Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144847.roa
File: AS144847.roa (raw, json)
Hash identifier: T05B5GODdsXOjyp3mj4ZeGjOu1ubMYEKZx0vGusz8kU=
Subject key identifier: 18:33:43:69:90:E2:32:79:A4:BC:41:E9:28:0E:A5:59:9E:B5:D2:BD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 37C77C0A810A5A79CE8BC6C0C1F9CCB1037C1762
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144847.roa
Signing time: Fri 22 May 2026 06:58:44 +0000
ROA not before: Fri 22 May 2026 06:53:44 +0000
ROA not after: Fri 21 May 2027 06:58:44 +0000
asID: 144847
IP address blocks: 240a:a895::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:c7:7c:0a:81:0a:5a:79:ce:8b:c6:c0:c1:f9:cc:b1:03:7c:17:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:44 2026 GMT
Not After : May 21 06:58:44 2027 GMT
Subject: CN=1833436990E23279A4BC41E9280EA5599EB5D2BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:02:49:b4:2d:dd:77:21:03:d0:69:ae:d8:02:
5d:2d:18:a4:0f:d2:ee:64:b8:ab:87:1c:89:00:58:
6c:41:52:c5:d6:cd:99:db:dc:14:ef:f2:8b:97:d3:
fb:15:f8:3c:37:43:cf:ae:ba:d5:fd:68:0b:b8:a0:
f4:af:a9:06:c3:1d:6f:23:00:41:d6:59:94:65:08:
12:c6:dc:ce:53:2a:7f:e6:b6:5c:b1:a2:15:3b:e6:
39:4e:54:c6:60:38:8b:98:15:b4:5b:f8:d2:5d:7f:
87:d6:de:0a:34:14:0c:c7:24:66:a8:6c:e2:6f:46:
17:29:73:06:69:7b:13:1b:30:47:c4:30:52:ff:45:
36:52:28:00:03:49:7d:fe:c0:d3:61:6d:c1:d1:6e:
92:82:72:38:6c:a0:19:b7:4c:28:f0:8a:4c:b4:44:
c4:ab:7b:16:ef:28:30:79:9f:68:3e:5b:9b:6e:e1:
ef:c4:9b:20:6c:cb:c0:d4:56:97:3c:18:d2:4c:f3:
ab:81:23:ab:c0:7f:02:0a:2e:29:c6:8a:ab:09:27:
57:3c:1e:02:54:44:4e:64:e1:3c:a9:6e:3f:75:69:
57:7c:1a:6b:31:07:b8:40:17:5e:86:1a:22:8f:ff:
7b:fd:08:0c:cc:a0:87:2e:dd:cd:39:4a:92:f8:eb:
ba:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:33:43:69:90:E2:32:79:A4:BC:41:E9:28:0E:A5:59:9E:B5:D2:BD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144847.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a895::/32
Signature Algorithm: sha256WithRSAEncryption
3e:13:7b:03:9c:13:44:d8:8f:a8:e2:4c:74:0d:fc:2c:da:a3:
14:fe:76:f3:7a:3e:ca:99:e3:03:df:73:2d:03:9f:d2:e6:62:
14:d9:f1:a3:4b:73:ff:a4:f0:b9:73:db:6f:48:40:4b:85:fc:
f7:94:c1:3a:2b:5a:e0:58:ad:8a:7d:cf:3e:5e:ec:d5:d3:7c:
6d:08:e4:29:ac:9c:18:d1:72:3d:c0:7f:f5:a4:27:3e:c3:ad:
1b:ac:d8:bd:aa:0f:41:b9:3d:64:b1:c9:c0:12:84:f2:53:ab:
9c:64:60:7b:c5:1c:fd:2a:16:41:f2:d4:83:77:01:66:dc:6f:
71:6b:4f:f9:3e:0d:3f:a5:79:3a:e4:d5:79:53:ca:75:9c:b3:
d9:32:09:1f:c3:15:ea:10:5e:87:57:8e:a4:5a:58:05:42:46:
58:03:8a:e3:46:94:68:4a:4f:2c:79:7f:7f:5e:c6:58:8f:f6:
83:08:d6:96:ae:86:eb:1d:32:30:00:26:b6:f6:c9:e6:6d:2c:
f4:97:fc:b9:da:8a:a5:59:0c:ca:75:6d:5f:b8:08:c8:45:eb:
f4:8a:70:69:ab:58:89:a7:97:e7:8c:4f:c2:39:ba:43:d8:c7:
57:44:f5:2a:ac:5c:e0:84:ee:4c:da:db:1c:a7:47:fe:e8:ba:
5a:b0:71:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:53 2026 by rpki-client