Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144908.roa
File: AS144908.roa (raw, json)
Hash identifier: KAnKyrr+ij8JPm0/WBKLb05sS2jjJOEOfUpnzMgceoE=
Subject key identifier: D0:25:DC:18:6C:80:80:45:01:5D:5E:E6:F7:56:B0:4C:84:A3:FC:CB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1145732AE5CB12372E3EC6F5CA1266242FBB8EC4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144908.roa
Signing time: Mon 25 May 2026 06:28:46 +0000
ROA not before: Mon 25 May 2026 06:23:46 +0000
ROA not after: Mon 24 May 2027 06:28:46 +0000
asID: 144908
IP address blocks: 240a:a8d2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:45:73:2a:e5:cb:12:37:2e:3e:c6:f5:ca:12:66:24:2f:bb:8e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:46 2026 GMT
Not After : May 24 06:28:46 2027 GMT
Subject: CN=D025DC186C808045015D5EE6F756B04C84A3FCCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:79:86:8a:b0:36:64:df:2a:67:c3:a6:60:41:
00:bc:82:58:58:25:fe:52:a4:be:20:90:b2:ac:8c:
4b:14:cb:65:dc:d0:a0:b6:88:d3:f2:31:79:f3:e7:
78:03:d1:e8:69:ad:c5:88:94:6a:0d:e5:9a:41:b9:
a0:92:fb:39:68:5d:ba:4f:76:c2:e3:74:de:aa:18:
16:31:05:79:ec:3f:5b:9c:4f:36:ff:0b:25:46:23:
45:3a:c5:47:e1:eb:1b:ee:95:a8:6b:c8:42:27:70:
8d:4c:0c:fa:d4:24:23:8d:bf:81:53:dd:d3:c3:19:
64:2b:94:b0:df:23:1a:3c:bd:0f:fd:9f:12:7e:6f:
87:7f:2d:c4:8d:eb:84:b5:42:10:0d:af:a9:fd:78:
e1:52:17:d0:26:61:ca:8f:a8:15:1f:3d:18:c2:af:
05:4c:7a:0c:1e:7b:e1:2f:8a:49:3f:19:7c:e8:a1:
13:00:df:d8:a5:ce:c9:5d:6e:3b:01:b2:63:ad:18:
d6:79:44:39:38:0f:1f:cd:10:50:e8:b8:6b:d7:2b:
5f:92:db:62:8b:a6:df:3e:92:91:0d:cd:be:54:29:
5d:4e:1b:a4:17:e4:16:9e:82:29:f6:19:0f:57:de:
d9:f1:83:e6:bd:20:c7:9c:f9:34:93:73:60:ba:48:
78:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:25:DC:18:6C:80:80:45:01:5D:5E:E6:F7:56:B0:4C:84:A3:FC:CB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144908.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8d2::/32
Signature Algorithm: sha256WithRSAEncryption
8b:88:18:71:e5:03:c6:6a:4a:66:39:e5:af:c5:5d:60:e1:5d:
63:d6:11:71:3d:b9:81:4e:67:0d:d1:63:1b:2b:b8:75:7a:78:
17:49:40:82:d4:fe:0f:af:18:3f:99:fb:12:52:c7:56:83:77:
37:2c:06:f9:3d:06:3b:2e:b1:20:7c:80:8e:04:fb:ba:e0:15:
78:c4:c3:22:f6:17:77:aa:7b:fa:b7:a3:77:74:99:74:df:cc:
b5:16:f7:f2:f4:23:df:7d:30:09:99:1a:5d:cb:e3:28:4f:e0:
cc:20:0c:97:62:c4:0d:8a:64:62:2f:af:40:1f:d0:9c:e0:ce:
b3:43:92:52:96:4b:32:81:e0:36:c1:a3:6a:4d:3e:b8:4e:b1:
10:99:75:4f:f4:5a:ea:86:92:fe:8e:2f:ed:f6:e1:12:b0:cd:
49:87:ad:ab:23:a9:0b:48:b0:c4:dd:de:80:7a:34:81:0a:f4:
13:2d:e4:1b:bf:49:68:1d:ca:b7:16:fe:44:c2:7f:a5:67:e3:
d9:5e:c4:d7:a6:21:55:41:07:95:de:e6:9a:9d:97:21:ca:00:
a0:c4:a0:20:63:94:eb:c4:77:ef:59:96:d7:d6:9c:14:24:30:
8a:b6:58:1e:80:6b:50:c0:43:58:21:1a:92:2c:38:75:31:dd:
4d:b5:23:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:55 2026 by rpki-client