Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144784.roa
File: AS144784.roa (raw, json)
Hash identifier: 9c4MgWfgiJhBlo2RsMFrRt02uxUB4nwiEEHbO6izICM=
Subject key identifier: 2D:75:4B:C1:6A:BF:A1:EB:9F:07:E8:08:6B:BB:09:03:0B:C8:32:E0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5143869E2DFB27E369E178CF0D25E335A8481946
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144784.roa
Signing time: Fri 22 May 2026 02:47:40 +0000
ROA not before: Fri 22 May 2026 02:42:40 +0000
ROA not after: Fri 21 May 2027 02:47:40 +0000
asID: 144784
IP address blocks: 240a:a856::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:43:86:9e:2d:fb:27:e3:69:e1:78:cf:0d:25:e3:35:a8:48:19:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:40 2026 GMT
Not After : May 21 02:47:40 2027 GMT
Subject: CN=2D754BC16ABFA1EB9F07E8086BBB09030BC832E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:ac:15:54:6c:f4:3d:04:41:a1:52:dc:5c:
3c:5a:46:6b:55:04:74:4a:c2:ba:07:05:e7:a4:26:
42:2b:21:ee:cf:21:99:38:ca:28:f9:fa:f4:4d:22:
61:14:32:6a:2b:3a:30:92:7d:20:df:83:48:f8:ff:
e8:c3:b3:31:8f:28:4c:7c:81:a8:45:64:33:2e:c1:
21:0c:8e:36:db:19:b9:85:f3:8f:d8:c9:11:5b:c4:
b9:f6:46:4f:01:1d:4d:db:b2:6a:2e:48:38:e0:17:
70:6e:3a:8f:77:b8:8a:ca:ae:29:bf:db:b3:25:c1:
2c:b8:5d:63:b8:80:b5:29:d9:22:24:86:38:48:b5:
15:0a:c6:5b:57:e7:9c:1d:50:b3:81:ca:d3:26:9d:
bb:9c:bc:00:20:95:be:53:d5:3c:34:fb:6c:af:23:
af:4e:85:d3:8e:bc:3f:e5:84:b5:10:46:d8:ae:b0:
d0:04:cf:9d:5d:09:b9:45:42:e7:c5:28:3c:25:8c:
40:54:ed:da:58:1a:fb:ab:06:8a:f8:c3:86:ad:79:
ae:db:64:b9:8c:f6:1e:11:aa:e0:07:fc:8f:cb:f9:
96:c1:b7:e9:9f:40:63:58:5b:a0:5d:d9:aa:ae:f7:
46:7b:60:fb:24:d9:ab:d5:21:2a:be:eb:e4:62:b9:
b8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:75:4B:C1:6A:BF:A1:EB:9F:07:E8:08:6B:BB:09:03:0B:C8:32:E0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144784.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a856::/32
Signature Algorithm: sha256WithRSAEncryption
97:f4:b1:ce:6d:dc:3a:32:f0:1e:60:eb:5b:2b:58:36:3f:92:
02:02:52:96:cf:ca:05:8b:e1:80:aa:ff:ef:bd:dd:15:c7:15:
d7:40:9d:0e:c7:b5:4b:c1:fe:37:19:9a:c4:16:e4:86:c2:58:
fe:ac:79:c2:af:fa:9d:46:58:db:30:17:e9:eb:6d:19:74:a3:
a6:6a:b8:11:1b:f1:28:e8:bd:53:15:3a:fc:c9:56:bf:9e:5f:
bf:6d:ba:33:c8:b1:0e:9b:3f:0d:06:b0:17:26:81:47:4e:fa:
c7:e1:52:25:89:c0:db:99:dd:0b:f3:fb:0f:4b:62:2d:f1:7f:
97:7f:31:06:1d:6a:a3:0f:ec:f5:25:cc:f1:8d:95:69:29:ea:
9d:b7:e0:0c:79:d9:cf:39:e6:07:ea:77:cb:5f:59:f2:52:8e:
96:9c:9d:ec:f9:bb:0a:97:93:3e:9c:af:d5:33:1e:0a:c4:87:
b2:f0:7d:b7:8f:a8:3d:56:f0:82:26:17:f8:c7:a2:85:ce:19:
4f:2b:db:25:20:6b:ab:a8:99:3b:e3:24:30:ea:64:f2:67:65:
af:54:07:4a:ed:c1:06:85:a2:82:7d:6f:7f:93:b6:eb:0f:f2:
a3:70:89:07:15:c1:e6:6d:9d:51:c4:42:53:ce:eb:4d:50:58:
a3:78:ab:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:16 2026 by rpki-client