Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144888.roa
File: AS144888.roa (raw, json)
Hash identifier: FgYxFUhCx+zHw/QycGGtQRbS3fM8mKPpgPSgOF4Tg+o=
Subject key identifier: 86:1D:97:D4:6A:74:53:63:A0:D2:56:6F:B4:FA:D9:42:99:B3:A7:42
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 148AB4FC75AD0E361FACD0A17F34E7C31C0BA196
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144888.roa
Signing time: Fri 22 May 2026 04:27:01 +0000
ROA not before: Fri 22 May 2026 04:22:01 +0000
ROA not after: Fri 21 May 2027 04:27:01 +0000
asID: 144888
IP address blocks: 240a:a8be::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:8a:b4:fc:75:ad:0e:36:1f:ac:d0:a1:7f:34:e7:c3:1c:0b:a1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:01 2026 GMT
Not After : May 21 04:27:01 2027 GMT
Subject: CN=861D97D46A745363A0D2566FB4FAD94299B3A742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:c5:78:73:b3:59:71:89:91:17:ad:80:d4:
d4:d6:b5:d7:af:be:6b:25:69:5b:19:28:33:0d:46:
2a:4f:d9:84:0f:11:23:35:93:1b:09:25:b7:ef:96:
29:ab:10:cb:9a:62:02:be:45:f7:cd:54:cb:37:17:
de:57:19:a6:e0:e9:10:2d:0b:3e:bf:9d:2e:0b:86:
93:09:cf:69:69:ec:f5:3f:81:69:e9:10:6b:7e:7d:
f5:a0:ba:29:cf:3e:90:a4:3b:2a:19:75:96:b4:2e:
7d:bb:fa:f7:2a:09:3a:96:1a:63:8c:67:81:83:98:
d7:93:b9:7e:fb:1a:f8:fa:37:5d:ab:03:19:4d:e3:
39:fc:c4:24:16:07:c5:75:14:ca:3b:0c:58:85:46:
69:95:ab:63:ab:c1:93:9b:23:15:ab:c2:e2:f3:2b:
77:7d:f2:92:d5:76:44:36:09:76:5d:dc:e5:5c:5e:
09:e6:ba:cd:f8:a8:89:66:0e:3a:62:21:21:be:0e:
d4:d2:93:5d:95:8a:de:b7:0e:11:60:8e:0a:c0:ee:
89:78:5a:09:36:5f:c7:67:e9:88:7f:5f:72:02:02:
bf:34:ad:a8:68:56:c9:36:81:30:0a:73:f9:45:0d:
16:20:ff:27:d5:2f:e9:fc:f4:45:c3:e6:5a:47:36:
d1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1D:97:D4:6A:74:53:63:A0:D2:56:6F:B4:FA:D9:42:99:B3:A7:42
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144888.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8be::/32
Signature Algorithm: sha256WithRSAEncryption
5b:b7:8f:a2:ac:38:d7:f3:8d:f5:53:21:1b:56:6a:0c:72:13:
9a:c9:72:59:28:5b:47:66:59:83:57:64:b1:8f:03:11:5a:7d:
bc:30:c7:3e:8d:4d:79:fd:20:86:85:56:7f:f1:28:cc:ef:d1:
0a:6e:2a:49:83:18:8c:d3:0c:01:56:6d:da:6d:59:72:78:7e:
57:ea:c2:01:8c:51:14:92:b8:45:12:8b:41:1a:66:ca:d0:c4:
05:46:91:f4:35:1f:96:3f:b7:21:85:6b:c8:55:61:8d:a6:2b:
c1:92:d1:ee:d2:41:91:b8:ec:3f:95:8c:d1:e5:fd:48:0a:8e:
4d:1e:51:15:9d:99:33:0d:a5:24:59:e3:ff:8c:1c:c0:fb:40:
af:d1:89:ac:1c:d2:a1:e8:99:dd:8a:b7:d4:ab:d8:9f:2a:dc:
8e:b7:f0:a3:a8:c6:88:f4:49:30:cd:28:bc:6c:8e:67:15:68:
14:c2:89:d2:7b:a2:4a:1a:da:54:74:56:b9:d5:25:77:3f:19:
91:0e:f7:33:88:1b:03:ae:08:ba:88:9b:46:32:26:46:b3:a7:
68:ae:1a:bb:f3:cf:bc:2d:3b:3c:b3:3f:72:84:0c:b8:62:83:
91:e3:65:2f:27:0f:15:5d:96:0b:ae:a1:ee:a4:52:43:8d:da:
8c:95:38:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:18 2026 by rpki-client