Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144642.roa
File: AS144642.roa (raw, json)
Hash identifier: GIRuvPY4lOT1DKl1oyCEabPrUOtvUWy4rQd9OcfP9KM=
Subject key identifier: 47:9D:DD:3D:E3:44:C1:B1:75:1A:2E:B5:9C:38:D4:89:4A:65:B1:99
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0BD3C8B8F265AECBD4FA15E871C4DB2A7A9DCBA7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144642.roa
Signing time: Fri 22 May 2026 04:08:27 +0000
ROA not before: Fri 22 May 2026 04:03:27 +0000
ROA not after: Fri 21 May 2027 04:08:27 +0000
asID: 144642
IP address blocks: 240a:a7c8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:d3:c8:b8:f2:65:ae:cb:d4:fa:15:e8:71:c4:db:2a:7a:9d:cb:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:27 2026 GMT
Not After : May 21 04:08:27 2027 GMT
Subject: CN=479DDD3DE344C1B1751A2EB59C38D4894A65B199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ae:19:2a:c0:aa:07:68:f5:78:eb:7f:39:9f:
24:d2:15:84:63:60:eb:3d:59:3d:dc:2b:25:4d:51:
11:9a:45:f4:12:6b:8f:98:76:d2:c3:d6:3c:be:6f:
0f:09:25:9c:af:9d:0b:00:82:28:75:09:6b:ca:51:
97:a5:3c:54:0c:ed:83:cd:6e:ce:e0:d2:7a:2b:7a:
de:68:d6:17:88:e6:95:2d:16:6f:4d:ed:8d:c7:15:
aa:dd:14:6d:e3:ab:fb:ca:27:cc:ea:e6:66:64:66:
9d:69:23:9c:99:13:9d:a6:86:e1:cf:10:9a:6d:2c:
69:c5:6a:99:41:68:50:f1:ed:b5:67:0e:4a:41:f7:
41:61:c0:ce:a8:f8:a3:d5:00:99:5d:7a:4b:37:93:
60:f3:2b:26:09:5a:6d:43:e3:5a:d5:99:1c:18:07:
fe:cf:62:cf:ee:d9:b3:c4:23:28:5d:1e:cc:98:ce:
f5:cb:5f:f6:fd:b2:92:bc:9e:fe:ef:57:de:dd:30:
86:2f:36:65:27:b3:4b:7a:76:3a:f2:c2:b2:bc:ef:
fb:97:e6:3d:aa:ec:69:7b:bc:76:60:f8:3a:02:da:
22:18:8f:ef:12:ee:48:6e:59:04:37:a4:38:c9:2e:
04:8b:20:44:08:8a:e4:0e:09:25:9b:66:de:2e:b6:
8c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9D:DD:3D:E3:44:C1:B1:75:1A:2E:B5:9C:38:D4:89:4A:65:B1:99
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144642.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7c8::/32
Signature Algorithm: sha256WithRSAEncryption
58:d1:ba:9c:6d:e9:5d:a3:ef:ad:0e:2c:92:d0:57:30:a6:fa:
95:ab:c9:eb:bb:90:ed:3f:cb:52:72:36:e9:77:01:42:d8:b3:
9a:f5:28:c4:31:ea:99:ca:e7:48:7f:ea:bf:0f:9b:92:62:22:
76:16:60:6a:0c:f4:64:84:30:39:9b:6c:93:78:a0:32:78:dd:
ec:b8:b1:53:62:62:c3:76:97:fe:2b:4d:6b:f9:94:9c:76:d8:
a5:55:1a:95:12:a5:12:66:d2:5f:de:e8:f0:a0:49:66:a1:74:
8a:bd:58:4f:6a:0a:ef:dd:7a:f1:c2:28:be:93:ab:25:0d:67:
0a:1b:f2:13:95:d8:a6:24:00:cc:74:24:dd:5f:e1:b8:d2:d9:
68:dc:3e:33:7a:4a:f9:ee:1f:3d:ed:47:d2:ff:59:ac:3b:3e:
80:d9:e4:9a:5e:36:e7:f5:b7:62:f9:d9:7c:f7:b7:3b:cf:cd:
e4:0b:bc:e9:67:a2:eb:31:b5:07:fd:d4:5c:02:d1:32:90:50:
3a:20:27:ba:4e:7a:d9:8a:7a:27:80:4b:75:c9:b8:a7:49:bb:
70:cf:b9:ae:ea:0c:b8:ff:e1:64:2a:4e:cd:a7:b0:22:d6:57:
1d:d9:ae:a0:3c:ed:5e:08:1b:15:6e:54:96:74:10:c9:5f:49:
8d:58:14:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:20 2026 by rpki-client