Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144741.roa
File: AS144741.roa (raw, json)
Hash identifier: 2J+gtLOzg5XnuASJKaNMtCmmw9jwiGaoOJFjlkpJpXQ=
Subject key identifier: 27:A9:2A:B9:36:A5:E5:F5:F9:C7:4A:02:FB:8D:2A:BD:7C:F5:B4:62
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 48784BB301AA631BF3A1B29AB3F7F5A468187647
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144741.roa
Signing time: Fri 22 May 2026 04:08:24 +0000
ROA not before: Fri 22 May 2026 04:03:24 +0000
ROA not after: Fri 21 May 2027 04:08:24 +0000
asID: 144741
IP address blocks: 240a:a82b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:78:4b:b3:01:aa:63:1b:f3:a1:b2:9a:b3:f7:f5:a4:68:18:76:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:24 2026 GMT
Not After : May 21 04:08:24 2027 GMT
Subject: CN=27A92AB936A5E5F5F9C74A02FB8D2ABD7CF5B462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:33:c8:c3:d3:9c:63:8c:5f:bd:c2:a5:b6:11:
56:32:85:bc:d1:5c:1a:4f:4f:3c:5b:90:84:52:70:
0b:ec:12:09:0f:8a:11:67:ff:82:37:98:f8:cb:98:
d2:46:f4:f3:52:86:cf:ea:9f:da:5c:17:fb:bf:8c:
34:82:14:bb:86:e6:ce:27:b3:14:b1:54:ed:58:f9:
7e:71:81:8a:d6:94:1d:4b:c5:92:a0:df:84:ba:8a:
84:7a:69:cc:60:0e:48:a0:e2:77:19:cb:0d:fe:7a:
e0:d2:6e:81:72:da:73:c9:1d:09:14:9e:27:a3:da:
66:56:64:c6:03:3d:48:69:a6:c8:ae:d4:3a:0c:08:
19:9d:ad:38:f1:ad:94:b9:7a:61:73:b4:d2:08:97:
15:99:5c:39:05:a9:20:37:f0:d0:aa:7f:d4:3b:cf:
97:1f:9f:ab:ac:cc:c5:cb:8e:f4:3e:ae:ed:d5:b4:
85:a7:ac:3a:92:2e:63:31:5c:36:e2:c1:46:7a:31:
b9:90:a0:68:1d:e0:87:17:77:ec:35:8b:66:da:a1:
e0:d3:33:c9:6b:74:88:d5:64:93:14:5f:f2:77:1d:
42:29:3a:98:06:71:6c:94:ba:88:65:11:a1:fc:18:
f9:78:4a:8c:1d:29:49:f4:e0:1d:6f:47:ac:5c:99:
23:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A9:2A:B9:36:A5:E5:F5:F9:C7:4A:02:FB:8D:2A:BD:7C:F5:B4:62
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144741.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a82b::/32
Signature Algorithm: sha256WithRSAEncryption
4c:6a:0f:4d:5e:4e:dc:fb:34:89:df:ab:d5:4a:b3:0b:c7:d4:
5b:82:07:14:21:55:3c:0d:56:43:12:7d:d7:c8:b3:02:7f:73:
73:da:ab:f3:08:f1:8a:3f:fb:05:8e:bf:ef:47:ae:22:10:d4:
5d:df:80:a4:12:83:4d:62:b6:e6:2a:b4:b7:e1:22:e6:53:8d:
db:f2:e6:97:a2:77:fa:93:25:2b:1a:b8:77:ef:89:a5:82:3b:
62:60:07:58:5d:56:3a:3b:b9:76:c5:9e:62:3a:27:51:fa:2e:
d6:cd:8a:fe:9a:3e:09:e4:00:b7:8d:38:92:f4:b3:a1:b9:c1:
e3:e0:c9:d9:57:9c:cd:89:14:40:55:e5:bf:4b:ab:e1:71:99:
d7:4e:d2:10:a1:81:49:9d:eb:a5:e0:f7:3d:8b:4d:36:f4:de:
dc:9a:7f:d9:3f:e9:f4:ac:e7:68:4e:bc:5a:7d:ea:de:57:1b:
21:61:7b:34:07:8d:6c:f3:2a:35:30:b4:8a:99:e1:80:c6:45:
db:19:e6:6b:1c:34:0b:10:e9:a6:b8:ba:58:f2:13:e9:30:0c:
70:db:5d:b8:e5:db:72:f4:fc:b8:d7:43:92:00:e6:b8:ab:06:
03:b6:a6:1c:48:76:02:e0:39:54:e8:4a:2b:50:98:f7:57:68:
be:84:fc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:19 2026 by rpki-client