Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144755.roa
File: AS144755.roa (raw, json)
Hash identifier: 0kic+BuFtvBwAk2XiJVT7YDF+abveC70UidPc1Cdv80=
Subject key identifier: 8D:C5:C8:7A:8E:EF:4B:70:D2:B6:03:4E:37:EF:EA:1F:13:56:5D:6B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 09AA989C70940E0F8E2723FFE9B868CCEB1A9AB4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144755.roa
Signing time: Fri 22 May 2026 06:27:32 +0000
ROA not before: Fri 22 May 2026 06:22:32 +0000
ROA not after: Fri 21 May 2027 06:27:32 +0000
asID: 144755
IP address blocks: 240a:a839::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:aa:98:9c:70:94:0e:0f:8e:27:23:ff:e9:b8:68:cc:eb:1a:9a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:32 2026 GMT
Not After : May 21 06:27:32 2027 GMT
Subject: CN=8DC5C87A8EEF4B70D2B6034E37EFEA1F13565D6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:50:4f:94:6f:69:19:cd:b1:7e:5c:ec:50:df:
ce:1b:e0:81:8a:36:71:7c:ed:1e:2b:2e:40:72:28:
e6:dd:8f:d0:d3:a8:e5:1c:70:9d:4d:58:ea:22:25:
f4:c6:59:cc:1b:99:99:2f:0e:c9:84:8e:c1:e8:9b:
55:6a:27:10:36:1c:e6:d5:1c:2c:07:da:69:f8:7d:
da:50:3b:e7:2c:f7:24:f5:e9:83:c7:e0:cf:ac:2c:
38:39:cd:a6:30:bc:27:5c:3f:ce:54:50:27:57:31:
e2:25:5a:ae:b2:3e:e9:15:a6:51:22:95:2f:c4:ff:
b5:e3:f7:a5:b5:8b:51:87:31:d6:cc:24:7c:83:b8:
d2:b2:6a:3c:ed:fb:9b:71:5c:e8:a6:94:4e:3d:51:
01:7d:7f:10:48:e1:7b:3c:e2:07:54:f0:af:a8:66:
e4:55:2d:c8:53:68:7c:eb:cf:84:fa:74:4b:38:84:
d0:18:a4:3a:f9:c7:aa:af:10:47:b7:b6:d5:0b:af:
cc:e1:c4:f6:0f:ce:40:c1:bb:d7:f1:26:1b:ca:62:
d9:24:5a:36:9e:f1:31:7f:83:21:1c:63:e9:60:88:
96:a5:9f:67:cb:5a:f6:96:71:ce:a2:f2:83:a1:e2:
75:4f:14:80:50:db:df:e6:15:90:a6:56:96:ca:d6:
f6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C5:C8:7A:8E:EF:4B:70:D2:B6:03:4E:37:EF:EA:1F:13:56:5D:6B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144755.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a839::/32
Signature Algorithm: sha256WithRSAEncryption
88:09:a6:2c:e4:c4:0e:7b:78:a3:b5:47:3c:63:50:f3:f8:ab:
42:c4:0a:f8:16:61:bf:b8:f6:e6:62:5f:71:1b:70:98:65:b5:
7b:81:59:e4:96:2f:52:f8:92:fa:9f:f0:64:7f:ec:af:9c:18:
65:da:3d:b2:d3:47:31:c5:32:65:5d:7b:89:52:fb:92:d2:a0:
20:f3:ac:b3:49:36:52:7d:3c:88:c5:56:91:6a:09:9f:64:3a:
58:90:44:d9:5a:4d:58:42:6e:90:d0:48:d2:b1:0a:d1:2d:f5:
79:64:79:09:7b:00:78:c0:09:43:18:61:ca:ad:0b:b0:91:58:
a4:2e:b5:cf:4d:46:41:6e:05:e6:db:58:18:90:ff:67:a5:bb:
d6:88:db:8b:3f:95:cf:bb:39:5a:d2:42:ab:2b:d1:76:f7:d2:
80:92:03:d9:42:13:de:99:0f:9f:5d:35:df:ff:ff:d8:5e:99:
61:aa:43:c5:bc:23:b9:55:22:49:68:94:07:03:ed:91:fb:a4:
6c:02:a5:db:35:93:94:0d:84:7d:8b:94:bb:c3:02:c0:e4:01:
59:69:a9:f9:0b:a6:e5:f7:bd:08:dd:8a:09:8f:ea:59:90:f7:
32:dc:ea:8b:3d:92:19:c7:40:d8:63:85:fe:31:a7:53:19:f2:
bb:ae:77:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:13 2026 by rpki-client