Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144736.roa
File: AS144736.roa (raw, json)
Hash identifier: XIABzc4meZL1g3p9pzmdXJqv0OLLvVAtyhAVeN3c3gw=
Subject key identifier: 42:83:80:1A:65:59:E9:21:C5:41:48:1C:63:CA:A7:66:09:A0:F6:31
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6E7B0244FF43C50436443868133DAC56FAE929CB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144736.roa
Signing time: Fri 22 May 2026 06:58:11 +0000
ROA not before: Fri 22 May 2026 06:53:11 +0000
ROA not after: Fri 21 May 2027 06:58:11 +0000
asID: 144736
IP address blocks: 240a:a826::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:7b:02:44:ff:43:c5:04:36:44:38:68:13:3d:ac:56:fa:e9:29:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:11 2026 GMT
Not After : May 21 06:58:11 2027 GMT
Subject: CN=4283801A6559E921C541481C63CAA76609A0F631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9b:db:44:55:ec:4c:c7:3d:59:bc:ff:cf:94:
98:ad:78:92:2d:22:81:07:30:b5:2f:78:67:01:e7:
40:d1:01:27:73:b8:71:1d:c6:49:9c:ce:d2:02:ff:
30:b5:08:fb:65:30:80:88:1f:46:f0:87:67:15:96:
17:31:a5:94:f5:6f:22:3c:b1:56:84:39:ea:78:d3:
59:a7:96:9c:f0:c5:e7:5d:48:ff:77:7c:c2:3b:61:
ee:2b:37:f6:8e:e9:61:b5:13:46:2f:62:56:3e:48:
29:2b:61:7b:c5:78:41:c9:4c:5e:a3:d6:b0:a5:ac:
57:30:91:c8:de:72:37:77:01:aa:2d:b8:f4:3a:bd:
9f:44:f6:ce:3d:42:53:2e:a8:6c:f0:49:a1:70:95:
0c:d9:fc:3b:a0:3f:f9:ab:00:86:c9:f0:f2:ac:34:
8c:f1:30:4c:9e:05:3e:31:0d:19:9c:1f:fc:ac:0f:
83:8a:d2:54:56:98:1e:c3:4e:c7:d7:d0:d3:61:02:
ed:bb:fb:9b:91:a3:47:b3:9a:8c:8e:b9:62:b0:08:
51:8d:e1:e7:b4:af:7a:12:3b:2d:42:ac:cc:8a:ee:
8c:dc:e7:4f:7a:3c:b9:83:bd:7f:7d:23:ec:d6:fa:
7d:39:d6:bb:bd:bc:80:46:11:b7:fe:69:d3:96:9f:
86:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:83:80:1A:65:59:E9:21:C5:41:48:1C:63:CA:A7:66:09:A0:F6:31
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a826::/32
Signature Algorithm: sha256WithRSAEncryption
54:5e:28:02:6e:a2:8a:75:e8:7e:52:1b:76:37:31:b3:3f:66:
8f:70:07:a8:5c:7c:6d:9d:e0:1c:aa:38:9d:d4:cc:21:70:57:
d9:ce:22:83:1e:26:96:18:2b:50:8a:97:44:c2:ca:e1:0f:87:
9b:09:1f:07:0d:cc:5d:56:71:69:13:3a:93:79:de:80:81:7d:
36:59:49:0a:5b:8c:79:cd:3b:9e:38:ab:ea:2c:c7:bd:e7:4b:
f7:cd:d3:16:4a:d2:a5:dc:3e:32:d1:00:f7:d7:cf:2a:81:88:
cb:3e:00:b3:b4:b4:c6:1e:97:04:4c:97:fe:96:87:d9:fa:43:
1f:b2:9f:c2:13:bb:7f:ec:26:99:35:75:0d:96:75:8a:ab:d2:
4e:25:64:fd:d8:0b:ad:af:f3:26:18:b9:c1:1a:00:df:3b:d5:
99:ff:37:20:0b:98:3e:11:f5:80:25:5c:96:e4:eb:35:f9:77:
32:f6:85:23:71:db:b3:72:80:73:65:8c:ce:95:c5:cd:e7:dd:
af:a2:89:71:64:91:01:a5:d8:3b:d3:8e:07:4f:79:32:53:0c:
b5:27:80:fc:9e:44:da:52:b7:94:45:c9:5e:e0:3c:91:05:48:
6c:40:1d:59:55:7f:3a:e7:86:19:00:b3:b7:4c:c8:51:34:20:
a6:57:ef:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:29 2026 by rpki-client