Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144822.roa
File: AS144822.roa (raw, json)
Hash identifier: 8i8upUcZFeCryAar5fcGNjzEmxXwTUhsUA5k6zYXQws=
Subject key identifier: 6A:B1:D7:B6:DB:44:84:DC:E1:F2:41:C9:9B:64:C0:0C:3C:68:35:99
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5176F39D234454C6D4D2339BDF43E62EE08804EE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144822.roa
Signing time: Fri 22 May 2026 06:58:12 +0000
ROA not before: Fri 22 May 2026 06:53:12 +0000
ROA not after: Fri 21 May 2027 06:58:12 +0000
asID: 144822
IP address blocks: 240a:a87c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:76:f3:9d:23:44:54:c6:d4:d2:33:9b:df:43:e6:2e:e0:88:04:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:12 2026 GMT
Not After : May 21 06:58:12 2027 GMT
Subject: CN=6AB1D7B6DB4484DCE1F241C99B64C00C3C683599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bb:52:e5:fa:86:26:81:99:81:65:db:b4:6a:
29:6e:9b:d7:95:4a:fb:b1:ba:13:3c:79:43:59:d5:
93:05:1a:e5:43:b4:93:77:d8:5f:a0:dc:1e:6e:d4:
6f:e7:c1:fb:4c:f9:56:d5:3e:32:d4:9f:3f:fb:85:
d9:4c:e0:f4:78:38:98:23:06:01:70:2a:61:38:99:
bb:8c:7d:e6:3d:9a:34:39:33:e7:c5:8c:df:20:7c:
1b:35:af:40:91:16:19:5f:9c:44:d4:a7:65:5b:06:
8c:85:0c:0f:60:36:d6:bd:ed:55:71:10:fb:73:74:
e0:16:66:30:ec:f4:c1:a9:8c:5c:c8:a8:a2:cc:a7:
7c:33:30:06:28:49:80:2c:bf:8c:2d:80:ba:35:e0:
d3:b9:f9:ea:ee:2a:57:ca:a6:b7:88:8e:38:2c:ac:
e2:74:c2:d2:e2:35:0f:07:2c:f1:8a:2a:7b:e0:01:
06:26:68:88:c9:93:09:91:d2:9d:ac:ad:a1:1a:44:
00:de:2c:ec:64:cc:26:46:e6:48:50:e1:69:92:14:
cc:e2:78:57:1f:00:e7:7f:31:ea:98:db:61:71:a9:
4b:41:ff:27:04:86:51:7a:52:84:56:11:3b:1c:0b:
8d:90:f7:bc:c7:85:55:12:7b:93:01:3e:63:b3:0a:
fb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B1:D7:B6:DB:44:84:DC:E1:F2:41:C9:9B:64:C0:0C:3C:68:35:99
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144822.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a87c::/32
Signature Algorithm: sha256WithRSAEncryption
a4:46:86:b0:bf:0d:d7:0d:45:fa:80:94:69:e6:64:03:0f:4f:
28:2f:b9:99:f5:0f:0e:ae:46:9e:f7:44:ea:6e:b3:89:18:4c:
9a:18:8e:1b:61:3b:57:79:de:6b:7e:1d:7e:d5:85:6d:2b:f1:
b5:06:54:2f:98:da:21:18:41:ed:2f:71:41:5a:69:1a:67:37:
32:c7:e3:af:12:21:3a:da:2f:2d:0b:60:d8:90:0b:e1:c6:f7:
57:11:49:22:8b:ec:b7:ed:25:1f:a5:f8:57:05:87:67:e9:bb:
4c:f2:f2:6f:cb:c7:26:85:ec:6b:82:14:45:c8:ab:23:f3:37:
08:33:bf:0c:1f:e7:c0:18:d6:2a:45:ce:4c:3c:cc:a1:ac:c9:
9c:6d:12:87:17:86:aa:7e:cb:71:c1:d9:f4:ee:ad:92:68:be:
43:a3:25:fa:90:16:ba:4e:c9:d2:86:b0:16:70:ca:84:dd:e5:
94:d7:17:00:71:c5:7c:19:e2:28:ce:d1:df:ad:02:0b:b1:3f:
ec:42:c2:bc:4a:ba:f1:f2:3f:a4:32:7d:be:a2:91:16:44:36:
08:ac:3b:84:5a:19:50:19:ba:4f:53:4c:99:43:d8:b5:97:55:
16:ff:d6:fd:83:73:f2:4f:3e:0d:5a:39:f2:f1:82:e5:68:a9:
21:be:46:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:52 2026 by rpki-client