Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144687.roa
File: AS144687.roa (raw, json)
Hash identifier: YpVGNmK1PDR9qvIKRXxift7fdZnJkattvuCi0KvLAeA=
Subject key identifier: CB:23:78:28:C8:1F:00:DD:20:0D:BF:B3:6A:5D:37:03:08:3D:52:90
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 608A1F3D29AE6F083BED61932EDF47EC8745DA10
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144687.roa
Signing time: Mon 25 May 2026 06:28:37 +0000
ROA not before: Mon 25 May 2026 06:23:37 +0000
ROA not after: Mon 24 May 2027 06:28:37 +0000
asID: 144687
IP address blocks: 240a:a7f5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:8a:1f:3d:29:ae:6f:08:3b:ed:61:93:2e:df:47:ec:87:45:da:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:37 2026 GMT
Not After : May 24 06:28:37 2027 GMT
Subject: CN=CB237828C81F00DD200DBFB36A5D3703083D5290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:4c:95:df:2e:55:fd:bf:35:99:65:7c:95:c1:
85:8b:c3:e2:b5:09:37:2b:d3:a8:83:1d:4f:81:f8:
2c:cb:c4:a8:8d:46:11:4b:9a:6b:04:71:10:3c:ab:
71:94:de:25:2d:0b:46:41:1e:c6:a0:c8:6d:29:18:
a1:08:bb:c3:94:a2:53:39:91:c5:84:28:76:a8:10:
5d:4e:ad:26:29:32:ab:54:09:8f:df:31:28:89:30:
aa:16:94:43:4f:30:a0:0c:a6:b1:cc:82:d1:bd:b7:
b6:59:40:e4:8a:eb:d9:4e:8d:da:34:fd:88:a7:06:
57:36:42:c9:3b:d2:84:09:ef:6b:52:0e:0f:64:5d:
ec:22:5e:df:b2:bb:f7:54:73:50:1e:2e:27:eb:03:
c1:15:f3:f0:3c:42:95:03:3a:1f:13:d4:d1:1f:f8:
b2:3d:97:a0:72:d5:8c:37:c2:0e:55:e6:17:13:60:
6f:32:c4:96:02:5f:03:fc:7d:4e:68:29:89:23:81:
76:02:d3:13:96:d2:ed:e3:c0:50:53:38:99:53:34:
79:3e:76:0b:8a:04:6c:93:ee:58:69:54:d3:95:dd:
1d:c1:ef:ba:86:9d:2f:b1:33:9f:10:51:fc:b1:b5:
15:77:78:a8:a4:ea:4a:4e:3f:56:ed:90:4f:25:32:
47:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:23:78:28:C8:1F:00:DD:20:0D:BF:B3:6A:5D:37:03:08:3D:52:90
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144687.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a7f5::/32
Signature Algorithm: sha256WithRSAEncryption
94:9f:e5:f3:85:47:a9:0a:ef:0a:7a:13:a9:d0:8d:6e:dc:a9:
57:99:5c:81:df:81:71:bb:c6:26:fa:88:52:47:0d:17:32:4d:
08:e6:77:58:f5:92:04:24:d4:33:17:47:06:a7:92:6f:ca:b9:
be:3b:e4:3e:7a:65:6e:c4:b8:e4:99:e7:d4:8d:64:a3:0e:83:
95:fe:b1:5c:5c:c9:da:0d:47:e7:09:0f:20:08:c4:45:50:d8:
da:ef:7d:f5:b4:32:81:76:0b:aa:60:4f:64:4a:a3:5a:d9:fa:
db:e2:9e:eb:5b:d0:04:5e:a4:13:e6:4e:6d:a2:ef:ff:4a:ff:
0e:44:86:d4:3a:90:31:c6:97:bf:0a:27:b9:46:49:92:ea:f3:
1c:49:bd:dc:b7:f1:b6:28:1e:d7:52:21:93:f1:71:ee:18:41:
93:98:68:4b:04:be:f9:57:f8:e0:c3:8d:1c:37:ee:df:f8:98:
1b:e9:47:5a:fe:0f:dd:a2:da:85:e2:b5:8d:89:35:d7:99:2e:
5f:16:19:11:f5:6a:d8:fa:95:fa:0e:7e:61:b3:2a:ef:46:8f:
89:aa:29:c6:2a:74:76:77:3d:88:6e:1a:13:b6:10:2d:98:e3:
a7:0c:52:1b:3f:6d:c8:a8:89:96:8a:3f:27:dc:38:9e:09:5a:
b7:c5:19:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:33 2026 by rpki-client