Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144829.roa
File: AS144829.roa (raw, json)
Hash identifier: 2JWmkt0CRWkeSEq/Es3GJEtblLlUfYH/hBJiaY2v0e4=
Subject key identifier: CE:F8:2D:FC:29:D0:4D:5E:D3:4B:0B:42:EA:22:AD:FE:4F:D9:4C:D6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 01781F6FE85BE31630F391EB3073DD05C7902D0E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144829.roa
Signing time: Mon 25 May 2026 06:28:45 +0000
ROA not before: Mon 25 May 2026 06:23:45 +0000
ROA not after: Mon 24 May 2027 06:28:45 +0000
asID: 144829
IP address blocks: 240a:a883::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:78:1f:6f:e8:5b:e3:16:30:f3:91:eb:30:73:dd:05:c7:90:2d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:45 2026 GMT
Not After : May 24 06:28:45 2027 GMT
Subject: CN=CEF82DFC29D04D5ED34B0B42EA22ADFE4FD94CD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:e7:11:a5:81:56:6a:e3:e9:ff:76:44:d8:
70:01:44:41:e5:2e:4f:fc:29:04:41:c9:76:8b:bd:
d7:d8:cc:14:2e:db:64:46:f2:a4:f3:60:97:f4:d9:
d3:4d:ab:4c:3b:a0:74:b1:57:b6:f4:98:da:dc:8d:
69:f8:0a:73:05:9f:b6:0b:f6:32:c5:ab:c0:a6:82:
a5:6c:14:a4:b2:67:fa:61:8f:61:ad:0f:fb:c7:32:
9c:ba:18:6e:9c:02:15:60:e7:de:4c:1e:f8:54:9d:
c3:45:5c:1b:25:01:4d:63:e0:c7:e8:2f:0b:d4:f0:
d0:cc:da:58:c3:6f:37:08:94:7b:83:a5:bb:41:5e:
a2:c2:66:22:b5:03:10:7c:0b:1c:b1:30:7e:5f:38:
21:17:b5:52:71:fb:9b:87:cd:bb:15:de:87:cc:a2:
2e:db:e3:c6:17:65:5c:23:d1:54:a6:17:48:1f:78:
a7:d0:33:f5:28:79:b0:50:da:9a:78:5d:40:55:00:
de:df:99:05:13:b6:79:c2:b2:c9:a4:2c:bc:b9:2b:
cd:b1:63:4c:c8:43:4d:3c:fd:62:25:55:67:dd:85:
89:e3:f8:f8:3a:a9:d5:da:96:31:b8:85:a2:d0:83:
af:53:26:f9:a3:a8:f5:5e:e4:ad:df:89:19:7e:2e:
32:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F8:2D:FC:29:D0:4D:5E:D3:4B:0B:42:EA:22:AD:FE:4F:D9:4C:D6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144829.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a883::/32
Signature Algorithm: sha256WithRSAEncryption
45:62:7f:e6:17:d3:c4:39:59:53:c8:d2:d1:44:37:3b:0c:36:
c1:44:60:45:62:32:94:7c:44:26:65:51:00:b1:17:93:34:dd:
39:fd:d0:02:d1:a3:31:78:d6:2e:ff:7e:21:ea:ed:0d:50:8e:
47:f4:9b:5d:8b:e5:a4:f2:21:50:9b:8d:1a:85:b0:56:98:88:
8d:f7:70:26:7b:42:d4:45:57:03:6d:2f:0d:2b:da:ab:b1:92:
74:33:b4:ac:38:92:cb:23:5c:53:3d:33:f1:bb:55:95:36:50:
7e:58:67:1e:4b:b4:fe:d7:86:e2:b1:50:1b:e5:b6:ba:55:40:
aa:38:aa:9d:de:a0:98:52:12:f3:25:9a:3d:e9:30:96:66:8b:
77:ed:c5:2e:8a:8c:64:b5:55:7f:49:d0:7b:d4:8d:a8:d8:98:
b1:9e:33:04:c3:b3:70:91:d6:3a:27:60:c5:36:8a:e9:10:57:
4b:59:7b:df:aa:76:08:cf:ce:4d:a6:e1:0b:ac:7b:94:e0:0a:
06:16:1a:e7:52:90:9b:54:1f:ab:7d:ad:52:02:49:c5:ed:f2:
9a:ed:6a:2f:99:1b:62:3d:e5:19:18:14:9e:e9:da:9f:f3:54:
67:55:e5:1c:7f:fc:ed:ea:5f:e6:04:52:ea:e2:47:c1:91:9b:
0d:6b:28:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:57 2026 by rpki-client