Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144934.roa
File: AS144934.roa (raw, json)
Hash identifier: 9elT9taekWyGpQ7ONgKKCmGgMmfuc26T3n45iMwbLic=
Subject key identifier: 4F:77:27:52:34:D6:E2:26:C2:F6:B5:2F:56:48:65:5C:54:42:83:D5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 19159EE91EA13BC2D92762B81FBB97D6C7009A29
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144934.roa
Signing time: Fri 22 May 2026 06:46:06 +0000
ROA not before: Fri 22 May 2026 06:41:06 +0000
ROA not after: Fri 21 May 2027 06:46:06 +0000
asID: 144934
IP address blocks: 240a:a8ec::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:15:9e:e9:1e:a1:3b:c2:d9:27:62:b8:1f:bb:97:d6:c7:00:9a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:06 2026 GMT
Not After : May 21 06:46:06 2027 GMT
Subject: CN=4F77275234D6E226C2F6B52F5648655C544283D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:0f:c7:b5:03:a7:79:aa:2b:a7:4e:a9:cd:eb:
46:c7:2a:b6:dd:a4:c3:13:29:69:a8:81:2b:63:40:
84:a2:90:9a:9c:b4:93:ab:5e:2e:e5:3c:4d:fb:92:
5a:63:e0:f7:49:08:fc:a9:50:de:44:81:80:f2:a9:
d6:df:38:19:38:b9:c9:b6:bb:09:c1:05:79:c0:49:
e2:c2:ff:bf:13:7e:30:62:f3:3c:dc:28:21:b2:e9:
ee:27:ea:1e:6f:0e:21:9f:6b:fc:36:1b:96:65:15:
3b:2b:5a:7c:8c:27:99:0d:b0:ec:ee:0d:e8:4f:1a:
3d:be:13:b0:10:72:eb:f8:67:4d:e0:93:1e:2b:bd:
4b:36:7a:aa:69:34:9e:6f:f0:cf:ed:d4:07:ac:26:
20:12:75:52:ec:b3:82:a5:d5:cc:26:1f:45:ee:6a:
9e:c0:c8:c3:8c:f3:b9:9d:d6:ad:60:14:2c:7c:db:
0e:e4:c0:17:67:2d:42:fc:e4:3a:15:c5:f9:c1:33:
bb:3d:98:d3:18:b8:7b:12:78:a6:2b:aa:c4:26:fe:
0c:c1:77:8f:39:b0:29:6d:ed:13:a9:f2:3e:dc:cb:
8f:c6:12:80:1b:b2:2c:76:14:72:9c:94:e1:77:72:
97:44:d6:d9:4b:3c:ad:f6:60:cc:2b:1a:60:3f:34:
18:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:77:27:52:34:D6:E2:26:C2:F6:B5:2F:56:48:65:5C:54:42:83:D5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8ec::/32
Signature Algorithm: sha256WithRSAEncryption
29:fa:7f:21:a9:71:96:4a:33:c7:39:2d:7a:06:b1:c2:f9:eb:
c6:0b:92:b2:f3:f5:9f:18:43:f0:e1:b5:95:61:a3:a4:c8:b5:
e9:a4:34:8a:86:e1:8c:a5:21:39:84:21:27:eb:a7:65:14:5f:
de:18:0e:5e:60:36:d0:f5:56:07:e5:c2:84:df:fb:8c:04:39:
ae:e1:fd:53:1b:76:0c:67:4a:da:db:ac:7d:f9:c6:3c:f1:6e:
b8:46:3d:29:8d:6c:ff:01:75:5e:2b:24:d3:f6:0f:cf:ca:8b:
27:a4:b7:20:f2:ba:0c:c8:31:43:3b:fc:b7:17:e7:74:fb:e1:
38:f8:35:0c:09:45:e4:63:bf:ab:d0:f2:1f:60:b6:a9:d2:ce:
24:8a:dd:9f:34:25:5f:ec:80:16:b7:99:1b:51:35:15:b2:6a:
fb:63:a8:f6:43:62:80:b2:97:cf:1a:6f:cf:b0:f1:5f:24:29:
1d:02:8b:9f:4f:f4:9e:4e:ef:21:e8:f5:49:e4:42:3c:4b:9d:
13:2b:ea:8e:ba:75:19:59:f7:07:f7:d5:ff:12:21:04:33:4f:
a7:77:2d:62:21:71:e1:c1:a8:1e:27:87:23:13:b0:e7:a2:17:
fb:a6:58:14:a8:a7:ed:6c:86:a6:e8:4f:fe:ad:9b:67:d9:d7:
ec:0f:0b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:02 2026 by rpki-client