Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144891.roa
File: AS144891.roa (raw, json)
Hash identifier: dGnHGd30h2ycP3Og0bL9xPDTHgawSDJuCx1FUtldAaY=
Subject key identifier: 0C:61:A8:C3:1D:4A:6A:27:52:A3:BC:B2:8D:32:07:4F:0A:14:04:0B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 764213C1864D46049DC53E759FF24ABA6870F3F1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144891.roa
Signing time: Fri 22 May 2026 06:27:57 +0000
ROA not before: Fri 22 May 2026 06:22:57 +0000
ROA not after: Fri 21 May 2027 06:27:57 +0000
asID: 144891
IP address blocks: 240a:a8c1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:42:13:c1:86:4d:46:04:9d:c5:3e:75:9f:f2:4a:ba:68:70:f3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:57 2026 GMT
Not After : May 21 06:27:57 2027 GMT
Subject: CN=0C61A8C31D4A6A2752A3BCB28D32074F0A14040B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:95:23:89:71:7a:21:1e:c4:3f:11:95:aa:
ed:5c:be:2d:b4:4d:76:d7:25:3a:52:3a:a1:fd:f5:
42:8c:ab:7d:be:1e:50:72:fe:08:16:d9:cd:40:83:
bd:8f:2f:f5:a1:ce:17:2a:49:1f:d9:ea:db:91:47:
11:6b:0c:9a:cd:13:8a:47:bb:37:95:65:7f:59:31:
86:f4:27:ca:4f:a2:f2:db:91:c5:cd:ad:d4:99:30:
52:ea:a0:40:59:cb:98:d8:b9:b2:87:7c:c4:03:60:
2e:16:71:ee:4d:43:7d:fe:1c:61:af:10:62:8f:8b:
99:11:7a:a5:81:a1:cf:be:20:ec:e4:ea:06:b0:c9:
86:ed:d4:8d:14:b8:97:b6:47:5b:ea:6a:46:52:30:
d4:c6:40:b5:09:aa:0d:6c:dd:52:4a:d6:a3:69:a7:
3d:a0:75:88:02:10:6a:1a:19:23:f6:32:7c:82:ab:
7b:dd:1e:f6:3c:bd:25:04:b0:05:f0:c6:be:9d:9e:
60:5c:54:6f:cf:02:cf:81:13:83:33:a9:43:6f:af:
bf:e8:e5:74:b9:8c:ab:40:50:96:60:f2:87:9b:e1:
b1:4b:f9:64:23:4f:e0:7e:5d:cb:2e:e1:ad:1b:e0:
95:b2:44:10:fa:85:67:68:c4:fb:30:f3:4d:00:27:
89:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:61:A8:C3:1D:4A:6A:27:52:A3:BC:B2:8D:32:07:4F:0A:14:04:0B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144891.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8c1::/32
Signature Algorithm: sha256WithRSAEncryption
8f:45:87:ec:3a:d9:f1:db:39:c3:47:84:96:7a:1a:bc:24:a3:
5d:0e:e4:01:f4:63:83:91:15:52:0f:5f:a7:12:c6:dc:9e:bb:
d6:62:72:b1:dd:8e:31:d9:8a:87:68:32:bb:0a:bb:ae:f2:d6:
d0:8f:08:0d:38:93:18:08:04:47:17:49:5c:d7:6e:a0:74:89:
65:02:7d:c3:97:91:a7:71:a7:88:1a:1a:c6:f7:e8:24:b0:f9:
06:5c:d9:a5:8f:35:35:04:14:f6:0d:97:c6:24:06:8c:f8:e5:
eb:05:59:98:be:78:55:75:e4:5b:96:50:7a:c6:d9:16:5b:83:
7b:eb:fb:0f:3f:13:f6:0a:be:83:e1:e8:01:24:1c:96:46:3d:
ac:bd:73:7b:e4:6d:52:3b:9b:99:8e:87:41:9d:0e:a1:32:f5:
1b:fd:65:a4:c5:92:53:26:f7:bc:8a:20:b4:b1:cc:bb:07:2b:
79:87:09:a2:7c:be:49:92:99:6f:9e:c7:c0:e5:4f:23:45:d7:
93:18:a9:82:c2:69:1e:27:c6:69:af:70:7d:63:ca:9c:de:af:
2f:c4:1c:3a:dd:93:dc:eb:37:cb:a1:01:a6:07:71:90:9e:6a:
27:45:f3:a6:97:ad:2a:9a:21:6f:27:35:62:95:5b:e8:c3:6a:
f1:a7:a7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:19 2026 by rpki-client