Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144857.roa
File: AS144857.roa (raw, json)
Hash identifier: nXLjFdX79tS5ZLUA9UePY9FsTTpoQ8xbC/0R2ctrMx0=
Subject key identifier: CD:8D:54:11:FD:66:F5:A8:A1:6B:E7:0A:7B:8A:B5:70:37:09:16:1F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 52207AD76324399BDFCEA9EA83100F1C6C1B7912
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144857.roa
Signing time: Fri 22 May 2026 06:05:25 +0000
ROA not before: Fri 22 May 2026 06:00:25 +0000
ROA not after: Fri 21 May 2027 06:05:25 +0000
asID: 144857
IP address blocks: 240a:a89f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:20:7a:d7:63:24:39:9b:df:ce:a9:ea:83:10:0f:1c:6c:1b:79:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:25 2026 GMT
Not After : May 21 06:05:25 2027 GMT
Subject: CN=CD8D5411FD66F5A8A16BE70A7B8AB5703709161F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1f:48:7d:d5:6c:a6:ac:c5:e7:47:d3:f4:b7:
70:51:67:ef:06:c6:43:7c:41:cd:99:4d:71:4c:d9:
43:66:5d:40:80:8a:91:6d:bb:fe:9d:ac:c1:43:9c:
4a:37:0b:2e:57:1c:e1:39:74:29:50:18:50:f8:81:
24:7d:ee:01:1b:f1:62:a1:97:40:26:62:b6:3f:d3:
c4:75:3d:02:07:a4:99:2c:61:ad:20:4f:3d:16:b3:
e3:c8:ed:47:be:a3:e6:be:93:08:23:f2:35:4d:25:
bf:0a:6e:a3:7f:2f:6e:0b:20:55:bf:f9:58:2a:cb:
0a:4b:07:26:c1:2c:95:81:4b:a9:04:94:cc:49:d9:
67:ca:58:d5:1c:e9:ef:dd:8d:c0:84:31:a9:42:43:
72:3c:9c:2f:48:f1:70:90:69:9a:16:35:dd:d1:f1:
12:c4:c4:84:20:0b:64:16:6d:9d:78:f9:16:84:f9:
32:e3:f6:5c:c2:84:29:9e:b9:65:64:61:7e:5f:ea:
51:77:58:fe:39:4c:79:44:41:c7:9c:d2:d0:32:08:
b9:f5:f1:d3:59:f1:c4:64:9d:2d:d7:49:69:81:fb:
72:4e:cc:84:67:57:82:b5:ef:38:e0:7b:cb:62:e1:
06:74:44:8a:ad:ad:ca:e7:d8:9c:af:2d:7f:a5:c0:
20:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8D:54:11:FD:66:F5:A8:A1:6B:E7:0A:7B:8A:B5:70:37:09:16:1F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144857.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a89f::/32
Signature Algorithm: sha256WithRSAEncryption
48:6b:39:fd:89:f9:4e:ac:1d:a6:2e:92:8f:17:3c:2d:82:6f:
90:37:04:4e:06:f8:74:d7:7c:f2:2a:35:91:d2:26:25:f5:80:
f0:84:37:fe:e8:6c:4b:06:73:15:e4:83:b6:14:97:a5:c1:6d:
34:b2:2a:99:a2:da:8a:07:f1:72:55:86:55:bf:0f:64:fe:59:
0d:37:33:c2:ab:df:81:4b:63:88:58:e9:e7:81:99:f6:71:86:
f0:36:72:c6:01:f9:48:8d:8c:b9:31:86:73:ab:02:b4:dd:88:
e2:d9:5d:af:fa:ca:53:1c:ea:ae:2d:fe:9b:ec:ce:fa:ca:7f:
ca:be:9d:3b:e7:fc:fc:71:ea:0b:6d:59:4b:6b:62:a6:a5:30:
97:b5:ab:02:5f:50:6f:c5:8e:cb:68:90:cd:40:63:d3:8b:83:
06:d7:5c:41:c8:62:93:76:76:25:75:ec:8c:97:d2:0b:1a:c9:
7f:bf:d5:97:ef:e2:10:61:f3:cf:bb:96:43:cc:2b:c8:80:f3:
52:21:fa:5e:17:fe:3b:c7:21:a4:30:09:97:95:cb:56:b3:0b:
98:87:89:4f:4f:c9:db:46:a6:7b:3a:ab:fc:a9:ba:b0:86:67:
6a:9c:19:9b:e3:ef:f0:38:eb:8d:49:6c:4c:c3:8b:32:d9:ea:
8f:2b:4d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:51 2026 by rpki-client