Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144625.roa
File: AS144625.roa (raw, json)
Hash identifier: KF7B7tYE80dVpvx7fYI23VsukWPusmSqscf6dK8BeE0=
Subject key identifier: 0B:B1:C8:94:A8:B8:84:3F:39:A0:AD:34:F4:0F:DB:24:A8:59:C5:2E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 47A568E50FF423BE60464A5D624A503E0F73169C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144625.roa
Signing time: Mon 25 May 2026 03:19:29 +0000
ROA not before: Mon 25 May 2026 03:14:29 +0000
ROA not after: Mon 24 May 2027 03:19:29 +0000
asID: 144625
IP address blocks: 240a:a7b7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:a5:68:e5:0f:f4:23:be:60:46:4a:5d:62:4a:50:3e:0f:73:16:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:29 2026 GMT
Not After : May 24 03:19:29 2027 GMT
Subject: CN=0BB1C894A8B8843F39A0AD34F40FDB24A859C52E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:d9:45:e4:54:6e:e5:12:41:fa:aa:38:b5:
fc:2b:41:0e:be:d4:b3:c6:b9:52:e1:7c:a0:a6:6e:
86:41:60:43:84:52:f7:b1:97:5c:9d:9e:b2:27:9f:
4c:58:65:56:51:53:cd:25:6c:09:7c:46:a4:63:f5:
86:06:b9:29:0a:a5:12:64:db:20:4c:b9:36:38:0f:
79:14:b6:41:bd:a8:bf:5b:82:4e:bb:58:0b:7f:cf:
ac:10:b5:a9:7d:5f:57:5f:e3:a3:6f:aa:f8:45:8a:
92:72:92:55:3c:6b:b5:89:ee:b5:6a:fa:28:36:05:
9b:76:58:e7:42:b8:57:2d:7e:72:db:b4:6b:c3:d2:
fd:55:7f:ab:5f:4e:4e:5e:06:c8:7b:e6:09:2d:16:
1a:98:b3:01:a7:6d:b3:42:7d:c7:95:f2:3b:5a:57:
b2:70:62:f0:69:88:2c:5d:68:c7:eb:67:11:60:1b:
41:80:60:3d:24:ea:89:61:00:6c:0e:5b:4f:c8:8f:
0b:67:60:6b:98:37:00:49:89:c6:46:e5:59:c8:19:
76:21:4c:81:1e:52:12:84:59:36:8e:72:a0:22:3e:
1d:ab:c3:04:71:e5:10:cb:10:20:b0:93:4e:6f:47:
ae:f2:de:2d:d1:ba:6e:28:71:47:b0:4c:88:fb:7f:
6c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B1:C8:94:A8:B8:84:3F:39:A0:AD:34:F4:0F:DB:24:A8:59:C5:2E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144625.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7b7::/32
Signature Algorithm: sha256WithRSAEncryption
39:44:41:4b:7b:f6:39:97:5f:36:23:80:00:79:97:04:00:36:
07:05:95:3c:43:6a:4e:d0:78:aa:c4:25:1e:db:f3:9e:9a:d1:
fd:2e:8c:bd:b5:68:9a:09:ec:2f:47:bc:a6:c6:ee:3d:6e:59:
cd:4b:c9:7c:b3:33:2b:16:5b:69:1a:3e:86:31:0a:c1:8f:42:
f1:24:3a:52:52:ec:39:8e:c4:1e:20:74:9d:05:e1:35:68:43:
d5:f3:cb:a0:ca:de:8f:c4:d5:67:79:9f:af:bd:c1:67:9a:42:
55:c1:64:8f:a2:a2:2c:ea:7c:a0:69:ea:a0:2d:63:52:73:4c:
85:05:f6:33:67:9b:e3:92:fc:1f:d1:fb:7c:d8:06:c9:a0:2c:
91:5d:fa:7d:a5:cf:61:57:dc:9e:1f:18:46:f7:d8:17:34:f5:
9f:d4:59:f9:75:a0:48:24:50:3e:0f:b5:63:b4:b4:40:88:7b:
90:ed:01:fe:5a:65:27:52:be:6e:fc:1b:0d:4c:43:ba:36:77:
e1:c1:d5:0f:98:95:b6:03:a7:ef:10:bc:01:43:c1:c6:12:50:
0b:9d:92:d8:10:bb:0c:ff:75:cb:f5:47:7f:8d:26:b1:89:7f:
49:d7:07:06:1d:6a:38:70:2c:ea:4a:7c:50:b7:67:f1:28:2b:
85:33:1e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:33 2026 by rpki-client