Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144640.roa
File: AS144640.roa (raw, json)
Hash identifier: YjuQ/wgSFWPAMZu5NNFbfSSdGbt0nnd+tuAvCjjG/WY=
Subject key identifier: 1A:48:BF:BB:E4:28:E6:92:F5:9D:B3:B0:7A:3B:87:E1:7B:8B:9B:FF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0AF65CBFABB54E34E9667B7C87CBC6230F109117
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144640.roa
Signing time: Mon 25 May 2026 01:20:34 +0000
ROA not before: Mon 25 May 2026 01:15:34 +0000
ROA not after: Mon 24 May 2027 01:20:34 +0000
asID: 144640
IP address blocks: 240a:a7c6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:f6:5c:bf:ab:b5:4e:34:e9:66:7b:7c:87:cb:c6:23:0f:10:91:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:34 2026 GMT
Not After : May 24 01:20:34 2027 GMT
Subject: CN=1A48BFBBE428E692F59DB3B07A3B87E17B8B9BFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:e2:56:f4:12:f7:4e:ec:d3:93:a5:da:06:
30:23:27:9e:6a:d5:15:96:b6:f6:18:d4:fa:30:6a:
ca:7e:c2:ad:45:05:3b:cb:48:7b:92:b0:ab:9d:20:
bb:23:33:f2:d7:4c:07:2a:98:52:c0:77:b6:ef:8d:
c9:03:d9:f6:d2:a9:5c:b5:89:bb:a0:4d:50:9a:53:
33:3a:5d:9d:fc:b1:a4:c3:f9:d4:f7:87:0d:c2:c8:
c3:7f:81:b1:ff:66:13:f6:f2:cc:98:15:01:50:35:
ad:09:ba:8b:a3:52:19:21:b2:49:ef:da:33:5a:ac:
fe:7f:7b:22:e7:b0:45:0e:17:ee:e4:2c:8a:14:62:
54:9c:ac:99:ce:8a:61:ac:c8:d8:55:4e:b1:7f:9c:
a9:4c:96:40:aa:b0:e8:15:84:81:28:45:1f:0c:52:
42:32:bd:b7:79:36:97:5b:28:9f:d0:11:7c:b6:fd:
a1:9c:7c:eb:df:29:5b:21:a9:f0:c2:6e:54:66:76:
65:22:30:42:e0:96:2b:3a:9e:ae:25:33:57:d9:7d:
1a:b7:2e:58:bd:dc:dc:d7:80:54:00:9b:3c:cf:9d:
50:ac:bc:77:66:bb:1b:33:15:55:d3:09:37:a8:6a:
46:b8:f3:93:0a:dc:3e:9e:ac:19:50:0b:1c:9d:f7:
60:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:48:BF:BB:E4:28:E6:92:F5:9D:B3:B0:7A:3B:87:E1:7B:8B:9B:FF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144640.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7c6::/32
Signature Algorithm: sha256WithRSAEncryption
54:ab:fb:aa:4f:13:a8:ca:cc:66:0c:d6:00:4d:2b:b9:53:e4:
ff:8f:ff:37:cb:98:f8:68:a2:18:d6:4b:92:6d:7e:dc:0e:e0:
10:61:f4:17:6c:9e:90:bb:58:59:e6:9f:a3:dd:5c:96:49:45:
2a:f4:fc:8d:db:16:ef:75:31:32:4b:88:13:6a:8d:3e:64:9f:
0c:c2:c4:4d:eb:1c:21:7e:ac:41:0c:c9:01:00:d7:4c:0c:7d:
89:6c:f4:c5:b8:59:47:d8:36:27:89:82:76:16:85:3b:fb:d0:
b4:7a:1b:df:57:e8:1d:f7:f6:5b:5c:95:c6:6a:71:3a:e9:93:
57:e0:ab:94:02:2a:94:5b:09:72:4b:c8:60:d3:02:ce:da:02:
ad:33:3c:ff:8b:f1:d6:a9:06:a4:e5:14:e6:39:9f:89:6a:8d:
42:ca:dd:85:1f:55:bf:80:c8:95:08:b7:72:87:57:f9:63:83:
95:37:5c:af:4f:a3:d4:52:21:26:dc:c4:d0:48:40:54:f4:62:
63:cb:58:37:ea:38:94:b0:9b:b0:59:bf:f3:ef:5c:61:b8:97:
1c:05:ab:e4:61:e8:ae:43:ce:02:80:f0:62:de:bf:c8:97:11:
89:14:0f:93:76:58:59:4a:7d:60:7f:42:c4:8b:5f:cd:b7:c3:
c9:71:5a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:57 2026 by rpki-client