Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144765.roa
File: AS144765.roa (raw, json)
Hash identifier: Ya2BnGuhH0reigJLWTFWXe0gu8+XVJmm7a64XpuIaYA=
Subject key identifier: 70:DB:95:53:02:CB:E7:1F:66:86:A2:A7:CF:1F:CC:CF:D1:79:DD:3E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1D12997848CAF0BC52C8A61FC1622039214F9B9C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144765.roa
Signing time: Mon 25 May 2026 02:22:32 +0000
ROA not before: Mon 25 May 2026 02:17:32 +0000
ROA not after: Mon 24 May 2027 02:22:32 +0000
asID: 144765
IP address blocks: 240a:a843::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:12:99:78:48:ca:f0:bc:52:c8:a6:1f:c1:62:20:39:21:4f:9b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:32 2026 GMT
Not After : May 24 02:22:32 2027 GMT
Subject: CN=70DB955302CBE71F6686A2A7CF1FCCCFD179DD3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:ce:53:28:6c:ce:42:0b:b1:bd:4a:33:15:
a3:3a:25:24:69:d5:31:5c:cc:be:92:23:dd:94:10:
84:69:04:ec:d5:ad:df:93:36:e6:d9:16:a9:5a:a4:
f8:59:62:bd:cc:27:43:e3:37:51:7a:bf:c6:78:e0:
a4:ec:f3:22:fc:fe:54:f7:1b:33:4d:93:83:06:45:
af:15:b0:c8:82:3e:83:ab:3d:9f:43:75:49:ca:d3:
68:a9:ea:31:f8:59:2c:f8:69:38:21:46:1a:65:f8:
60:f3:5c:c1:1e:0e:c6:44:56:6c:64:75:b1:3d:a5:
36:c6:84:95:26:91:1a:85:89:f7:b6:ba:51:61:3b:
d4:03:44:44:1e:22:c4:c1:c2:cd:d1:dc:23:4e:60:
c6:3d:c0:4d:9f:39:7a:74:95:54:19:19:bb:a2:0a:
a2:f5:11:14:26:3a:36:51:79:74:79:c9:9b:1d:68:
e7:59:72:fc:fa:23:a1:6d:1f:81:42:65:c4:13:2b:
fb:26:93:08:9f:13:27:01:f2:26:da:66:ed:57:4c:
3b:61:5d:5b:47:67:88:49:fd:7e:49:51:41:ce:27:
62:b7:a5:f9:7f:c3:3d:9e:e6:b0:f9:7c:6f:85:8d:
e8:2b:12:99:7a:6f:32:ea:70:54:b8:aa:f6:41:83:
e9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DB:95:53:02:CB:E7:1F:66:86:A2:A7:CF:1F:CC:CF:D1:79:DD:3E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144765.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a843::/32
Signature Algorithm: sha256WithRSAEncryption
7e:5e:fb:c1:de:61:45:a1:d5:78:0b:fa:c1:97:1f:08:f5:7a:
81:90:0a:01:b1:06:7b:73:65:0c:cf:f1:4b:ec:d6:29:20:30:
b6:7d:fd:54:0a:70:64:9b:f0:8d:63:f7:8d:bd:11:dc:a6:9b:
4b:d4:e4:be:a1:b3:e2:03:b9:72:ea:57:2c:58:e3:94:7a:68:
e9:7f:96:a2:e2:17:29:5d:f3:28:28:a7:81:92:ae:b7:ce:46:
d0:14:09:5f:87:b4:04:4c:18:05:60:30:bf:2c:0d:bb:2f:6f:
c0:28:f8:c4:4a:93:eb:c3:1f:3a:ed:21:15:fe:4c:c9:cd:fc:
d3:b5:5e:9f:6d:26:75:83:7c:de:28:15:c7:d6:a8:e7:cb:37:
77:51:b6:19:02:a5:26:d8:b7:9e:a7:dc:bf:64:57:9c:44:87:
42:28:18:63:db:ac:11:cd:74:0b:20:5d:d6:be:2c:21:12:a7:
07:51:05:17:d7:c2:8a:1d:df:15:3f:50:a5:d6:6d:63:32:5b:
48:15:cc:3b:e7:ea:9e:ce:17:84:4c:72:ac:73:97:8a:36:75:
74:38:b9:3f:1d:33:ab:a1:ef:95:9f:86:30:6c:7d:2b:2e:f3:
f0:07:a9:08:e8:1b:2f:8e:b4:2f:bf:64:ce:f2:d3:40:94:88:
96:c1:a2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:28 2026 by rpki-client