Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144750.roa
File: AS144750.roa (raw, json)
Hash identifier: 5emQ6kASG933fUDN6Q0NlUu5WoN8Q7vHkQEu/M/ULiU=
Subject key identifier: EA:C7:C9:86:CA:DE:DF:A4:60:BA:DC:D4:E8:D3:D1:59:41:48:21:F5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 209BA636A4F20898F0D85EEFC536212552551176
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144750.roa
Signing time: Tue 26 May 2026 02:34:48 +0000
ROA not before: Tue 26 May 2026 02:29:48 +0000
ROA not after: Tue 25 May 2027 02:34:48 +0000
asID: 144750
IP address blocks: 240a:a834::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:9b:a6:36:a4:f2:08:98:f0:d8:5e:ef:c5:36:21:25:52:55:11:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:48 2026 GMT
Not After : May 25 02:34:48 2027 GMT
Subject: CN=EAC7C986CADEDFA460BADCD4E8D3D159414821F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ae:9b:bc:c6:3e:20:24:61:d1:55:4f:45:f3:
63:84:0e:b0:4d:cf:c2:0d:ce:87:13:38:48:4e:6f:
d1:04:86:6d:68:6c:0f:69:52:7f:d2:0b:b3:b9:ce:
50:5c:24:6b:1b:73:34:70:bb:94:7c:48:1e:4c:86:
ea:79:ac:f3:b4:c8:b9:c6:c4:33:2c:bd:86:43:d8:
57:2a:9c:95:e9:3e:ab:37:6c:57:3d:76:0c:62:f6:
24:91:96:2f:eb:34:f5:f7:5c:b0:7d:7d:8a:cb:88:
da:bf:50:0c:c2:14:69:8e:2b:56:2b:88:f9:06:6a:
f2:05:04:69:2e:51:49:1f:b6:b5:b6:d7:2f:b5:c7:
3c:6b:5f:2f:0b:ce:b0:ce:82:2c:de:f0:e7:e0:1f:
4c:d9:ee:f9:db:ef:aa:9c:6f:2e:79:cb:b0:28:f6:
c4:a7:c6:42:ca:68:18:08:8b:cf:1a:14:82:53:42:
3f:9a:ae:cb:2b:ee:8d:c0:4b:79:10:4b:b4:68:81:
b7:f6:10:22:31:97:56:d8:7f:62:5a:21:5d:fb:2c:
3f:7a:53:9d:5b:ae:4e:98:15:d7:c8:ab:5d:0c:df:
5b:e8:da:ea:ff:df:58:f0:0e:a1:0b:85:b1:d9:88:
2a:76:91:2e:5d:c3:d8:7f:13:76:2b:e5:9d:48:5f:
fb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C7:C9:86:CA:DE:DF:A4:60:BA:DC:D4:E8:D3:D1:59:41:48:21:F5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144750.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a834::/32
Signature Algorithm: sha256WithRSAEncryption
0d:73:60:d0:99:01:6d:45:29:7f:1e:a8:35:15:89:03:9c:af:
6f:75:e2:04:7d:a8:6b:d1:d6:cd:98:a6:21:62:b9:08:89:70:
25:71:ea:3d:39:be:f2:ea:82:a6:37:f9:36:13:88:98:33:19:
0b:bd:a0:ca:cc:87:0c:68:14:ee:78:86:97:a1:c3:83:e5:19:
cb:77:19:43:c1:80:f0:6d:2a:bd:dd:a5:0e:18:5a:a7:62:a3:
b3:74:4d:fe:a5:a2:2d:08:33:82:e6:f3:9e:53:5d:8c:92:f5:
b3:69:0a:f2:cb:c1:31:f6:5f:5d:f9:e0:5e:eb:60:3a:40:1d:
71:6b:68:ea:e7:53:b8:d9:22:3e:b1:d0:ef:3d:90:18:fe:a0:
fc:c0:12:f8:bb:e1:21:dc:a9:46:76:f5:a0:ba:3d:1b:fc:ad:
1e:e5:f4:23:10:76:61:55:3d:e1:1f:e1:72:af:32:c0:f2:de:
32:30:97:1d:f5:ef:21:67:1a:50:e9:ad:a3:38:71:de:6c:b4:
c7:c3:f0:42:a8:50:21:9b:f2:37:fb:f9:60:1d:35:06:ef:0b:
be:0d:a1:5f:10:46:ed:6e:15:7a:0e:28:bb:d1:41:cf:09:29:
48:ad:94:ed:89:6b:d3:ff:3d:c8:44:d0:9a:6f:8c:d7:8d:c1:
d4:98:e4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:58 2026 by rpki-client