Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144865.roa
File: AS144865.roa (raw, json)
Hash identifier: ttkByOPfbNZrZtxoWPQZ09HF+OSArlfDbzqjeRwRutc=
Subject key identifier: D4:CD:E3:0D:32:C9:DE:55:5B:88:DB:1A:67:97:EF:B9:49:6B:FD:B4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 234EF3587F3347D6AA27009A1F7F1845AECA3A43
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144865.roa
Signing time: Fri 22 May 2026 06:46:06 +0000
ROA not before: Fri 22 May 2026 06:41:06 +0000
ROA not after: Fri 21 May 2027 06:46:06 +0000
asID: 144865
IP address blocks: 240a:a8a7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:4e:f3:58:7f:33:47:d6:aa:27:00:9a:1f:7f:18:45:ae:ca:3a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:06 2026 GMT
Not After : May 21 06:46:06 2027 GMT
Subject: CN=D4CDE30D32C9DE555B88DB1A6797EFB9496BFDB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:db:85:08:b7:56:aa:54:3c:84:33:60:e5:39:
b3:ca:62:90:6f:7d:4f:7a:61:c9:d5:e6:9d:71:de:
e2:18:c1:ca:f7:ed:c7:32:54:39:ec:a7:99:03:cf:
83:4a:12:03:ca:52:a8:b8:24:c6:0a:b8:c6:fa:10:
db:19:93:9f:15:e5:38:3a:3a:7c:6c:86:2b:5e:97:
0f:7f:ff:22:ad:07:b0:17:c0:4c:78:e2:3c:7c:cc:
64:80:a4:22:ad:6f:53:1a:60:1a:05:a3:be:d4:56:
b4:e8:ad:18:36:82:63:49:29:da:64:09:63:1e:24:
b0:62:21:d4:b5:64:24:09:b8:93:6b:e5:38:3c:fd:
0a:0c:b2:38:dc:63:14:46:eb:d3:a0:e4:af:50:cf:
9e:d2:68:8e:6a:7a:c9:9d:c7:39:81:20:64:4c:a0:
75:d8:d7:83:ae:ed:05:ad:73:b4:3f:a6:c8:6b:9c:
74:34:90:7c:44:18:83:7c:6d:46:12:a7:b8:f9:68:
69:40:9a:c8:43:c2:ef:1f:17:ab:6b:8d:5a:6f:a4:
97:df:09:d5:98:1f:a9:c5:56:f8:2b:77:22:df:42:
d6:22:fd:7b:47:b8:af:dd:91:c1:86:4e:50:4d:f6:
7e:52:56:64:37:e5:a9:cf:a7:47:c5:58:cd:2b:62:
df:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CD:E3:0D:32:C9:DE:55:5B:88:DB:1A:67:97:EF:B9:49:6B:FD:B4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144865.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8a7::/32
Signature Algorithm: sha256WithRSAEncryption
80:a0:7e:a0:5d:d3:bd:94:89:f0:02:30:93:91:57:92:e7:42:
c6:3c:c2:5b:9c:c2:ae:67:b2:3f:9e:cf:dd:d0:6f:9e:f1:22:
a2:b1:1e:65:70:d7:ba:df:23:af:ea:a6:cc:80:ba:e9:a6:37:
21:a5:20:5f:2b:71:c8:b8:2e:7a:62:cf:40:b1:a4:ed:4c:f6:
9b:6c:f1:b0:be:22:7f:67:7d:bb:97:e9:12:09:2b:d3:df:93:
8c:43:be:f0:54:7b:aa:be:d3:d6:4d:94:31:cc:cb:96:15:4d:
db:09:74:6a:14:94:68:13:e1:0b:4e:c9:b4:dc:6c:cc:e8:50:
a4:d1:7e:1a:3d:c5:05:67:70:60:68:79:3e:c2:d7:68:61:4e:
4b:70:d7:d3:b6:db:bd:c8:f4:95:40:20:a7:04:6b:19:41:66:
56:c8:c4:6a:65:90:7e:cc:b2:f0:89:f1:93:44:ce:2d:4d:b7:
30:78:16:23:4a:dc:65:31:07:1c:0c:2b:62:12:74:8a:4c:03:
00:9c:d1:ae:c8:a2:06:0b:3e:e1:44:f8:32:25:0c:bf:88:78:
ec:20:21:d4:57:60:bd:93:08:a3:ce:7e:19:f1:5a:47:33:6c:
26:e7:76:72:2a:aa:40:1e:6d:33:d5:64:14:de:68:43:f4:f9:
36:c6:f5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:10 2026 by rpki-client