Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144820.roa
File: AS144820.roa (raw, json)
Hash identifier: x8U5l8a8Dmfog/A7gsp7bHkSgAt/UiJGIgwmi8wQfXw=
Subject key identifier: E4:BB:86:FA:C9:FA:2A:4D:72:EE:E9:CF:4B:A5:ED:7C:35:77:47:80
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 716713D9702126BEC066EA4480B9518C2FE70BB8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144820.roa
Signing time: Mon 25 May 2026 01:20:20 +0000
ROA not before: Mon 25 May 2026 01:15:20 +0000
ROA not after: Mon 24 May 2027 01:20:20 +0000
asID: 144820
IP address blocks: 240a:a87a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:67:13:d9:70:21:26:be:c0:66:ea:44:80:b9:51:8c:2f:e7:0b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:20 2026 GMT
Not After : May 24 01:20:20 2027 GMT
Subject: CN=E4BB86FAC9FA2A4D72EEE9CF4BA5ED7C35774780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c3:11:53:c1:6c:13:8d:f1:2a:d8:be:36:59:
47:66:e6:64:9f:c9:6e:06:a7:4b:d0:43:0d:26:f4:
8c:18:9b:0a:9a:29:82:42:bb:59:0f:29:23:f8:30:
9e:03:69:3f:96:f6:f5:1d:fb:a5:0e:16:22:e4:37:
08:eb:b9:b0:a2:cf:b6:64:39:b3:00:ed:c8:71:97:
b6:f5:da:d3:90:47:87:d4:9f:30:38:8d:24:50:bd:
ab:20:52:da:3d:f9:e2:bf:60:d5:82:c3:7c:f1:9e:
5e:2f:e5:4b:76:e1:ea:83:47:7d:98:95:aa:ae:36:
08:e5:d2:30:e6:71:f8:e8:01:86:d4:21:09:0b:5f:
6f:9e:db:ce:d5:6b:39:d1:cf:ca:3b:de:dc:60:2e:
5b:71:b0:61:50:84:b6:6f:3d:c0:05:83:7b:4f:81:
ba:98:0e:9e:5b:8c:ff:18:a5:ad:e0:cc:2c:35:1c:
78:a4:24:73:cb:28:43:0b:df:cb:d2:64:a9:27:b2:
08:e4:ba:fb:f6:f7:5a:88:d3:e8:51:22:fa:f5:2f:
c4:53:d6:b1:97:2d:ea:22:d5:fb:c3:e3:c9:af:f5:
12:15:7c:52:15:6f:e3:d7:47:81:47:2d:8b:fa:50:
77:2d:c4:86:b8:d9:38:c3:f5:06:e5:62:ae:79:11:
38:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BB:86:FA:C9:FA:2A:4D:72:EE:E9:CF:4B:A5:ED:7C:35:77:47:80
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144820.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a87a::/32
Signature Algorithm: sha256WithRSAEncryption
40:c7:45:bb:85:2c:f7:86:fc:79:7f:fa:49:f1:67:cd:5f:da:
b4:8a:69:65:8d:af:97:70:7c:8f:c2:ad:85:ee:53:0b:aa:b7:
22:40:2b:3f:75:3e:8d:6e:16:6c:47:80:b7:5d:c1:83:00:73:
79:a9:a2:bc:f2:62:44:1a:9d:e6:01:85:cd:1a:4a:24:19:76:
03:4f:5c:ac:02:24:a5:fa:94:66:e1:09:5d:e2:2a:84:04:c4:
09:c6:c9:92:47:e7:2f:f3:26:c3:1d:85:97:7b:41:8f:bb:d0:
09:26:d9:38:d4:8f:74:39:02:30:08:38:61:4e:d1:52:26:a2:
ce:2c:53:73:b7:9d:e1:b3:7a:8a:3d:7f:1d:05:72:4e:42:18:
aa:5c:13:e3:27:af:6a:3a:ef:b2:08:aa:0c:a1:d1:c1:f9:fb:
34:92:ce:e6:92:ad:8c:d8:40:a6:b2:33:fc:c5:14:ac:94:d4:
d2:b4:27:10:9a:a4:3c:ce:40:6e:a0:c3:10:43:9d:38:d2:b3:
9d:db:32:6f:11:91:f0:48:70:f4:6d:14:b7:9d:49:f4:b8:2c:
7e:c6:34:1f:98:e1:d6:a6:e6:59:77:f2:c9:c0:4d:6a:ba:cc:
b6:38:6e:aa:8a:26:1f:ba:09:12:69:99:74:63:37:35:99:82:
79:30:b5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:42 2026 by rpki-client