Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144728.roa
File: AS144728.roa (raw, json)
Hash identifier: zo6tbzkq/lyVrfnhtShMNAKLU6iLI2iMnpXy6dhwRRc=
Subject key identifier: 31:11:C7:7D:B4:0C:05:22:4B:9A:0B:49:BB:8E:E2:C3:6E:D0:A2:71
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6F586CD1863A0E9840FD786E2FB3B54F408ECE91
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144728.roa
Signing time: Fri 22 May 2026 06:46:35 +0000
ROA not before: Fri 22 May 2026 06:41:35 +0000
ROA not after: Fri 21 May 2027 06:46:35 +0000
asID: 144728
IP address blocks: 240a:a81e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:58:6c:d1:86:3a:0e:98:40:fd:78:6e:2f:b3:b5:4f:40:8e:ce:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:35 2026 GMT
Not After : May 21 06:46:35 2027 GMT
Subject: CN=3111C77DB40C05224B9A0B49BB8EE2C36ED0A271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:66:93:01:81:84:02:71:d2:c9:f9:48:9f:
df:c8:06:6e:e3:63:25:73:40:04:e2:7a:b1:d6:6b:
08:6d:2c:d2:80:75:35:b0:0d:83:c2:af:5f:25:4b:
5f:ff:85:c5:79:b4:b0:ec:1f:0d:4c:23:36:62:8d:
9e:db:94:4b:86:cd:a2:15:48:34:62:e3:7a:e9:cd:
8e:98:9a:0d:11:e6:af:af:22:d5:95:d6:9a:3a:38:
10:8d:0a:5e:96:86:ea:ff:f0:29:d6:39:44:b5:a5:
f3:3f:d4:20:6f:00:1d:f4:35:c5:88:6d:53:e8:1f:
89:74:2c:9a:aa:c9:1c:84:8b:dd:3d:fe:c4:3e:35:
a9:f4:30:79:5f:4a:d2:bc:de:41:fa:df:b8:81:21:
de:e3:49:f8:80:47:25:61:2d:47:cd:48:40:ac:d4:
1e:26:fd:f5:e8:bf:39:0f:65:e8:f0:99:67:c1:1f:
16:52:2f:48:bc:80:f9:e0:4d:be:e0:5c:fc:4e:e6:
a9:de:ab:21:1a:f0:8e:30:73:2a:89:a7:72:29:93:
62:a7:f6:65:cf:fd:bd:8b:69:3f:75:54:e9:1a:4e:
a6:2f:61:81:66:f2:2b:44:10:e8:cc:88:e9:77:c0:
14:bf:bf:73:19:a4:30:aa:d0:4f:66:88:65:83:04:
e9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:11:C7:7D:B4:0C:05:22:4B:9A:0B:49:BB:8E:E2:C3:6E:D0:A2:71
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144728.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a81e::/32
Signature Algorithm: sha256WithRSAEncryption
b4:c9:af:08:c1:7d:d5:b0:0f:52:b5:e5:2f:8d:f9:92:85:e3:
14:95:69:6d:39:4a:c3:7f:52:24:b5:11:49:67:07:fd:20:45:
b6:93:02:38:98:57:cc:ad:e9:53:7a:8f:72:e0:94:1f:5d:33:
2d:ca:fc:87:fb:bd:da:63:8e:06:85:3c:aa:db:f4:f6:e0:1b:
4a:7e:be:55:1a:a2:7c:e0:4c:e7:20:f9:69:2e:86:59:8e:d1:
71:56:ee:1e:2c:60:44:c2:c6:83:fd:bb:6e:d1:da:21:6d:54:
12:20:6c:ab:5b:c0:85:90:c4:fa:76:65:94:81:92:3c:0f:cf:
27:dd:a8:41:f3:6b:3f:f8:41:63:72:73:47:fb:66:c4:de:03:
85:f8:18:3d:16:b8:1b:76:2b:49:29:c1:24:cc:49:05:c6:c5:
42:84:62:70:5b:35:47:ef:8c:41:79:bc:dc:41:d4:57:04:b4:
ed:14:b0:cb:d6:c1:d7:10:67:49:89:b5:16:c1:21:74:f6:c6:
e0:12:2a:fc:a1:09:ce:60:05:6c:48:d1:b0:a3:09:65:e1:77:
b9:32:be:7a:89:4d:0f:71:46:c1:6c:fe:82:ab:51:18:5d:ee:
c4:68:4a:e3:e7:24:6d:92:37:8c:45:f9:6c:ba:07:26:4d:69:
dc:98:9f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:35 2026 by rpki-client