
04:50:09:ed:1f:52:e3:b9:df:5e:94:06:8f:9e:5c:
78:2f:f8:cf:82:d5:2d:ab:4f:59:9b:73:6d:22:54:
f4:bd:4b:30:d7:f4:e7:ad:36:c3:93:55:fe:f8:bd:
a1:e6:36:2d:2c:29:0f:50:08:f1:d7:37:1f:3f:89:
0f:e3:3d:54:0b:ca:a2:1d:48:e9:af:d0:8a:2b:33:
94:3a:94:4b:b6:91:e1:7e:03:17:54:7f:ba:3e:e1:
32:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:72:8C:08:E7:CF:8A:26:B8:48:F8:4F:FC:6D:66:88:CD:98:40:7E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144580.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a78a::/32
Signature Algorithm: sha256WithRSAEncryption
bc:af:a2:c7:8b:1a:7d:79:ac:bf:45:c2:9a:40:d1:59:fc:88:
ab:0f:ad:a5:4f:5e:62:8d:e5:aa:12:99:41:64:70:ea:08:61:
e6:db:d7:ea:11:3c:fa:09:a0:27:fa:e7:d8:23:c6:c8:c0:a3:
07:aa:8a:58:24:42:7b:50:18:f2:67:e1:9e:6e:89:98:87:19:
99:24:ef:83:70:8f:49:1b:9c:41:d6:9f:d2:3d:5a:8f:19:e0:
43:af:c7:6f:f2:04:a6:0d:fb:42:ef:b4:fb:31:18:cd:ae:ff:
29:34:48:4b:8c:a8:85:4b:fe:9a:88:a8:e4:e7:0d:4e:b1:a6:
2a:f6:3b:92:34:3b:e6:5e:da:59:8e:6a:ad:32:dd:e9:f0:25:
ce:78:47:41:21:64:03:ca:4f:37:5e:c3:f6:8c:a2:3a:ce:44:
05:70:c5:e0:cb:09:a4:89:ff:61:85:70:ea:47:4c:8a:19:1f:
37:96:6f:b8:1f:b9:12:b7:a3:53:30:7a:dd:16:b4:95:a7:ec:
5e:04:66:a3:f9:90:93:87:e7:d7:0a:7d:57:b5:a4:51:f4:35:
c5:42:08:00:14:91:a9:e5:4f:e5:7e:3e:30:09:51:f5:8f:23:
19:36:de:30:37:75:39:8f:95:be:96:3c:b3:40:75:52:8f:e4:
fb:4c:04:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:51 2026 by rpki-client