Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144887.roa
File: AS144887.roa (raw, json)
Hash identifier: eN/BdHnudYF6P0EybBtWPD76rrf5VQeL4j/L0/A2caA=
Subject key identifier: 4B:99:BD:67:CA:AD:7C:D9:CE:DD:DB:BE:FD:88:7E:EF:AA:B9:FF:A5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 020D901895C3998EF631BD0E2D26EFEF632646FA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144887.roa
Signing time: Fri 22 May 2026 02:48:09 +0000
ROA not before: Fri 22 May 2026 02:43:09 +0000
ROA not after: Fri 21 May 2027 02:48:09 +0000
asID: 144887
IP address blocks: 240a:a8bd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:0d:90:18:95:c3:99:8e:f6:31:bd:0e:2d:26:ef:ef:63:26:46:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:43:09 2026 GMT
Not After : May 21 02:48:09 2027 GMT
Subject: CN=4B99BD67CAAD7CD9CEDDDBBEFD887EEFAAB9FFA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:17:9f:eb:db:75:e0:fb:19:76:b7:21:cb:b7:
69:88:af:33:0d:d7:40:42:ce:b2:68:1f:09:af:63:
3e:83:2e:36:84:d3:f3:b7:a7:20:72:ab:a8:f3:e5:
50:d1:03:33:68:40:95:11:a8:98:9d:65:dc:64:4d:
a2:12:45:40:0c:3b:f9:22:51:d7:ff:68:0d:16:6e:
dc:6a:81:75:91:a9:59:9c:ca:57:c8:f9:78:fd:49:
9a:d9:6e:c2:ca:94:82:71:ba:a9:b8:95:aa:77:4a:
98:81:97:f3:47:47:cf:57:63:d7:56:7f:eb:cb:62:
3f:dc:9b:00:1c:18:e1:a1:84:33:af:8a:33:ef:94:
1b:9f:75:9e:05:d2:8f:dc:2b:71:b9:84:10:fa:32:
5e:7a:c0:20:f1:f6:3b:d1:44:d0:37:d7:65:a5:17:
81:7e:44:f2:95:44:a5:29:0d:26:10:10:bd:a1:17:
cb:7d:6a:ef:eb:d6:c1:ae:81:1c:f0:bb:2d:9d:2f:
01:41:f8:db:da:a3:30:81:19:42:4c:13:d4:b3:44:
e1:c4:7b:72:03:bd:40:79:55:5b:13:60:b5:05:6d:
17:65:16:67:fc:55:c8:db:2f:c2:f8:f1:3c:4c:4b:
da:41:5f:16:91:60:d7:44:c2:47:16:16:02:1e:6f:
a2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:99:BD:67:CA:AD:7C:D9:CE:DD:DB:BE:FD:88:7E:EF:AA:B9:FF:A5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144887.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8bd::/32
Signature Algorithm: sha256WithRSAEncryption
93:18:1f:2e:c7:b5:8a:77:24:10:4f:4c:55:7d:17:54:10:78:
45:f3:78:d0:36:7e:83:87:dd:09:b1:a7:f3:a4:a2:e7:f1:44:
df:88:08:f0:23:3a:7f:12:91:1b:8b:7b:af:54:09:ab:66:de:
0e:dd:d8:3f:f0:b7:b5:4d:4f:cc:f4:85:48:ec:d5:ef:d4:64:
63:dd:1a:21:e7:1f:79:43:32:f9:e0:56:a7:e2:60:fe:b2:7a:
8e:96:f0:ba:10:8e:c8:d4:f5:8e:bd:a0:5d:3b:ea:a7:0f:66:
40:04:e5:28:39:43:3c:95:76:eb:d5:95:e9:c7:b8:70:11:bb:
a6:6c:e8:c2:e2:f3:7a:c7:80:88:19:99:89:73:9a:f1:39:f2:
57:42:5e:95:75:49:a4:89:3f:29:14:c4:5b:56:11:36:40:48:
f9:61:92:c0:52:58:39:56:42:d7:ba:02:f5:cb:d3:00:df:52:
6b:53:66:5e:4a:4d:0b:ce:04:08:5c:48:6e:20:bf:31:11:e3:
5a:13:ea:3d:a7:dc:10:68:3b:40:0d:c5:7a:8c:69:af:6b:1d:
d0:03:64:86:2f:35:c0:d8:29:ac:cd:5f:0b:6c:06:45:40:f4:
da:48:00:7c:05:a6:fc:b7:59:39:c6:e0:b3:a7:50:85:2d:4c:
72:19:54:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:21 2026 by rpki-client