Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144898.roa
File: AS144898.roa (raw, json)
Hash identifier: u+eK9rJM6bV7QG4czf/5kwBfCUWNMTKfGuUBd0gvKlw=
Subject key identifier: 26:DB:91:02:F7:C2:41:3A:34:6E:11:73:8F:EA:4B:FF:44:1A:87:4E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1B82B5EB7913F9B134FDB8B6FC7A16A685291061
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144898.roa
Signing time: Fri 22 May 2026 06:45:56 +0000
ROA not before: Fri 22 May 2026 06:40:56 +0000
ROA not after: Fri 21 May 2027 06:45:56 +0000
asID: 144898
IP address blocks: 240a:a8c8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:82:b5:eb:79:13:f9:b1:34:fd:b8:b6:fc:7a:16:a6:85:29:10:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:40:56 2026 GMT
Not After : May 21 06:45:56 2027 GMT
Subject: CN=26DB9102F7C2413A346E11738FEA4BFF441A874E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:b4:83:a0:6e:f8:29:2d:12:26:66:a5:bc:
91:01:6b:78:7c:3d:37:49:12:43:51:5b:0e:32:91:
34:3c:f6:c4:ca:32:3b:50:82:8e:f2:0a:68:a6:bf:
47:90:18:76:0b:04:e4:29:39:1d:70:2e:f8:05:5f:
d7:2b:b5:25:62:bf:0a:92:f7:4c:a5:40:e0:78:cb:
44:97:ee:eb:ad:c0:34:0d:00:bb:4b:bd:60:8f:ce:
0e:13:50:e5:4b:de:b4:94:d4:6e:1c:06:a1:62:5c:
f1:97:f1:42:b8:c7:fc:0e:08:cb:e1:6b:bd:67:24:
eb:ed:a6:e4:0b:e9:14:40:01:b4:11:bb:82:b0:23:
d8:b6:50:0f:ae:df:49:fc:2a:5d:de:91:c4:5c:3b:
e0:7f:87:71:1d:10:32:24:aa:df:18:6d:7c:a3:9a:
28:f8:5a:f2:ad:e9:71:5a:45:66:39:aa:1e:3f:51:
24:eb:4e:ee:23:f3:fd:6b:e8:82:34:ab:56:08:0a:
2b:8c:08:0d:f0:82:fe:71:53:db:0d:97:6c:69:94:
21:3a:95:69:00:a5:0b:b2:8b:24:60:92:4e:93:14:
c6:49:06:fb:77:97:81:8d:cd:6a:49:81:a3:1e:93:
43:87:da:68:87:76:85:92:c4:69:3a:0d:ea:35:25:
0b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DB:91:02:F7:C2:41:3A:34:6E:11:73:8F:EA:4B:FF:44:1A:87:4E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144898.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8c8::/32
Signature Algorithm: sha256WithRSAEncryption
3e:2a:d9:23:2f:36:a7:9f:ca:22:96:32:26:71:d6:d1:97:ad:
46:18:76:24:7a:e8:39:cc:3f:f1:86:64:26:28:f2:da:83:9f:
8d:8c:ac:05:2a:e7:ea:49:84:a3:f3:1d:7f:25:b3:14:e0:b5:
35:b1:f1:b4:73:2a:4a:da:ab:b5:fc:f5:ee:08:72:66:7b:74:
c9:92:f4:f0:47:78:dc:b6:a1:0b:28:b2:67:19:e0:28:5b:50:
20:a1:47:cb:73:a1:7a:c7:d5:9c:d0:ea:bd:0b:0e:5c:f1:2b:
6c:98:fd:74:5a:55:af:89:db:e6:d3:95:cf:d0:0b:52:44:bc:
e6:d9:df:5f:25:a7:f5:33:22:f5:9c:d3:76:a6:2e:cc:b8:59:
91:c3:37:d9:83:88:f3:33:8e:1b:09:c1:1a:08:f8:14:48:cb:
25:35:67:b2:94:98:3c:c7:7d:02:41:a8:4d:37:58:db:01:34:
69:b6:f7:29:43:4c:86:e4:63:60:48:c7:b9:f2:35:62:53:ea:
60:c9:3e:5f:79:61:83:44:a8:63:44:b3:a5:f8:7b:76:73:10:
25:6f:e2:ce:2a:35:03:b4:fc:ef:b2:f7:c7:88:18:98:09:cd:
65:57:9b:c1:3f:dd:58:c1:08:8b:73:1b:8e:a3:14:fd:83:59:
2b:63:25:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:36 2026 by rpki-client