Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144745.roa
File: AS144745.roa (raw, json)
Hash identifier: 5XThWuNC0CkXqrbhlV5CSIfnUv0vndTb0g7kAwTCNR8=
Subject key identifier: DA:0B:70:9A:1A:43:AB:EB:03:A9:12:82:C8:05:3E:71:F6:30:38:0A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 12BF95E9F65ABF4E5A061775516CFEFA8D6F4BC6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144745.roa
Signing time: Tue 26 May 2026 02:35:09 +0000
ROA not before: Tue 26 May 2026 02:30:09 +0000
ROA not after: Tue 25 May 2027 02:35:09 +0000
asID: 144745
IP address blocks: 240a:a82f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:bf:95:e9:f6:5a:bf:4e:5a:06:17:75:51:6c:fe:fa:8d:6f:4b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:09 2026 GMT
Not After : May 25 02:35:09 2027 GMT
Subject: CN=DA0B709A1A43ABEB03A91282C8053E71F630380A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c6:dd:f4:10:e4:be:5d:9a:66:fb:16:49:4e:
49:2e:ac:8e:d3:11:28:ce:86:80:0a:c9:73:a2:b0:
4b:54:6e:f2:8b:35:09:35:02:42:b2:ec:05:f9:22:
1a:c4:3a:8c:16:80:d9:c0:ed:b1:1d:c8:ed:e9:a0:
30:5a:75:60:b3:7f:0a:b5:83:d0:a0:63:c2:c1:f1:
28:47:bd:b7:68:ad:2c:2a:5f:8b:2c:ed:4c:39:e7:
de:d9:f9:6a:17:3e:d1:ed:53:fb:e5:a9:9f:2e:53:
e2:20:ac:6a:53:95:3d:37:52:b4:9c:83:bd:85:bc:
51:d1:d3:83:8d:f9:9b:bb:f4:32:64:70:a5:17:c1:
18:f3:9e:95:bd:b6:10:9e:c1:1e:27:51:7d:13:68:
d6:61:f6:12:7f:97:ad:a5:f1:4d:6e:66:58:66:aa:
86:bf:f5:19:6b:ca:7a:0a:99:61:7b:df:4b:19:d0:
b1:48:37:0f:33:32:bb:a1:cb:31:24:1d:a2:b9:d7:
2b:6c:a6:77:d7:74:d4:45:0a:5f:3f:82:d4:bc:2e:
cf:a9:bf:f6:73:ba:ac:dd:42:85:c1:a7:25:78:41:
a5:71:48:67:7d:7f:ae:fd:62:74:2d:26:42:d0:4e:
fe:18:19:be:3e:1e:5a:22:de:49:22:c9:04:e2:c6:
82:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0B:70:9A:1A:43:AB:EB:03:A9:12:82:C8:05:3E:71:F6:30:38:0A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144745.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a82f::/32
Signature Algorithm: sha256WithRSAEncryption
56:41:d5:dc:39:b7:54:4a:b7:51:7a:b1:cd:e0:86:a3:07:95:
fa:6f:42:64:8c:2d:bd:04:45:1d:32:a9:cc:10:95:e0:1f:36:
92:d0:5a:c9:50:85:9b:54:fc:87:3a:89:8c:65:6c:94:04:99:
0b:c0:03:71:3a:00:0b:0f:31:d9:40:df:de:e3:31:41:f3:f8:
b2:5b:42:55:16:d1:6b:10:81:b7:16:bb:1d:97:a0:24:c0:92:
66:48:e0:2a:e5:2e:ee:1a:19:9d:3a:f6:fc:55:9a:1c:85:40:
18:a4:06:42:3c:2c:a4:d9:04:03:1e:79:52:25:3c:cf:87:12:
7a:a0:7c:2e:46:96:12:a1:5c:fb:b7:87:bf:89:c6:49:95:0d:
1b:6e:56:19:90:3a:b5:c6:bd:9a:e1:84:06:64:d3:d8:5e:7f:
1b:31:c1:60:46:45:28:ad:b4:56:ed:65:98:50:0d:ff:60:4a:
71:c7:e2:d0:8e:27:62:8a:f7:3b:35:cb:33:45:a0:31:68:dc:
5a:0f:f2:b9:e8:a3:49:f8:fd:d2:a0:ac:63:d3:a0:eb:d8:1b:
bc:71:23:0b:eb:76:c2:de:95:1c:6a:4a:7b:e4:c9:a4:26:19:
b4:11:1a:76:99:8f:2a:95:d1:41:df:18:9d:c0:7e:0b:dc:26:
2a:cc:f6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:33 2026 by rpki-client