Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144810.roa
File: AS144810.roa (raw, json)
Hash identifier: faNjlPKO7umcw7G5TNDaFBzDSZ/R7JJx4UMTkvJ06PQ=
Subject key identifier: EA:B8:48:46:8B:C8:86:5D:CA:A2:28:9B:66:3B:B6:7E:57:29:03:65
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 39A1FE7C4A34F06E3D2B741D5E5CAE8881FFA34D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144810.roa
Signing time: Mon 25 May 2026 06:28:46 +0000
ROA not before: Mon 25 May 2026 06:23:46 +0000
ROA not after: Mon 24 May 2027 06:28:46 +0000
asID: 144810
IP address blocks: 240a:a870::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:a1:fe:7c:4a:34:f0:6e:3d:2b:74:1d:5e:5c:ae:88:81:ff:a3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:46 2026 GMT
Not After : May 24 06:28:46 2027 GMT
Subject: CN=EAB848468BC8865DCAA2289B663BB67E57290365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:95:bf:38:8a:83:d0:97:93:7c:4b:14:8b:4c:
8d:7d:75:78:ba:04:dc:60:38:fd:d7:a9:d9:8e:58:
45:a1:11:ff:04:ba:03:a4:89:b7:79:fb:ea:cb:dd:
0d:ca:85:50:c3:67:75:d8:29:6a:5c:4f:b9:a9:61:
76:a3:ab:7a:d9:34:4a:a8:5c:eb:a2:9f:be:6c:d5:
8d:f4:ba:9d:92:7c:70:8f:f1:00:a0:f2:17:0f:0c:
c3:ab:5e:7a:2b:6e:1b:86:13:90:60:7e:86:b3:b9:
dd:59:5f:31:d9:97:50:63:f4:0e:f9:d4:3e:38:79:
e5:8b:4c:8b:3c:3a:28:02:21:bb:37:57:9a:03:6e:
7b:b1:a8:f8:19:6e:a7:94:62:e7:de:a9:3c:3b:a6:
f3:c8:f1:15:34:38:00:02:46:2b:2b:af:52:ea:86:
6a:02:00:97:49:bc:9d:12:80:7e:10:04:d2:4f:8c:
64:0f:4a:64:6e:ae:63:65:b8:18:33:0e:73:e7:80:
7c:af:21:80:3c:e1:68:94:7a:a7:c1:75:53:d1:23:
11:ad:c0:95:71:73:ad:86:7b:3b:64:f6:ff:5c:d7:
79:95:b2:b8:0f:37:b3:63:d9:c8:a2:57:5c:5b:33:
91:fc:4d:b9:de:2d:4a:93:73:e9:4a:33:42:4c:5e:
4e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B8:48:46:8B:C8:86:5D:CA:A2:28:9B:66:3B:B6:7E:57:29:03:65
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144810.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a870::/32
Signature Algorithm: sha256WithRSAEncryption
a2:2c:2d:bc:d4:b4:7c:66:99:3c:56:f6:e1:cb:05:7f:65:ae:
bc:82:80:93:2b:e5:09:42:24:c1:e6:e7:25:4b:6c:c9:6a:98:
a2:ef:06:f9:29:a2:12:64:c5:91:fb:22:ab:34:c6:b5:c5:b4:
1b:3d:92:2b:2f:d4:81:a2:13:b9:d0:65:8a:c7:ca:21:f7:10:
57:09:7f:f6:0b:df:91:b7:33:be:ac:eb:3b:ed:b5:3c:90:ee:
e3:cb:0a:c8:64:57:ec:0b:8f:c8:46:4d:51:35:71:0c:7c:84:
a2:30:3c:ed:8e:59:44:21:41:d7:60:07:14:9c:b5:44:d3:ca:
d8:71:a6:67:6a:e3:b7:b4:94:96:1f:00:28:17:34:eb:e7:3a:
cf:a0:c1:f9:64:93:6d:d1:50:61:0a:44:87:cc:21:b9:03:89:
6e:29:8f:dc:46:ea:94:91:55:9b:fb:d5:a1:90:ed:e5:99:93:
d4:1b:53:e3:54:e0:78:3c:8c:35:85:f6:fc:99:5e:4b:0c:9a:
b2:f3:f1:aa:0f:67:51:5c:ff:7e:33:4b:21:93:80:5b:9e:4b:
cd:0d:df:e7:82:d3:4d:0f:58:25:49:4d:5c:a4:ef:16:8c:19:
cd:6b:28:c6:e0:2c:95:44:dc:3a:a1:7d:b9:49:34:a3:7a:c2:
42:dd:e9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:56 2026 by rpki-client