Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144860.roa
File: AS144860.roa (raw, json)
Hash identifier: dVLhdBv/G9l3geCyA1Wk9YkOAIW5u+dDOT6wsGdjogs=
Subject key identifier: 53:B9:0C:DB:80:07:5E:07:59:CF:F9:FC:3D:B2:28:F2:1C:E0:01:AA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 561AAA754B40A053E65A6EA39CEFA0579EA41F37
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144860.roa
Signing time: Mon 25 May 2026 01:20:17 +0000
ROA not before: Mon 25 May 2026 01:15:17 +0000
ROA not after: Mon 24 May 2027 01:20:17 +0000
asID: 144860
IP address blocks: 240a:a8a2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:1a:aa:75:4b:40:a0:53:e6:5a:6e:a3:9c:ef:a0:57:9e:a4:1f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:17 2026 GMT
Not After : May 24 01:20:17 2027 GMT
Subject: CN=53B90CDB80075E0759CFF9FC3DB228F21CE001AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a2:35:4d:f3:e6:f2:40:cf:4e:73:7b:7a:54:
26:a3:ef:7f:25:d3:34:99:49:3d:e6:db:b1:38:fe:
09:d5:15:bb:38:d6:9e:ed:5f:5b:0f:00:90:49:55:
2d:32:21:4c:e8:a5:0b:55:12:2b:1f:87:f2:1a:09:
d3:12:00:ab:78:4e:9d:b0:59:c2:75:a3:4c:7a:05:
a3:ba:51:71:d5:8a:8c:bd:3f:33:72:06:9f:aa:dc:
31:48:32:07:05:a7:cc:03:c9:2a:20:e1:1f:ab:36:
5b:65:0d:dc:1d:af:c1:5b:3b:20:5f:5c:08:1b:db:
ad:4f:b0:f6:c8:ec:94:03:64:e5:0b:73:e2:b1:a6:
a6:1a:b1:d9:83:01:42:08:7f:7e:f1:ef:10:45:e4:
99:db:9f:6a:2b:23:e1:57:12:fa:41:1e:04:f5:12:
53:9d:fc:9e:69:33:b1:6f:1f:8b:9a:c8:04:87:6d:
6f:50:ae:f4:01:5e:cb:02:03:e9:d0:49:8f:ae:79:
c3:58:8d:ad:2b:9e:2e:bc:ae:ed:d6:3e:ff:6c:f2:
ee:3d:b5:71:ab:92:43:36:c7:53:65:c2:5f:b9:a1:
33:c7:3a:08:23:e9:8a:cb:80:9a:7b:56:6a:95:9f:
57:1d:92:e9:33:cc:82:46:7a:eb:ad:34:c2:e8:77:
30:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B9:0C:DB:80:07:5E:07:59:CF:F9:FC:3D:B2:28:F2:1C:E0:01:AA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144860.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8a2::/32
Signature Algorithm: sha256WithRSAEncryption
69:1f:70:8b:e3:43:98:31:c0:ea:a4:e2:0a:1e:62:db:dd:9e:
0d:b4:bc:2a:38:2f:b3:79:34:fa:85:8e:7d:12:a9:2c:fb:f0:
c7:89:41:a8:f5:a5:33:42:2b:4d:1c:9e:bb:46:45:09:a3:19:
f6:ea:fe:92:0a:26:55:ba:cf:16:c7:65:53:8b:58:e9:2b:2b:
91:cf:08:32:b8:06:c4:02:74:67:cc:5a:d4:6c:12:6c:ad:ba:
cb:53:5c:16:3f:ff:03:4e:22:f6:01:24:c4:cf:d1:f8:e3:00:
b3:79:13:98:de:a8:af:18:cb:e0:2c:0c:11:d8:77:bf:9a:b8:
d0:01:09:07:9f:d4:22:6f:b5:71:d0:1f:58:3f:97:e1:df:1b:
76:3d:7c:e2:90:df:22:72:7c:78:a0:69:82:f3:92:c7:9f:78:
c6:55:54:85:54:2c:4a:d6:9a:08:6e:ea:1d:67:55:6b:64:3e:
c5:8c:b2:08:42:d0:14:ab:ba:f1:0b:da:50:ef:7f:9b:07:de:
18:ca:2c:1b:bf:2f:fd:b3:ab:6e:11:d1:94:e5:91:68:4c:a0:
d9:d4:21:57:1b:73:aa:a8:d3:dc:61:71:ab:dd:4b:60:b7:fd:
8a:e4:59:7d:1b:a5:92:c5:9d:53:f1:e2:40:f8:ec:51:7b:61:
54:19:d3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:28 2026 by rpki-client