Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144633.roa
File: AS144633.roa (raw, json)
Hash identifier: aummdXHM/4COwirC6N7toaLNP6Fc+fzWFJF6MxDo4/0=
Subject key identifier: 83:BA:18:0A:50:2B:6D:3D:5B:0B:20:E0:5C:34:45:9B:7D:C3:ED:B7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 69CAD168BA671FA0EC718B14426FB0E55F11CC00
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144633.roa
Signing time: Fri 22 May 2026 07:25:05 +0000
ROA not before: Fri 22 May 2026 07:20:05 +0000
ROA not after: Fri 21 May 2027 07:25:05 +0000
asID: 144633
IP address blocks: 240a:a7bf::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ca:d1:68:ba:67:1f:a0:ec:71:8b:14:42:6f:b0:e5:5f:11:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:20:05 2026 GMT
Not After : May 21 07:25:05 2027 GMT
Subject: CN=83BA180A502B6D3D5B0B20E05C34459B7DC3EDB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:71:39:bd:d2:a8:63:96:f7:6d:27:8a:d6:
bd:a3:bf:35:0a:e8:ce:d5:cc:5a:ce:a9:bf:56:fc:
e8:62:c9:3d:4f:cc:11:a3:35:3c:21:54:03:67:a3:
64:7a:b8:8b:a4:35:48:46:83:d0:2c:ae:17:7d:41:
c0:a7:06:f4:53:68:34:9a:7c:b9:30:d0:47:5c:22:
09:8b:29:11:45:14:50:d1:8b:53:53:48:b0:9a:e3:
47:92:cf:30:37:11:cd:18:c2:3a:d7:73:0f:69:13:
e5:43:de:2a:81:31:15:67:ea:ac:6d:7b:be:df:98:
63:cc:89:be:a2:77:b7:48:ad:ef:18:d5:98:ed:e0:
ae:a7:79:8e:32:e6:43:de:fb:5d:95:ed:5e:09:26:
80:ca:75:de:bb:2a:7f:89:25:b4:ac:31:44:e2:04:
b5:6d:27:76:ad:b0:04:f3:45:6a:e8:cf:d9:02:6b:
47:70:c3:76:e2:53:28:b2:f1:5c:1c:a9:06:57:34:
3f:63:d6:b5:19:fa:e9:84:6a:78:b3:5f:1b:9e:65:
a8:f7:b1:20:e7:aa:43:c4:6a:18:2e:47:81:d1:d6:
23:e8:68:81:07:94:c3:65:6f:b0:d6:3b:91:e3:59:
66:8b:ff:11:de:56:21:de:df:62:17:5e:56:0d:b6:
c4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BA:18:0A:50:2B:6D:3D:5B:0B:20:E0:5C:34:45:9B:7D:C3:ED:B7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7bf::/32
Signature Algorithm: sha256WithRSAEncryption
34:03:10:eb:46:3e:9a:2f:9e:73:9d:55:23:bc:7b:10:7b:e7:
8b:64:eb:60:df:21:fb:e3:81:34:c3:50:8e:15:d3:2d:ae:d3:
7f:77:d1:c1:91:96:52:dc:72:87:b9:c4:44:b8:d6:75:f5:1c:
74:b2:27:0e:94:93:65:b1:cd:90:32:21:52:b6:ab:f8:d6:e2:
c2:89:41:08:ec:b3:12:5d:f9:37:e7:6b:8d:9b:9a:d7:82:5d:
06:e7:df:1c:e9:81:e2:17:fa:09:5d:cc:3f:69:5e:be:66:bc:
3a:7f:e7:52:7e:37:16:9a:85:3a:e3:52:47:00:eb:1f:2a:31:
53:ad:c0:c8:72:6a:a7:85:91:01:49:40:9c:30:c9:6e:70:48:
b4:12:aa:66:ae:e3:c0:2f:4f:32:c6:d8:2e:ce:1f:37:f9:0f:
b5:92:08:b1:3e:41:5c:e5:25:4a:78:cc:3e:3c:93:8c:3c:da:
3a:a2:18:06:c8:4d:7b:fd:a8:b0:4a:4d:f4:35:c7:ff:bd:d7:
70:e9:cf:98:80:c2:e1:87:ab:74:51:30:82:d7:e2:2a:db:5d:
04:1c:cf:dc:8c:96:5b:0c:29:4d:78:f5:03:84:3d:4f:65:c0:
86:7b:8a:c8:b5:68:c7:0c:ca:d2:70:3b:1a:0b:6c:ac:55:7f:
44:71:1c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:56 2026 by rpki-client