Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144609.roa
File: AS144609.roa (raw, json)
Hash identifier: GSZeDp9cO0TBR9YKkMTpAEtZUMnJKwSyyPyb9tKlNP0=
Subject key identifier: 0E:F4:16:41:18:A4:38:86:28:CE:0C:42:F2:42:50:AB:39:FE:96:95
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 76BC69FD13513F9574F7A4C1611E98A68BCF7BEC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144609.roa
Signing time: Mon 25 May 2026 01:38:06 +0000
ROA not before: Mon 25 May 2026 01:33:06 +0000
ROA not after: Mon 24 May 2027 01:38:06 +0000
asID: 144609
IP address blocks: 240a:a7a7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:bc:69:fd:13:51:3f:95:74:f7:a4:c1:61:1e:98:a6:8b:cf:7b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:06 2026 GMT
Not After : May 24 01:38:06 2027 GMT
Subject: CN=0EF4164118A4388628CE0C42F24250AB39FE9695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:28:13:f0:3f:bb:83:af:01:e9:56:14:aa:
a9:61:9a:31:23:7b:20:43:d1:b6:5a:65:99:79:bf:
68:69:7d:d7:86:45:f0:4f:09:36:16:15:6f:e6:83:
3e:ff:5b:08:cd:2f:26:cf:a2:4b:60:d0:53:1c:b5:
ba:d7:d6:39:51:68:0f:3f:86:50:68:d0:2d:68:d2:
7b:de:ef:22:3b:a8:fa:0b:92:fe:dd:bb:ad:a6:99:
54:18:2b:10:07:bc:de:8d:ec:91:30:07:59:56:89:
12:94:57:3a:33:77:02:ff:91:77:f5:c8:ee:6e:2e:
88:7f:35:83:b1:57:4d:27:e0:2e:9b:86:64:e0:44:
18:db:ec:bd:8d:2c:1f:07:d4:76:f0:01:76:ac:c8:
da:cf:53:00:45:8b:b5:c9:9b:0c:63:7c:c4:70:3b:
cf:af:a4:47:46:ef:76:cf:21:d7:4b:07:9a:27:6f:
ab:9b:b3:58:b8:88:14:ac:8e:a2:86:9a:33:e3:aa:
af:55:75:ae:a9:45:42:60:68:94:13:8f:33:35:e8:
c7:e8:75:dd:2b:41:a2:6b:42:d3:eb:92:b3:61:18:
eb:91:ac:7c:58:5e:e7:ef:8e:6c:0d:26:a9:87:8c:
fb:c0:bd:fc:90:e7:e3:77:b5:b9:f7:7c:d2:7c:bd:
7c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F4:16:41:18:A4:38:86:28:CE:0C:42:F2:42:50:AB:39:FE:96:95
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144609.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7a7::/32
Signature Algorithm: sha256WithRSAEncryption
6e:a1:20:49:ad:72:00:d3:bf:8a:f4:6c:16:ab:e2:e8:96:eb:
a1:37:bf:97:a1:5d:34:b1:95:e7:b6:02:d3:ce:fb:2e:01:de:
b5:9c:85:af:0b:0b:98:62:4d:49:9c:44:e6:8f:16:cf:9c:79:
34:06:f7:ba:4b:c7:4a:50:3a:25:f5:c0:f1:99:da:c4:cc:52:
cd:48:2c:c2:f7:b1:18:25:5a:6a:12:68:f3:e8:da:7c:d9:1f:
45:52:c4:e3:92:09:5e:fb:d4:8e:33:ea:f5:d4:ca:0f:f4:b0:
eb:f2:b2:c3:46:49:37:fb:74:19:85:2f:66:2c:a7:cc:3b:de:
5a:4f:52:9f:ca:92:e9:81:77:9c:f6:27:1b:47:8b:e7:84:21:
a0:41:c0:eb:e4:73:d1:a4:ba:43:c1:bf:2c:2c:81:f4:98:91:
4a:e1:98:bd:b0:c8:96:15:df:7a:ce:ef:ee:a9:e2:0d:ec:11:
19:f6:34:76:f0:fe:ba:d1:58:3c:76:ba:cc:33:af:9d:a3:cc:
75:e4:c3:e8:46:9b:0e:27:7e:9d:ad:77:67:4e:8f:4b:98:04:
16:d6:2e:6f:ac:c3:4e:08:9f:b6:29:e4:1f:98:52:4e:2c:26:
49:5b:2d:b2:22:8e:cf:05:4d:2f:f1:65:06:38:d4:1c:3d:0a:
e3:d5:10:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:43 2026 by rpki-client