Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144862.roa
File: AS144862.roa (raw, json)
Hash identifier: grFj0ML9zX4NZZ8QFCXi7oSgtTdpYSIwsNKjwpRgDXU=
Subject key identifier: 21:3D:24:5E:CE:0C:23:3D:9F:D5:10:6A:D5:F5:1F:EF:23:F3:15:6D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4B8162B38899A61B42626EB9FEC125283DA580CF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144862.roa
Signing time: Mon 25 May 2026 01:38:25 +0000
ROA not before: Mon 25 May 2026 01:33:25 +0000
ROA not after: Mon 24 May 2027 01:38:25 +0000
asID: 144862
IP address blocks: 240a:a8a4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:81:62:b3:88:99:a6:1b:42:62:6e:b9:fe:c1:25:28:3d:a5:80:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:25 2026 GMT
Not After : May 24 01:38:25 2027 GMT
Subject: CN=213D245ECE0C233D9FD5106AD5F51FEF23F3156D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:61:38:0c:57:70:11:17:04:2f:69:e0:37:71:
2c:ad:47:32:bb:ba:d7:85:e1:c9:3e:fd:ab:9d:0b:
44:9a:e9:1d:63:ac:e5:4a:5b:d9:c4:b3:a1:74:47:
14:57:8b:40:dc:b9:63:f5:e6:e8:28:72:32:b3:0d:
59:41:5c:71:36:3f:ab:cf:e7:04:30:ee:a7:72:7a:
d4:b6:51:4a:10:ba:ed:59:7e:13:d8:23:72:6e:f9:
62:e5:f9:eb:0a:92:ed:6f:6e:1c:09:f9:2e:63:89:
26:11:3e:4c:f7:66:0d:3f:55:32:d5:36:f1:85:9e:
03:68:1d:fc:b9:3c:65:2d:56:3b:0f:28:d7:0f:56:
18:88:72:1b:b5:92:32:68:d5:2e:97:a3:8d:15:f0:
94:e8:1d:21:c6:27:ea:b8:2a:bd:ec:33:c5:97:7e:
42:a0:96:f9:f9:28:eb:47:d0:ff:61:0d:b0:36:17:
76:db:ec:4d:c8:98:b0:d8:a4:2b:cc:e5:20:69:e3:
b9:86:56:0e:9b:99:fd:46:f7:ef:67:54:5b:cb:1a:
e7:4a:bd:59:6e:ac:4b:00:ad:78:c1:fb:c3:50:47:
a7:9f:76:4b:11:1b:4f:83:d6:44:70:0f:39:11:74:
db:a4:22:17:ea:6e:93:9a:f8:1b:73:6f:b5:20:36:
a5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3D:24:5E:CE:0C:23:3D:9F:D5:10:6A:D5:F5:1F:EF:23:F3:15:6D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144862.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8a4::/32
Signature Algorithm: sha256WithRSAEncryption
8b:18:88:8f:79:e5:7f:36:de:92:09:ce:9d:f2:f0:29:f8:67:
d3:9a:e8:e5:ba:2f:f5:56:2d:7e:b6:41:35:96:24:f3:61:a6:
8c:52:91:1b:f1:32:44:19:31:bf:76:79:a4:97:46:d4:13:e9:
df:c0:64:2b:d1:d0:b7:52:af:f2:ab:85:e3:dc:fe:32:2a:63:
cf:aa:b4:1f:06:96:a1:a9:82:c4:92:41:8f:15:6c:31:74:5e:
46:82:13:43:e2:65:e6:0f:36:17:a5:67:32:9c:c4:12:e1:05:
14:4b:57:d1:de:79:bc:5e:eb:61:5a:2f:a0:6c:7d:71:6b:65:
e9:ae:9f:e5:ca:44:76:8e:bd:8a:56:e9:b9:ca:43:7c:65:f7:
93:06:d9:5f:e7:a9:54:c6:50:eb:9b:68:39:0a:c9:4d:b6:e3:
40:cd:36:bf:63:63:e3:1c:98:d9:0f:42:6a:fd:2f:e0:14:24:
c6:f1:14:aa:c5:2b:4b:15:d7:db:1a:01:f4:54:bc:a8:fe:6e:
c7:c1:4a:84:11:20:a1:0e:da:2a:d0:84:8e:04:dd:ad:89:2a:
bd:63:9c:74:fa:b4:7b:97:5d:c3:f2:48:d4:f2:f8:77:f1:0f:
2a:25:82:2a:a5:5c:91:69:1a:ff:ae:fd:8d:b1:f8:0d:f2:be:
dc:92:dd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:10 2026 by rpki-client