Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144700.roa
File: AS144700.roa (raw, json)
Hash identifier: zhiwKGyyEKVuCn2wR1B+noGe5SxMWFGBI7EUSLuQqo0=
Subject key identifier: 10:77:0B:A7:DC:60:6E:87:72:8A:BC:F3:D1:B6:F1:BE:72:C3:60:AA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 216E35094F2E588A7D35594C8EE265E259F07F9E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144700.roa
Signing time: Fri 22 May 2026 07:24:27 +0000
ROA not before: Fri 22 May 2026 07:19:27 +0000
ROA not after: Fri 21 May 2027 07:24:27 +0000
asID: 144700
IP address blocks: 240a:a802::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:6e:35:09:4f:2e:58:8a:7d:35:59:4c:8e:e2:65:e2:59:f0:7f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:27 2026 GMT
Not After : May 21 07:24:27 2027 GMT
Subject: CN=10770BA7DC606E87728ABCF3D1B6F1BE72C360AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:9f:af:6a:a1:2b:60:1b:4e:9e:c7:42:50:
58:b1:c4:ae:89:ea:43:f7:5a:d6:57:c3:67:a0:a4:
44:73:96:2a:44:b6:b9:bb:74:76:1f:be:bb:ae:48:
37:eb:55:19:21:b6:71:15:6e:ae:4d:48:32:64:72:
13:08:2c:ec:7d:0c:94:d6:77:bf:d8:a7:d8:86:37:
55:ce:30:f0:d0:ce:fa:1a:d1:3b:6c:a9:7b:66:be:
4b:2d:ea:29:80:fb:17:4b:73:16:45:b4:ce:18:38:
6b:51:01:cf:00:4c:93:56:83:a5:aa:a5:d8:3f:e2:
5f:9d:31:03:a7:93:e6:be:09:6e:4a:33:0c:1f:20:
11:5f:59:fd:95:56:d4:90:40:6c:ba:0c:a6:61:c3:
21:44:d2:78:78:86:0c:52:c7:f2:ab:a1:5b:18:69:
a2:d7:66:03:66:1a:ee:a2:bb:49:a4:87:c0:90:39:
78:d1:8f:19:62:57:4d:6b:6a:bc:2c:4b:59:91:48:
59:07:14:8e:82:9b:91:af:76:9a:9f:b9:ab:42:5e:
c1:e8:71:8b:74:d6:b3:c4:84:13:69:60:a9:d5:b4:
9f:7a:c8:36:00:c8:24:83:77:4d:5f:bf:42:44:1d:
a1:5b:4c:3f:3d:46:83:2f:d1:ff:af:4c:78:5e:72:
c4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:77:0B:A7:DC:60:6E:87:72:8A:BC:F3:D1:B6:F1:BE:72:C3:60:AA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144700.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a802::/32
Signature Algorithm: sha256WithRSAEncryption
a1:bd:ed:dd:84:b7:ad:45:0f:d8:b7:fe:80:0e:13:0a:05:72:
cc:2e:b7:62:9f:00:16:73:2e:97:3e:79:a2:42:2c:84:c0:44:
7a:b5:47:1f:c7:a8:68:90:6b:68:e2:ea:50:86:73:22:d7:c5:
ae:ca:70:a1:c2:66:af:58:9c:5d:ec:0f:06:60:30:be:b2:bf:
88:7d:bd:10:fa:78:d1:33:4c:be:db:72:a7:13:99:2a:94:80:
8f:79:79:9e:1f:c4:64:01:31:2d:43:73:f5:0f:30:43:4d:b6:
e8:e0:d9:05:12:a0:36:69:27:bc:41:91:ff:14:5c:0a:4b:b5:
1b:18:6e:e7:b2:ca:9b:cf:35:af:8d:b7:7c:ea:b0:1f:3a:12:
d9:62:fe:c4:97:a9:a0:13:5d:3c:38:32:b1:48:3d:15:cc:32:
3b:fc:c6:3c:d3:07:44:87:34:43:55:ed:5b:90:03:b2:8c:c9:
6f:ab:34:96:aa:fc:b9:81:1c:c0:52:6a:38:8f:07:68:fa:8c:
4e:65:9b:f2:b7:45:f6:15:d1:28:89:e4:ee:34:40:76:e6:f7:
d9:28:ec:3e:43:58:fc:96:80:bf:27:95:21:18:94:2b:f6:53:
13:83:e6:5e:77:0c:9b:e4:ff:c8:4d:9a:88:40:80:cd:f0:af:
d5:63:88:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:45 2026 by rpki-client