Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144775.roa
File: AS144775.roa (raw, json)
Hash identifier: ud6iAZnDb67W8HD8dfA1NOYpOx/lJhsPDf0IA4VJNEM=
Subject key identifier: A3:4B:F8:0C:08:37:BA:6A:F5:27:4D:B8:79:44:EE:8E:4C:4A:EC:BD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2DBCCBDD74E6879FC63766A148A08327FF263B93
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144775.roa
Signing time: Mon 25 May 2026 01:38:25 +0000
ROA not before: Mon 25 May 2026 01:33:25 +0000
ROA not after: Mon 24 May 2027 01:38:25 +0000
asID: 144775
IP address blocks: 240a:a84d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:bc:cb:dd:74:e6:87:9f:c6:37:66:a1:48:a0:83:27:ff:26:3b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:25 2026 GMT
Not After : May 24 01:38:25 2027 GMT
Subject: CN=A34BF80C0837BA6AF5274DB87944EE8E4C4AECBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:90:6a:30:81:f3:fd:56:a3:f6:9d:7b:ec:ec:
62:78:7d:a8:7e:45:a4:c0:27:f3:d6:51:2f:7f:1f:
9b:f3:85:a4:b1:e6:5c:bb:54:d8:4e:d2:8a:c9:08:
37:e7:1a:81:7e:e5:9b:d4:f5:bd:1d:6d:de:bf:4f:
a9:b8:d2:74:39:68:5f:4e:e8:c5:9b:ce:4e:19:76:
24:a7:94:b0:06:9e:99:0f:83:10:15:ce:59:cd:4a:
78:01:70:fa:ad:4c:cc:dd:c0:bc:6d:3d:e0:e4:7a:
9f:8d:66:95:58:1d:97:b0:a6:5b:63:ee:03:d0:d7:
bd:fa:db:93:3b:d6:84:c2:e1:6a:c7:ea:c6:8f:56:
24:37:25:5a:e1:ef:cc:01:9d:8b:68:e6:cd:ee:56:
be:cf:c4:f7:78:3e:39:9c:f5:3e:c5:9f:e8:54:62:
17:1e:3e:81:e2:20:44:3f:cf:c8:d5:59:7a:ab:10:
44:f2:b6:c9:b2:db:a3:25:ed:be:60:8e:03:5c:0e:
a5:57:7a:33:cc:be:ee:18:c7:c7:3e:48:6b:e4:ef:
d6:62:7e:6b:9c:ef:94:16:8f:0e:b8:eb:3b:a7:9e:
66:6c:de:ba:2e:38:29:ae:4b:64:b4:c3:eb:c9:d3:
ea:e0:39:ec:b6:49:5c:9a:70:d3:bd:e6:b8:f9:9d:
f3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4B:F8:0C:08:37:BA:6A:F5:27:4D:B8:79:44:EE:8E:4C:4A:EC:BD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144775.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a84d::/32
Signature Algorithm: sha256WithRSAEncryption
6c:85:d4:36:d2:43:f4:46:63:7d:04:cf:38:55:42:f3:33:bd:
02:f4:46:c7:e4:ab:67:41:e9:e3:46:04:23:28:6c:34:63:e0:
2f:63:78:5b:e8:82:fc:17:77:8c:67:4e:ee:37:81:2d:16:31:
54:36:c4:b0:d5:bc:4c:c6:ee:5f:b1:bc:2b:e0:69:db:58:55:
b4:4a:ef:02:a8:bc:8b:58:4d:25:2f:c4:d4:24:cc:58:b9:9c:
87:9d:dc:6d:ea:77:c7:3c:87:6a:1d:13:f2:8f:df:1e:5e:22:
16:43:f1:c6:f1:24:7e:e1:07:18:8a:32:01:e4:21:15:59:13:
02:1c:ba:0f:69:71:91:7a:ee:e5:88:c0:bf:e3:3d:70:aa:dd:
0d:6d:aa:4f:5d:93:98:4b:64:86:a6:a8:4f:26:c9:4e:24:a1:
36:93:de:6d:ef:f8:96:f9:72:52:07:2c:94:25:da:d3:7c:4f:
5a:9b:65:75:75:ec:93:7c:c5:73:fb:93:49:5f:23:8c:dd:97:
50:06:4f:00:df:4b:d1:c2:c5:ba:19:a5:5c:d6:8b:86:d8:c1:
89:42:0c:05:94:9e:54:c9:7e:fb:d5:7d:9b:a3:c0:7a:98:e5:
a1:98:78:83:45:c5:74:18:95:e9:8e:e3:b6:1a:72:e3:47:f2:
f5:45:36:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:59 2026 by rpki-client