Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144686.roa
File: AS144686.roa (raw, json)
Hash identifier: 1qka1f8Xciea3AmcOp+jrBuAxD5n7yPyWD75agE3OfQ=
Subject key identifier: A7:D7:1B:86:49:AF:25:6C:EB:C8:0A:AD:CC:DC:D2:8C:7C:68:B2:C8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 348732D12184AC1315505F96429BE4E4D1270174
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144686.roa
Signing time: Tue 26 May 2026 06:12:36 +0000
ROA not before: Tue 26 May 2026 06:07:36 +0000
ROA not after: Tue 25 May 2027 06:12:36 +0000
asID: 144686
IP address blocks: 240a:a7f4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:87:32:d1:21:84:ac:13:15:50:5f:96:42:9b:e4:e4:d1:27:01:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:36 2026 GMT
Not After : May 25 06:12:36 2027 GMT
Subject: CN=A7D71B8649AF256CEBC80AADCCDCD28C7C68B2C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:e9:dc:93:dc:18:2a:4a:af:3f:11:1b:1c:
f3:79:61:b1:8c:75:95:93:2c:66:8c:ed:6d:0e:38:
3a:1d:6d:a5:c5:84:55:d1:0c:c6:e1:27:32:1b:7c:
22:30:8c:7b:cd:d9:46:e4:d1:e2:81:a0:34:09:a8:
81:07:40:04:fa:29:11:48:2d:30:c6:f2:68:78:54:
df:66:c5:2f:d1:94:ad:47:6c:82:50:da:a5:15:d2:
3b:b7:76:0d:5d:18:f6:47:7c:97:a3:12:e2:97:6a:
7c:73:2e:39:93:c4:b0:36:68:ef:ca:2b:36:19:50:
b5:27:ff:8e:e1:53:1b:d8:09:eb:a2:9b:1d:95:58:
df:a8:ee:d8:0b:cb:a3:40:44:9e:d2:50:77:2a:dd:
74:d3:c3:c6:0a:73:44:72:89:53:66:13:2e:31:8b:
93:24:7f:00:5f:52:a3:7a:76:b2:ce:08:ae:ce:eb:
99:13:41:1c:54:52:77:2c:1e:c7:6b:6a:09:4e:14:
09:04:8e:ea:29:9b:be:ec:95:65:30:e0:a4:b6:7b:
02:59:7a:5d:73:bb:e1:74:1d:53:bd:d2:73:e0:d3:
fb:f1:91:0d:51:e5:97:9a:4e:ac:77:65:ee:05:61:
9f:a6:49:c3:35:cb:d1:36:6a:24:95:c2:3d:0b:44:
d1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D7:1B:86:49:AF:25:6C:EB:C8:0A:AD:CC:DC:D2:8C:7C:68:B2:C8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144686.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7f4::/32
Signature Algorithm: sha256WithRSAEncryption
b8:b9:cd:2b:27:0c:61:5b:e2:64:42:c7:0d:2f:09:21:a0:cf:
3a:fe:13:c9:44:50:c1:51:ad:f6:f3:0d:c1:67:f8:ac:96:ce:
13:fc:39:a1:b4:cb:8e:ce:e5:d5:35:ec:af:ca:f0:7d:34:90:
1c:38:6e:5d:c6:28:49:c4:9f:b6:3f:75:d6:cf:8b:aa:94:64:
8f:50:c7:aa:32:5e:43:89:9c:55:fc:b2:bf:19:84:47:56:70:
9a:e1:40:51:7c:64:80:b3:2d:69:78:d8:50:44:5c:40:49:b3:
76:a4:b4:1b:d5:ed:32:8a:65:eb:af:dc:df:41:d4:bd:ee:6d:
0e:29:5b:24:a6:12:59:1c:46:cd:40:9c:3a:0c:be:a3:5a:d5:
87:04:c6:ba:8c:d6:4a:fc:f6:23:8a:1b:ff:c7:f6:b9:93:e8:
0e:2f:38:59:73:2a:c6:d4:be:ff:3c:02:50:57:0d:b1:0c:e6:
ab:74:b0:42:22:e9:dc:e9:11:69:84:64:cb:39:c8:89:7f:91:
2c:29:59:b3:3d:e2:ea:ce:2a:fe:0c:93:c4:df:98:4f:ca:cb:
bb:07:f7:2c:30:b8:18:fd:d8:c7:ae:c1:c7:07:14:dd:12:5c:
61:28:cb:f7:46:62:a2:28:5b:3e:00:b6:48:02:16:18:fa:57:
13:70:d1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:35 2026 by rpki-client