Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144839.roa
File: AS144839.roa (raw, json)
Hash identifier: e6wVYwgjHxtt7VWOJOAG41rsuMfhUP2T0p0cvgrCCbk=
Subject key identifier: 11:B0:2B:1C:18:2D:4F:92:D2:84:17:8D:43:6D:3C:E1:58:1E:B2:78
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 611689F99D579343DC590213E4FF277BBD9918F6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144839.roa
Signing time: Tue 26 May 2026 01:12:52 +0000
ROA not before: Tue 26 May 2026 01:07:52 +0000
ROA not after: Tue 25 May 2027 01:12:52 +0000
asID: 144839
IP address blocks: 240a:a88d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:16:89:f9:9d:57:93:43:dc:59:02:13:e4:ff:27:7b:bd:99:18:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:07:52 2026 GMT
Not After : May 25 01:12:52 2027 GMT
Subject: CN=11B02B1C182D4F92D284178D436D3CE1581EB278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e2:f1:15:35:e1:a6:e9:82:82:c2:1c:71:57:
ff:71:b3:2d:3f:c7:90:7d:fe:68:02:1c:48:03:8c:
22:ea:0b:06:c3:14:9b:06:9b:1d:d0:f3:fd:d4:4c:
3b:99:fa:91:f9:d7:a4:25:a3:bb:cf:d5:5c:25:bf:
28:57:10:c9:05:f5:4c:b2:0a:8f:89:b8:5f:0e:4c:
b5:c4:fa:cf:95:c8:04:7a:18:62:31:38:38:3f:3c:
1c:da:8a:ef:ba:e3:31:16:4e:fb:9f:34:a7:32:50:
1c:0b:7a:80:1b:02:24:b0:f5:0a:47:d0:38:fd:27:
76:32:cc:e6:e5:37:01:a0:12:40:0d:18:06:cf:f8:
81:fa:37:7e:93:34:96:cb:53:76:18:c7:02:4f:1d:
e4:86:e6:f5:04:17:8b:32:a6:f6:52:8b:61:0c:8d:
fc:4b:10:82:35:d9:9c:84:01:48:d2:da:3c:77:29:
57:d4:3a:71:f1:b1:7b:87:03:e7:3a:13:91:80:f6:
6a:f7:2f:44:dd:9b:62:18:5f:94:6f:14:cb:7a:bc:
e9:9c:e1:70:72:df:1b:a7:23:04:8b:a6:f1:b2:7f:
8f:db:4d:5b:35:6a:26:a3:7c:ae:9c:cf:10:7a:11:
bd:8e:ad:36:0d:43:4d:a0:98:49:73:32:82:0f:09:
6f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B0:2B:1C:18:2D:4F:92:D2:84:17:8D:43:6D:3C:E1:58:1E:B2:78
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a88d::/32
Signature Algorithm: sha256WithRSAEncryption
58:d7:7e:63:99:68:75:cd:be:69:63:32:4a:58:85:61:f5:af:
39:08:71:07:e1:01:5f:ab:57:c2:1f:cb:62:b6:9a:92:b7:da:
45:ef:66:81:50:db:29:ff:e4:42:13:58:f8:7a:9d:26:d1:ae:
dc:1a:5f:90:93:2c:f8:d4:8f:cb:ba:4c:73:fd:85:f1:87:8c:
c7:9f:05:e6:94:ec:b3:40:87:a4:75:e0:59:10:02:ac:e0:d5:
fc:25:62:99:3c:45:04:a8:46:d0:19:23:d9:98:24:7c:a5:69:
08:5c:c5:29:da:3c:f6:d3:fb:c1:00:3b:63:9b:de:d8:7d:c9:
78:93:52:f2:91:fe:27:d3:80:7d:df:2a:ae:6d:24:a1:62:ef:
59:e9:a2:3a:69:f3:e8:04:8d:f4:ad:02:0d:0b:6b:a3:dc:de:
7d:65:29:62:8c:b8:63:02:67:cd:af:3b:2e:9e:49:3a:2b:15:
e1:63:65:f5:f8:ce:86:4e:1d:b8:8c:6b:17:79:28:9b:19:8d:
e2:5f:c9:2d:25:e5:c2:a0:4c:16:2b:08:d2:7c:40:13:ef:09:
1c:87:a2:2f:fe:62:56:3c:4e:49:fe:53:ca:0d:ef:cd:72:58:
34:cf:82:6e:17:c9:e0:92:64:d3:98:7c:5b:d7:02:c1:c1:37:
ea:a1:fb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:39:00 2026 by rpki-client