Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144652.roa
File: AS144652.roa (raw, json)
Hash identifier: a8HzcY3/0BwLwql543Dn7l8C893OK1fE0Q54O0CjrXg=
Subject key identifier: 52:C5:33:01:85:6A:32:B0:2A:47:2D:C4:18:BE:5F:56:BE:AF:67:3A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0F304D8F92A6403D7C40819DA033047D11309EC8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144652.roa
Signing time: Fri 22 May 2026 06:46:09 +0000
ROA not before: Fri 22 May 2026 06:41:09 +0000
ROA not after: Fri 21 May 2027 06:46:09 +0000
asID: 144652
IP address blocks: 240a:a7d2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:30:4d:8f:92:a6:40:3d:7c:40:81:9d:a0:33:04:7d:11:30:9e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:09 2026 GMT
Not After : May 21 06:46:09 2027 GMT
Subject: CN=52C53301856A32B02A472DC418BE5F56BEAF673A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:11:db:04:66:02:84:48:2a:d7:19:65:26:23:
c4:cb:64:2b:d1:54:8d:9c:9f:0f:20:21:55:45:4f:
cc:0b:7d:fb:05:55:65:e9:56:e2:c4:b6:96:5c:49:
90:5c:f5:21:bc:92:6c:c8:19:4f:32:bb:72:c2:f7:
9c:26:94:1d:9b:1d:2a:53:49:a9:f9:10:79:6a:5f:
a8:14:32:95:1f:80:e5:60:cf:61:79:44:c3:0f:67:
1e:03:1b:79:ff:79:d8:1d:66:6f:f6:b4:99:57:8c:
12:a2:81:04:37:ad:7f:96:01:13:d9:77:e6:e6:31:
3d:f1:36:83:46:77:60:36:a6:88:6f:aa:c0:fd:7a:
f1:07:5b:85:33:17:30:5e:9b:43:d9:c2:51:35:72:
e4:ae:41:4b:09:94:aa:91:88:c2:d6:f9:fb:28:47:
fc:72:71:06:ab:a6:71:a2:77:f6:cb:07:4d:db:ee:
d7:6f:84:4f:73:ed:87:95:4e:52:d4:61:39:d9:ef:
47:e9:82:74:27:89:2d:e3:21:98:71:94:fb:47:73:
67:29:d9:fc:2f:43:2e:89:9b:6b:60:9b:c9:34:ed:
6c:df:40:95:63:6f:31:77:05:54:c3:7d:c0:98:1c:
49:78:1b:ac:ff:e9:00:1f:45:85:7a:ee:2e:97:3d:
08:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C5:33:01:85:6A:32:B0:2A:47:2D:C4:18:BE:5F:56:BE:AF:67:3A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144652.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7d2::/32
Signature Algorithm: sha256WithRSAEncryption
00:e4:12:ac:45:c0:0c:fe:f6:78:78:d8:34:8c:92:81:b4:9c:
7e:d0:a7:80:8d:ca:fc:a6:08:8e:a0:60:a5:ed:72:11:b6:b7:
c7:d1:fe:12:e3:5b:f1:5b:3d:c1:17:19:2a:90:47:eb:5a:dc:
af:fd:fb:d8:a8:38:07:a4:63:23:a8:b3:3e:3d:b3:82:c1:de:
f5:15:e6:c7:71:fe:72:b1:1d:a6:d4:cf:96:60:0b:c1:4b:35:
f6:d2:1a:7a:1e:3c:7e:e7:86:5e:60:26:3c:24:c8:2f:b2:ea:
8c:a0:4f:b4:ab:49:87:36:64:7e:da:6c:6e:c6:64:a3:8c:7c:
0b:3a:73:13:88:6c:32:d9:87:9f:5d:86:2f:94:32:18:c8:e9:
bb:ba:7a:c4:bf:bc:30:d2:f3:66:08:88:56:dd:31:22:6b:e3:
9c:5c:cd:6b:30:83:6f:41:80:8f:00:03:9c:09:c4:a2:de:0c:
7e:26:d1:03:cf:1d:0b:d0:d1:aa:6e:61:5d:14:a2:ae:95:6f:
40:b2:4f:af:b2:98:8e:55:d3:37:1e:85:dd:2e:31:b8:0f:71:
57:69:81:17:2d:09:44:ee:5d:eb:0d:1d:50:f8:b4:25:c8:40:
49:39:c7:c0:91:29:e8:48:84:03:25:51:2b:b0:00:d1:a7:c7:
b9:21:6c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:51 2026 by rpki-client