Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144941.roa
File: AS144941.roa (raw, json)
Hash identifier: LB1W0TwabT4y1iKeDSFAcs6/y0+P3scTWstD4MqIL2w=
Subject key identifier: ED:E4:02:77:0A:2A:27:8A:4C:1D:24:0A:44:74:D4:D5:62:05:ED:77
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3D579137AE1363D2DA9C073ED787407B693E3DAF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144941.roa
Signing time: Tue 26 May 2026 01:13:24 +0000
ROA not before: Tue 26 May 2026 01:08:24 +0000
ROA not after: Tue 25 May 2027 01:13:24 +0000
asID: 144941
IP address blocks: 240a:a8f3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:57:91:37:ae:13:63:d2:da:9c:07:3e:d7:87:40:7b:69:3e:3d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:24 2026 GMT
Not After : May 25 01:13:24 2027 GMT
Subject: CN=EDE402770A2A278A4C1D240A4474D4D56205ED77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:87:2e:53:ca:df:b6:0a:9d:d5:c3:05:86:
91:8b:fb:49:7d:0d:c8:6d:4e:ed:13:88:4c:6e:3f:
f6:97:d8:f7:6c:32:b5:87:96:4e:42:62:d6:b2:d7:
c7:a5:46:0f:40:6f:a1:38:ca:f9:78:f2:29:4b:d4:
b1:3c:04:e4:f9:46:31:58:a4:2c:38:d5:49:99:a9:
f7:68:79:db:2b:52:39:12:cd:7b:2a:3e:9e:f8:23:
10:e1:e8:c7:a4:2f:1c:41:58:0a:8a:99:d0:76:10:
78:57:54:97:45:60:00:ef:05:99:fb:82:a9:22:7d:
86:5f:a9:cb:d2:1b:ea:fd:f0:2c:4b:31:1c:00:17:
1c:05:d7:a1:78:14:bb:e4:86:ca:81:42:e5:b6:11:
e0:d8:4c:40:ea:a2:31:ed:5e:59:c5:89:3c:c7:47:
8a:73:7c:ee:27:32:89:b9:79:db:80:a8:fb:d9:61:
98:fd:05:35:44:f4:e0:a0:ab:17:84:78:86:85:26:
8f:a7:3c:76:d4:a0:a7:cc:b8:01:9b:58:9a:0f:f0:
ca:e3:d4:a1:1e:d8:71:05:60:56:b7:23:78:d7:f9:
1c:8f:77:57:8c:b1:2b:bf:6c:c4:cd:6f:d2:79:1c:
30:3f:52:08:42:52:39:be:b6:8b:ac:cd:99:98:a0:
03:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E4:02:77:0A:2A:27:8A:4C:1D:24:0A:44:74:D4:D5:62:05:ED:77
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144941.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8f3::/32
Signature Algorithm: sha256WithRSAEncryption
76:86:05:c9:22:0f:85:38:34:84:e5:df:57:85:c5:97:b3:c4:
9f:65:51:9b:06:3b:38:79:c7:8b:ac:15:ac:a6:a6:be:db:be:
00:f9:e3:09:1b:d7:12:e4:b8:e5:4e:e4:65:bb:a2:93:bf:b1:
a5:7b:6c:b0:86:a0:b1:7a:5b:04:d3:35:9c:e5:8a:bb:ab:e6:
18:13:f6:ce:f9:7c:09:cc:bc:6e:0b:c6:86:22:8c:ad:f8:cc:
28:e7:f2:3d:78:7b:18:42:d7:34:7e:0b:cb:17:11:11:83:1e:
ea:d4:c8:8b:e2:62:1d:0d:71:2f:01:79:b6:29:77:b8:0a:a3:
80:a8:db:e3:91:96:6d:17:0b:8f:8e:9d:6d:43:a3:4e:e2:b1:
3c:f4:74:4c:b6:3d:c1:13:6d:50:84:22:d5:18:27:d8:fe:bf:
4c:d5:f8:66:9f:ea:6d:d9:c7:88:b9:4e:c4:24:98:ed:b6:68:
58:9a:a7:32:10:ee:69:cf:d2:c7:67:c8:d8:74:68:e6:96:4b:
f6:39:26:31:1f:fc:ef:c1:c1:27:a9:2e:0d:9d:0d:b6:aa:81:
f1:b0:22:40:1e:ad:5a:71:55:1c:7f:32:01:4f:0c:2e:e7:05:
9a:9c:1a:df:11:8e:65:a6:35:44:b9:73:ef:c3:78:be:42:8f:
4b:00:dc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:39 2026 by rpki-client