Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144853.roa
File: AS144853.roa (raw, json)
Hash identifier: ZsSZSTgonsHxA9uuqm/tjYDNEucRTKWtccJ6M/l4VJA=
Subject key identifier: B5:78:F4:BA:4F:08:39:72:37:68:E9:50:55:82:7B:3E:69:49:B9:A0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 65072E82CBEF42214165E4DED8A531A7E6066315
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144853.roa
Signing time: Fri 22 May 2026 07:40:50 +0000
ROA not before: Fri 22 May 2026 07:35:50 +0000
ROA not after: Fri 21 May 2027 07:40:50 +0000
asID: 144853
IP address blocks: 240a:a89b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:07:2e:82:cb:ef:42:21:41:65:e4:de:d8:a5:31:a7:e6:06:63:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:50 2026 GMT
Not After : May 21 07:40:50 2027 GMT
Subject: CN=B578F4BA4F0839723768E95055827B3E6949B9A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e7:fa:06:2d:8c:fc:52:a3:64:8a:03:ef:73:
93:d3:e3:d6:0c:fe:68:4f:29:9b:99:95:0d:ea:28:
f8:bd:b3:8c:75:dc:fc:df:15:76:85:fa:dd:c9:1a:
6b:1d:63:02:1e:8e:d7:de:db:cd:62:83:6c:0e:99:
a3:f5:e8:89:86:e0:82:0e:fd:5f:9e:f5:e9:61:d5:
1f:0f:e7:5e:31:a9:0c:0f:9d:02:5c:e0:86:ab:9a:
33:96:ab:52:a4:63:9f:65:b4:08:46:36:c5:42:9c:
a9:79:ca:ba:4b:78:df:fd:3b:14:cf:f5:3e:c7:77:
7b:ae:62:9c:c5:b7:41:ff:b5:e6:9e:79:0a:76:21:
62:b9:3a:f6:36:e9:0f:a3:16:84:a0:6f:fb:6b:5b:
d3:a5:79:40:8b:bc:70:b6:66:74:a9:f6:4b:3f:22:
29:24:d4:d2:6a:6d:79:76:6e:ee:8f:75:0e:d2:89:
1b:5c:87:b3:25:9c:92:93:b7:81:a6:0d:bb:5a:83:
8e:58:95:1a:3d:93:14:59:0d:12:a6:90:c4:07:e9:
dd:96:a4:8f:bf:a3:29:30:a7:7d:4b:1c:9e:1f:aa:
97:21:ff:76:a6:8e:28:15:11:0b:2d:53:74:ae:ba:
15:31:d7:67:b1:50:3c:c9:be:1b:22:36:c5:de:63:
b6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:78:F4:BA:4F:08:39:72:37:68:E9:50:55:82:7B:3E:69:49:B9:A0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144853.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a89b::/32
Signature Algorithm: sha256WithRSAEncryption
33:d5:e1:8e:35:0c:cc:89:93:2c:f1:d2:cd:ac:ee:42:0d:b3:
d3:63:d8:27:52:71:2b:f9:66:0a:8f:5c:00:b9:ca:6a:4b:8a:
1d:65:8f:10:19:19:33:14:86:d6:87:ec:98:21:91:e8:13:bc:
ee:53:6d:04:aa:ee:82:eb:c9:3a:74:09:2e:b8:a5:84:87:fa:
53:78:9d:ec:6a:d6:ec:da:58:c3:d2:6e:5d:e0:f4:7a:ef:20:
71:54:4e:a5:a1:1c:f3:1a:ca:f9:d1:73:6b:de:a9:ba:29:04:
0f:9b:c5:03:81:40:f9:be:95:61:f7:6e:65:2d:00:bd:79:4f:
69:9d:52:2e:33:0d:7c:b3:7e:3c:29:8c:4e:df:87:c1:3f:36:
58:15:99:99:f8:3a:87:3a:05:3f:7a:60:e4:e7:bf:0f:4b:d6:
27:38:4e:6f:d6:6d:00:8b:30:f1:2d:72:6e:5f:07:b3:fc:d6:
4d:02:2b:31:14:63:11:d9:39:1a:73:20:5a:4e:18:d0:fc:91:
76:2f:43:ae:4f:2b:50:79:f2:64:5a:c2:53:51:8c:32:96:4a:
bf:d8:d6:e9:bd:b4:88:26:9d:6c:64:1d:79:30:ff:68:e7:de:
e5:d9:01:78:de:ef:d8:68:44:41:da:b8:31:c2:e3:6c:91:03:
8e:7c:13:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:52 2026 by rpki-client