Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144904.roa
File: AS144904.roa (raw, json)
Hash identifier: nM8sGFjfSj0VJYbRsMgEblD1UbGFldw/zdWd3I04kf8=
Subject key identifier: 4F:4F:49:A9:38:5F:3C:D3:28:0C:79:DC:DE:E1:91:3E:51:F7:68:26
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0FD2F6B9DD3E29EA9AF57E393969B917700B930F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144904.roa
Signing time: Mon 25 May 2026 06:28:22 +0000
ROA not before: Mon 25 May 2026 06:23:22 +0000
ROA not after: Mon 24 May 2027 06:28:22 +0000
asID: 144904
IP address blocks: 240a:a8ce::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:d2:f6:b9:dd:3e:29:ea:9a:f5:7e:39:39:69:b9:17:70:0b:93:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:22 2026 GMT
Not After : May 24 06:28:22 2027 GMT
Subject: CN=4F4F49A9385F3CD3280C79DCDEE1913E51F76826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9f:c8:58:17:05:09:28:ef:8a:60:e6:ba:a7:
3d:a1:2c:11:95:4e:58:b9:9e:62:45:62:66:4f:4f:
32:df:16:0f:ae:a2:c1:ac:fc:63:0e:03:60:aa:ea:
6f:ee:18:f0:d9:f2:e1:b4:f0:2c:8c:55:e9:1b:ce:
1d:34:ac:e5:80:e7:f8:ba:c3:45:e1:7b:35:df:3e:
1a:de:9a:7e:c5:d7:72:d3:92:e1:cf:3d:32:7e:f0:
cf:ab:07:c0:98:68:59:02:ff:5d:e4:67:c7:ed:2f:
30:b3:74:0b:94:83:1a:87:3c:2a:14:2c:bc:6b:0f:
c4:86:be:f0:4b:22:4f:da:fa:f2:33:da:52:9e:c5:
ea:77:6a:6d:b3:50:ab:20:b8:68:74:6b:fd:14:d1:
1c:11:e2:b8:6c:d7:5f:4e:47:b3:1e:f2:ad:aa:94:
14:70:37:e0:ce:0e:9f:36:29:aa:f9:1f:37:65:a7:
1f:31:47:a2:af:f3:04:8c:c4:57:00:90:cc:83:7b:
79:00:65:2c:e1:05:57:a7:47:f2:a0:da:85:92:f6:
b6:34:c4:cd:41:f0:31:b7:ca:15:38:0c:1d:c0:cb:
17:96:f9:51:77:04:2b:a6:53:3f:d8:d9:ed:ec:b7:
59:25:74:cb:8a:04:df:f1:53:73:68:64:56:41:dc:
95:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4F:49:A9:38:5F:3C:D3:28:0C:79:DC:DE:E1:91:3E:51:F7:68:26
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144904.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8ce::/32
Signature Algorithm: sha256WithRSAEncryption
ab:20:9a:03:7b:d3:9c:ac:28:61:d6:5e:b5:a9:8c:bc:8b:b8:
47:85:b8:65:15:83:fe:ef:ba:8a:03:fa:e6:d5:3e:42:a7:fa:
6d:8b:5c:85:0f:30:83:c8:a1:d6:69:3f:60:71:77:b2:2e:9d:
96:ff:89:4a:e1:c2:c0:68:9a:49:eb:a2:69:0b:4d:70:59:ee:
f5:2e:9a:73:c1:5a:93:c1:8d:09:56:37:d6:fb:bb:6e:87:12:
25:9a:24:17:1c:09:c0:9f:b8:8a:2f:ba:ac:e8:12:ba:d6:c6:
eb:fe:7a:a6:ff:75:59:f1:e8:a9:e4:43:cf:58:0d:c4:37:2b:
71:23:ba:3c:1b:64:02:08:d4:59:29:fd:3c:d1:fc:53:b7:93:
fe:8d:99:47:47:ca:6d:af:d7:6e:9b:61:61:01:31:31:ad:fc:
71:28:44:36:8f:00:8f:32:89:2f:c6:00:d0:f1:f8:f1:5d:8d:
77:0a:15:93:b9:27:7f:9b:f6:a8:25:82:95:95:1d:70:85:e2:
61:e0:81:09:15:cd:0b:ec:a6:a6:f7:b1:91:e4:f4:88:80:c2:
68:fe:59:e3:ee:71:b7:97:37:a8:03:32:ee:d5:fb:26:cf:a5:
a8:27:c1:89:18:df:b8:cd:a4:78:a7:df:5c:e0:96:c7:30:3c:
28:71:b4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:16 2026 by rpki-client