Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144729.roa
File: AS144729.roa (raw, json)
Hash identifier: reUe0TsnIde5XOGusbfXg2Q0sMXbhL+aQU1O7AvVYVA=
Subject key identifier: 32:20:C7:F9:65:7B:46:A4:CC:BD:E7:B4:A1:4A:39:F7:70:DE:77:6F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5912DDDCB3667736F83B4F9671939EF2206EA17E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144729.roa
Signing time: Fri 22 May 2026 07:41:19 +0000
ROA not before: Fri 22 May 2026 07:36:19 +0000
ROA not after: Fri 21 May 2027 07:41:19 +0000
asID: 144729
IP address blocks: 240a:a81f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:12:dd:dc:b3:66:77:36:f8:3b:4f:96:71:93:9e:f2:20:6e:a1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:19 2026 GMT
Not After : May 21 07:41:19 2027 GMT
Subject: CN=3220C7F9657B46A4CCBDE7B4A14A39F770DE776F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7d:af:ce:63:3c:8b:22:0f:88:a2:77:75:d7:
9c:99:ad:42:47:be:57:ad:e9:91:23:c5:83:ee:5b:
99:6a:05:83:02:1c:ef:2f:b5:32:f2:e4:a3:36:9c:
e8:ff:0b:fc:62:96:81:f8:1c:0a:9b:89:d0:ac:29:
d3:79:13:bb:3e:3e:fc:36:01:b7:23:36:11:ec:44:
b6:bc:6b:14:d5:cc:43:1e:0f:73:ad:88:ee:3d:f6:
16:44:ff:ff:9f:b4:fb:f3:71:59:c8:f1:c4:c2:bf:
37:18:2f:70:c9:b1:c5:68:63:49:e5:ad:51:4a:ca:
32:ae:d7:95:cd:99:3b:2d:08:01:35:f4:1e:b6:77:
be:f9:1b:f4:33:bd:81:f3:83:16:d7:d0:97:51:e6:
d0:77:66:7a:24:e5:10:0b:9b:ad:e8:86:d4:c5:7b:
dc:29:96:49:0e:65:02:3e:89:f5:a6:69:93:f4:9e:
f0:d4:4d:ba:3f:11:e3:2b:04:9b:f2:57:89:49:24:
84:1d:82:5f:a5:54:66:e7:8c:91:ff:09:ab:4f:2c:
e4:95:d9:81:24:54:e4:2e:8a:93:e1:19:88:7b:40:
79:4d:04:72:48:0a:72:d1:d5:7d:35:b0:3c:20:34:
db:08:c6:db:81:77:38:be:d7:64:65:ea:2d:c8:43:
79:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:20:C7:F9:65:7B:46:A4:CC:BD:E7:B4:A1:4A:39:F7:70:DE:77:6F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144729.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a81f::/32
Signature Algorithm: sha256WithRSAEncryption
a4:be:56:72:b0:13:49:52:4f:8a:3a:3f:92:50:82:60:c4:30:
36:cc:c5:05:38:cb:38:94:14:70:b7:32:7f:4b:b3:ec:b3:f6:
81:e2:06:76:bf:b6:d6:e0:a2:8c:a5:8a:1e:cf:4f:a3:fd:a2:
5b:d1:8b:d3:9b:50:8b:3b:48:c7:e1:7b:c3:1e:70:ed:1d:46:
0a:2d:67:41:84:f0:b9:42:5c:57:f5:92:4f:f2:22:a1:26:d7:
df:fd:80:9c:cf:ec:03:07:2f:70:3f:12:fa:ff:c3:4e:01:28:
76:e6:63:20:1c:b6:af:00:03:3a:26:09:8b:31:d3:7a:98:42:
18:52:b4:6f:82:2b:54:d4:97:54:59:ba:e1:56:66:f4:55:68:
e2:f7:99:4a:3e:68:5d:23:ad:c4:18:e0:1f:5a:b7:f0:6b:ec:
ef:a6:d7:bd:0b:55:c9:7b:c8:ec:14:a1:40:51:57:24:e3:77:
e7:62:15:9c:6b:0b:73:e6:f6:57:a2:db:c6:08:ba:b7:fd:61:
72:b0:7c:3d:f8:1d:6e:7d:6a:d5:7f:a9:ce:e2:47:03:e2:08:
7d:63:02:91:4d:aa:e9:df:57:f7:1b:49:3b:fc:9c:f6:64:f8:
03:c4:d1:9a:bf:26:5f:0b:1b:33:00:62:85:95:c0:16:15:34:
aa:b5:1e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:38 2026 by rpki-client