Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144800.roa
File: AS144800.roa (raw, json)
Hash identifier: epqbXmRjbyhGOjr81o4F71huYapHEBLrVj8+tdJ9uII=
Subject key identifier: F6:F9:0A:F2:EA:A5:00:BF:40:A8:7D:78:34:E6:E5:86:14:A3:79:9C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5B7F927E3991CCE9AEC835091B0644063B032621
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144800.roa
Signing time: Fri 22 May 2026 02:47:45 +0000
ROA not before: Fri 22 May 2026 02:42:45 +0000
ROA not after: Fri 21 May 2027 02:47:45 +0000
asID: 144800
IP address blocks: 240a:a866::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:7f:92:7e:39:91:cc:e9:ae:c8:35:09:1b:06:44:06:3b:03:26:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:45 2026 GMT
Not After : May 21 02:47:45 2027 GMT
Subject: CN=F6F90AF2EAA500BF40A87D7834E6E58614A3799C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:3c:66:0b:58:32:a1:f5:ea:3b:3f:c5:ff:
dd:58:69:f2:1b:ee:6a:05:93:c4:2e:38:5b:e4:df:
64:44:a3:57:38:27:c2:0a:59:52:0f:96:84:1f:c1:
3d:5d:2b:b1:df:26:70:30:8f:cf:f2:14:a2:eb:45:
2c:ce:16:7b:3d:0f:20:14:42:3f:14:4b:a7:48:f0:
f1:fc:7a:50:6a:a8:08:d6:a8:db:89:b2:eb:3a:ea:
d7:ad:9b:e7:1d:d6:d6:fa:aa:48:0d:a7:c0:8f:d7:
e3:8f:09:ea:a4:db:07:00:74:7d:31:64:bb:fd:73:
13:6c:88:22:e7:b8:73:48:e6:bd:9a:b6:d7:82:9e:
69:77:db:a7:ef:ca:e1:f7:63:4c:25:66:71:76:c3:
fb:44:b1:a2:a3:18:31:b8:cd:c9:cb:13:9f:f0:0e:
72:1a:db:1c:38:d8:1e:19:93:aa:82:65:66:99:e9:
22:46:16:d5:39:02:74:0d:be:b6:3b:dd:0f:01:68:
ad:d4:0b:b9:85:ae:6c:cd:7e:1e:55:b8:d4:86:2a:
04:63:53:39:2a:e5:96:5e:b7:39:d2:49:7c:62:f8:
1e:94:ae:92:fe:3c:0b:2a:70:e7:82:62:f4:52:c1:
68:dd:c2:4d:00:fa:07:a3:75:a5:2f:52:e1:51:7c:
be:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F9:0A:F2:EA:A5:00:BF:40:A8:7D:78:34:E6:E5:86:14:A3:79:9C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144800.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a866::/32
Signature Algorithm: sha256WithRSAEncryption
9d:c3:81:d3:11:f5:46:18:95:5d:21:11:5c:87:af:2c:66:33:
9f:a6:0e:19:6d:a1:50:99:f5:a8:45:1f:22:2f:d1:67:19:87:
49:97:80:45:49:6d:c3:a2:1b:b7:9c:75:42:65:7c:c0:db:f4:
40:30:f8:0c:73:a1:1a:e1:bd:97:2b:72:b9:d1:62:61:f6:be:
77:92:7c:ac:62:2d:ab:6b:d5:5a:b6:3a:cd:85:60:e2:26:3d:
5a:e7:50:c7:80:4b:4b:37:63:44:5c:d6:24:ba:17:89:6a:19:
2a:8e:33:ef:bc:ee:99:ee:35:19:d2:7c:06:ff:03:08:19:20:
70:fc:7e:35:e1:f6:fa:76:07:47:f0:59:ea:82:7f:b5:4f:54:
92:c9:f1:19:dd:87:0e:fd:12:3d:d0:8f:16:67:c6:cf:cc:00:
51:91:f3:7e:d7:24:49:ac:c0:05:eb:d0:97:fa:95:98:17:bc:
50:93:23:5b:08:80:3d:38:6a:31:1c:6c:57:26:65:46:27:9a:
db:b3:83:08:70:af:e5:19:66:ae:cc:22:66:4a:3f:89:1c:9e:
f7:dc:97:be:65:a7:1f:24:88:0f:6d:1b:b8:be:cb:36:e5:0f:
0d:27:b9:4d:e7:35:2f:07:1b:82:75:e5:68:97:6b:c1:45:76:
02:66:91:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:43 2026 by rpki-client