Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144905.roa
File: AS144905.roa (raw, json)
Hash identifier: r+HHSNqI8JakQjh91Pwg/COciRAFfjigLNGcWkxAg+s=
Subject key identifier: 98:A3:03:9C:CA:DC:62:F4:E4:45:26:8A:C7:2C:A4:69:60:58:15:13
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 089D1194AFD9BD961FDAE0995D8D9AD6062C1CC0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144905.roa
Signing time: Fri 22 May 2026 07:08:51 +0000
ROA not before: Fri 22 May 2026 07:03:51 +0000
ROA not after: Fri 21 May 2027 07:08:51 +0000
asID: 144905
IP address blocks: 240a:a8cf::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:9d:11:94:af:d9:bd:96:1f:da:e0:99:5d:8d:9a:d6:06:2c:1c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:51 2026 GMT
Not After : May 21 07:08:51 2027 GMT
Subject: CN=98A3039CCADC62F4E445268AC72CA46960581513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6e:91:c3:d9:1d:16:99:0d:b9:a2:c1:06:53:
b7:b3:29:87:e2:69:da:2a:7a:ed:c7:ed:99:05:31:
a5:2d:d7:b9:7a:01:0b:c7:d1:10:86:ac:45:e9:73:
da:13:f9:c8:43:29:87:3d:f3:72:4a:ee:96:b1:f3:
7a:3d:36:1f:5c:7e:e8:ab:b1:66:90:84:03:05:d9:
34:c9:ad:2f:08:c1:3f:b0:8f:ed:6a:8a:91:c3:86:
5e:d4:74:01:1c:76:5b:22:21:8f:ea:14:8d:ba:13:
82:79:44:c9:07:b2:16:f0:93:87:9a:bb:c6:db:dd:
14:07:1a:25:3d:51:10:20:2d:42:9f:0c:bc:a4:a9:
57:c3:f1:41:54:38:56:24:22:53:f1:73:a6:4a:e1:
48:0c:df:29:00:5f:73:15:af:0d:b9:11:37:f2:7f:
48:99:ad:98:47:e4:12:1e:ed:50:f8:47:92:f8:04:
11:8b:72:6e:99:c0:81:53:7f:ee:b0:ff:de:d7:b3:
8e:2c:72:f2:ae:cf:b6:60:f6:68:cc:14:d4:09:d0:
52:9e:95:4e:82:1c:5d:1b:d9:84:93:58:6b:19:0f:
5e:17:08:1b:59:70:01:27:47:f9:1a:31:b4:5d:6d:
01:40:82:6d:9f:2a:03:d9:d1:74:c0:ca:ea:6d:31:
5f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A3:03:9C:CA:DC:62:F4:E4:45:26:8A:C7:2C:A4:69:60:58:15:13
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144905.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8cf::/32
Signature Algorithm: sha256WithRSAEncryption
80:56:84:0d:f6:58:9a:b7:22:1b:22:ef:1d:32:e5:99:ff:32:
5e:78:04:fa:1f:1d:6b:3d:15:38:b6:28:2f:84:39:7b:f7:f9:
49:67:fe:d5:ca:c7:c5:00:ce:31:61:ae:94:19:52:ce:77:a8:
d9:a5:2d:a9:02:03:0f:10:95:7f:85:b3:a2:5b:e8:fb:ec:b9:
d0:28:8a:0d:ad:a2:e4:63:dc:19:c0:5a:61:a6:21:8e:17:81:
d4:75:96:2b:5a:5d:cf:96:62:57:a1:f2:c7:4d:c8:11:c7:3d:
b7:a5:8f:49:df:9d:2a:41:26:87:16:41:ce:ca:46:63:8f:8a:
6d:39:8e:9e:e5:bc:9b:2c:14:8d:d0:0e:66:14:36:39:8b:ac:
d7:86:0e:7d:0f:a2:5d:50:5c:be:ef:17:d0:ea:a7:bd:62:31:
96:c2:37:27:b1:59:08:09:6c:6a:c4:8b:21:f3:77:f1:9c:84:
e4:cc:ac:62:80:5f:5f:d8:96:51:b3:00:f0:79:72:c9:63:a7:
d6:99:99:55:af:ce:61:0d:21:5e:89:57:11:7f:ad:d0:40:d7:
33:09:86:9e:2c:73:ab:98:c3:4c:69:e6:86:42:d7:67:98:00:
99:da:76:95:23:5e:c5:46:e9:d8:29:6c:07:73:70:b2:26:22:
ca:4e:8f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:14 2026 by rpki-client