Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144717.roa
File: AS144717.roa (raw, json)
Hash identifier: rU8fEPNydRLtPS93A7zGzWtkReQyv8m4FrN2k25LApc=
Subject key identifier: 9F:8E:7D:4D:85:EC:9C:87:B0:C0:4F:8B:E1:65:DB:3E:DC:D0:66:C3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1D28D3950D28EF610B6A0DDDB9E57A1DBB6CBF48
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144717.roa
Signing time: Fri 22 May 2026 06:58:24 +0000
ROA not before: Fri 22 May 2026 06:53:24 +0000
ROA not after: Fri 21 May 2027 06:58:24 +0000
asID: 144717
IP address blocks: 240a:a813::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:28:d3:95:0d:28:ef:61:0b:6a:0d:dd:b9:e5:7a:1d:bb:6c:bf:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:24 2026 GMT
Not After : May 21 06:58:24 2027 GMT
Subject: CN=9F8E7D4D85EC9C87B0C04F8BE165DB3EDCD066C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:63:4b:55:b4:eb:ed:c3:1e:56:22:a4:23:9e:
8b:18:c0:9e:e5:82:30:5b:34:b7:83:f1:e8:2f:aa:
d8:e9:04:8a:91:c5:95:57:52:9c:39:8a:62:99:9f:
93:70:ee:42:fd:a8:6c:00:26:5e:c7:00:50:1b:a2:
33:09:5a:4e:4e:68:8c:67:e0:16:d0:47:e7:77:4d:
99:c2:e6:23:31:88:2c:98:eb:3f:41:76:f2:10:f8:
eb:6c:cb:7d:63:eb:e1:81:1d:87:12:38:f2:7a:2f:
7d:29:8f:7f:eb:d9:f7:83:d2:32:72:3d:0a:b9:07:
6c:f9:e3:62:65:b2:90:87:a6:f9:3f:b4:a1:2f:6d:
aa:2e:23:a7:c0:47:0f:6f:32:0a:c0:25:41:c3:17:
61:b2:f7:17:99:46:06:c2:9c:b5:72:3b:c1:24:30:
79:25:8c:6f:a3:02:9b:36:ee:5d:e2:9b:8a:39:70:
cc:5a:57:27:60:9f:01:80:0b:29:aa:3b:55:62:3c:
83:3f:31:c5:7f:2f:b2:c4:4d:a3:af:38:8f:48:a1:
2a:11:c3:88:b3:24:fe:21:f5:d1:05:f3:a1:3a:6a:
00:29:b7:fe:10:b4:b6:7a:94:0d:b2:49:f8:78:d1:
d4:da:ac:50:ec:99:30:8d:41:e7:93:b8:59:4d:a8:
b3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8E:7D:4D:85:EC:9C:87:B0:C0:4F:8B:E1:65:DB:3E:DC:D0:66:C3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144717.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a813::/32
Signature Algorithm: sha256WithRSAEncryption
31:12:b5:7b:8a:6e:b2:59:43:b8:9f:3c:21:58:e8:57:cf:b5:
a3:f0:64:01:a0:6e:cc:53:97:1a:08:40:cb:dc:b3:c8:39:9a:
54:bd:e9:21:f9:68:53:98:a8:4e:f4:e5:cb:c9:cd:87:fc:f3:
fc:bb:be:c1:a5:92:ee:68:b6:60:4b:48:fa:fe:14:27:7e:33:
5b:95:85:ae:eb:5d:1f:18:dc:f8:9c:ff:c0:60:7c:f4:55:38:
88:b2:85:e3:0a:40:d2:36:e4:a1:d1:a3:2f:10:37:32:8d:0e:
75:4a:31:d9:9a:be:52:ca:8d:10:fd:7f:1e:6e:ef:91:f1:ea:
fb:4a:a4:b4:77:43:12:fa:f9:8c:22:ce:6c:d1:57:ab:7a:75:
dd:08:cc:7c:50:13:90:a7:29:14:7f:27:6b:7c:12:2a:94:91:
94:49:cc:90:2c:e3:7f:9e:18:b6:f0:64:76:83:76:38:2e:2f:
d9:80:ca:fd:b6:c0:b3:22:2e:24:80:f5:25:0f:8c:28:cf:b8:
0f:da:d8:ea:d0:3a:b0:39:7f:b0:78:3b:eb:d2:1a:b2:b1:63:
5f:7a:97:44:2a:82:af:7f:b5:b7:24:89:2a:3f:78:b4:3d:03:
46:18:59:7a:94:fe:02:bb:6f:98:21:1c:c6:08:1d:b3:46:84:
87:7e:ab:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:13 2026 by rpki-client