Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144674.roa
File: AS144674.roa (raw, json)
Hash identifier: 7axqUDJcRGA9nCaZm7Da7IeEGJCruML1DHtmAeMpSvc=
Subject key identifier: 87:8F:D5:F3:33:E9:93:EE:BB:43:20:08:D5:2E:C2:CB:60:98:9E:B5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 538C16EBDD85C19CDE32C3FFBD410E06314B1CE7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144674.roa
Signing time: Mon 25 May 2026 01:20:33 +0000
ROA not before: Mon 25 May 2026 01:15:33 +0000
ROA not after: Mon 24 May 2027 01:20:33 +0000
asID: 144674
IP address blocks: 240a:a7e8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:8c:16:eb:dd:85:c1:9c:de:32:c3:ff:bd:41:0e:06:31:4b:1c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:33 2026 GMT
Not After : May 24 01:20:33 2027 GMT
Subject: CN=878FD5F333E993EEBB432008D52EC2CB60989EB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:fa:40:ab:45:58:ed:ab:d6:f5:96:f3:c7:
66:9b:81:3d:d2:52:7d:ac:e6:af:d2:50:e9:de:a1:
31:0f:92:bf:9b:44:bc:26:9e:f8:60:01:14:72:10:
5d:f3:f9:8f:ff:c6:c0:7e:73:1d:a3:00:be:32:a1:
9b:c8:89:ba:b5:56:89:01:79:10:c1:fe:47:b8:d6:
31:0e:af:cc:15:0a:78:e1:fd:7f:f4:50:04:34:15:
c2:4a:e1:e5:fd:53:b2:48:3f:b8:d8:2c:99:04:4d:
85:6c:ee:aa:09:27:c6:fb:50:27:9c:d4:59:1a:c0:
87:10:28:22:55:6b:2b:3a:a2:98:6c:a8:87:73:5d:
84:d7:39:43:90:78:68:f5:56:6b:fb:96:37:ec:52:
85:53:32:23:b4:21:d2:67:bd:68:66:31:79:b9:77:
c4:cf:24:8e:3c:8f:27:10:6b:44:78:13:14:1f:76:
92:55:b9:dd:f9:78:08:7d:f4:0d:f1:26:ec:e0:48:
62:25:ba:76:74:84:87:2b:52:ff:ea:8a:e9:63:dc:
c4:6b:a4:a0:10:73:17:20:35:8a:3a:45:a4:8e:93:
41:2d:b2:0f:e1:99:da:fc:4c:21:3e:e2:1a:8c:5c:
fb:28:2d:36:08:5c:c9:33:55:94:65:f2:29:80:e8:
57:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8F:D5:F3:33:E9:93:EE:BB:43:20:08:D5:2E:C2:CB:60:98:9E:B5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144674.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7e8::/32
Signature Algorithm: sha256WithRSAEncryption
06:38:d9:97:6b:53:87:02:ad:02:13:ce:96:bc:cf:8f:30:58:
c6:0b:30:d6:62:1c:ac:0d:57:94:23:ff:d5:d7:2e:3c:f7:4d:
b6:b8:53:fe:ee:c2:ab:f6:62:2e:2c:cf:4a:a9:c6:66:7d:29:
1d:b5:64:81:77:ee:50:4e:11:38:9e:4f:2b:6a:7f:bc:ec:32:
1b:40:f3:9d:03:2f:a7:f4:b2:0a:ec:cd:53:82:67:6f:48:cf:
42:d4:4e:16:f1:e1:98:4c:03:d4:7d:43:d7:15:56:d2:9d:a5:
9e:e5:e8:88:20:6a:7b:01:29:e8:5a:d7:88:d7:16:74:c8:99:
15:51:28:22:a3:11:70:e8:f2:8b:0d:84:70:a2:10:66:7a:92:
ab:58:92:f1:1f:d8:43:bc:85:64:9a:6e:9d:22:7e:d4:c7:80:
ed:5d:cb:e4:7e:92:e6:3e:75:91:88:e2:99:d2:58:75:86:14:
36:8c:f2:00:6f:b7:bd:5c:29:2a:46:42:38:66:45:37:01:b9:
97:db:8f:a0:0c:cf:0e:eb:d3:dd:98:42:4e:57:35:3f:4d:d9:
75:fe:ba:63:82:ee:8e:e1:2f:36:24:77:9c:c9:cb:c8:58:e5:
a3:15:3b:2a:a6:9a:33:7a:83:d6:c7:08:da:b9:51:1b:70:ac:
c1:cb:57:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:48:59 2026 by rpki-client