Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144809.roa
File: AS144809.roa (raw, json)
Hash identifier: GxWffU8vJuM42ZCktAe3eNHcBSVHoJbg4Gr+2eLj5+o=
Subject key identifier: 1A:4A:22:3F:55:C6:A5:82:25:62:7C:6A:60:49:CC:A3:AB:73:E4:97
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 720217CFC365DC8C36F024B7E1DC0678170BBB35
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144809.roa
Signing time: Tue 26 May 2026 01:13:34 +0000
ROA not before: Tue 26 May 2026 01:08:34 +0000
ROA not after: Tue 25 May 2027 01:13:34 +0000
asID: 144809
IP address blocks: 240a:a86f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:02:17:cf:c3:65:dc:8c:36:f0:24:b7:e1:dc:06:78:17:0b:bb:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:34 2026 GMT
Not After : May 25 01:13:34 2027 GMT
Subject: CN=1A4A223F55C6A58225627C6A6049CCA3AB73E497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:97:83:94:8c:51:07:a0:a1:ce:bb:57:3c:1e:
4b:95:82:be:b4:92:68:50:ae:3d:b4:ba:88:46:47:
e8:57:a8:91:84:99:8e:b3:fa:7b:ad:b4:51:94:64:
cc:30:31:c6:32:d3:40:a1:f1:f0:1f:87:2a:26:88:
5e:00:54:ef:d1:af:0c:ea:96:93:27:3c:94:d0:16:
84:a7:c7:a1:5d:d8:b8:80:fa:82:51:d9:ea:cd:b1:
4b:a3:1d:0d:a2:e4:36:67:46:00:7b:eb:e7:b7:e2:
17:10:41:13:fd:1a:d5:99:85:18:f9:f6:6d:ae:1c:
5b:ea:be:ce:d5:7d:eb:5f:4b:ab:df:10:7e:85:eb:
97:96:04:0c:3b:8d:86:ab:02:24:f1:31:31:54:5a:
0b:6e:be:99:f9:b0:8a:cf:58:43:d9:01:bf:2a:a4:
58:60:78:55:b5:14:b3:d2:a5:0e:2c:c7:bb:dd:dd:
7c:b0:47:34:0b:15:99:c3:6a:77:ba:fd:7c:d2:66:
ba:8b:51:64:4d:fa:6d:01:c9:0d:3d:ff:9d:81:87:
ae:5c:05:a0:70:1d:4b:f0:ce:cb:e6:f7:ad:69:de:
a1:ca:3c:ec:79:38:ff:ea:47:0a:b7:56:97:5e:4e:
b8:10:b4:31:c0:a8:77:f8:90:c8:60:92:e2:15:2b:
00:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4A:22:3F:55:C6:A5:82:25:62:7C:6A:60:49:CC:A3:AB:73:E4:97
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144809.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a86f::/32
Signature Algorithm: sha256WithRSAEncryption
7d:50:cf:74:b2:e2:8c:a7:08:35:6f:0a:50:ea:07:56:1c:a5:
e7:1a:ca:ad:b8:fa:cd:36:05:5f:1e:f0:00:df:0e:c5:12:52:
36:72:6a:f5:f9:91:eb:be:ea:b5:f6:49:b0:47:c8:75:9b:66:
85:6b:bb:de:2d:9c:18:d0:ea:21:48:58:47:0c:1f:50:ba:d7:
e4:7c:c6:12:91:5e:b9:86:9f:78:52:13:a9:d0:0a:1f:e3:28:
10:14:9c:8d:b1:e9:39:00:95:8b:dd:b4:db:73:3b:b0:bc:12:
b4:c2:f3:39:61:e1:07:e4:35:10:43:f7:20:e2:0c:01:e5:05:
fc:08:20:a8:20:a3:82:bc:d4:ff:b8:e7:2d:c6:28:f3:11:d2:
64:31:5b:4e:38:06:34:0f:f5:39:f9:14:73:7a:04:e2:28:ff:
ba:b5:96:e6:fd:35:c2:0a:78:35:17:62:67:bb:b2:37:c1:25:
e7:4f:3a:e3:02:9f:7f:71:7f:38:e0:bf:61:2b:1e:3c:1a:6d:
a5:a4:e1:4c:79:88:2d:ec:29:43:d3:cd:ef:a5:d0:83:5f:4c:
55:26:fc:81:f7:7c:5b:04:3c:ae:bf:54:7b:14:c8:c2:e3:79:
fe:01:dd:9e:cb:b3:b6:5a:16:90:8c:29:f2:b4:30:3e:49:53:
61:c5:22:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:35 2026 by rpki-client