Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144942.roa
File: AS144942.roa (raw, json)
Hash identifier: ih6A90nPgU1cpjvjcd6QKEJlCdoQSuRrlfGGmMTdpSo=
Subject key identifier: DE:7D:6F:C8:98:FC:80:EE:D2:DF:5C:AA:98:CF:86:AD:39:C9:F3:CB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4357BB3015860957EC7D7E5D347062CB3AE25E12
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144942.roa
Signing time: Mon 25 May 2026 01:38:03 +0000
ROA not before: Mon 25 May 2026 01:33:03 +0000
ROA not after: Mon 24 May 2027 01:38:03 +0000
asID: 144942
IP address blocks: 240a:a8f4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:57:bb:30:15:86:09:57:ec:7d:7e:5d:34:70:62:cb:3a:e2:5e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:03 2026 GMT
Not After : May 24 01:38:03 2027 GMT
Subject: CN=DE7D6FC898FC80EED2DF5CAA98CF86AD39C9F3CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:88:5e:98:ca:36:82:34:8a:2a:65:a0:87:31:
6d:9a:7d:82:67:7c:4f:e1:39:8c:7f:b8:88:a2:6f:
c2:28:2d:37:8d:bf:be:cc:cf:8a:90:37:66:c6:3e:
74:0c:66:45:a0:35:e7:ec:fc:78:cd:ff:75:d7:85:
df:c0:de:ca:78:29:b9:a7:e1:dc:8c:12:3e:5f:00:
ec:ab:fb:60:24:af:37:2c:1b:1c:35:23:63:ac:5d:
74:7f:9a:8a:10:2a:f1:60:89:a1:27:8e:01:83:ed:
1c:98:93:c1:34:01:96:73:38:be:91:96:ab:db:38:
f1:a2:f0:1c:fa:0c:8d:9e:b8:c7:57:e6:8b:5e:24:
86:00:a9:4e:a6:8a:8d:a7:0d:9e:c8:cf:8e:a9:0d:
3a:7e:a0:fd:8e:e3:45:5e:e6:1c:57:2f:86:e3:5c:
6d:e4:72:c4:92:bc:31:20:80:53:12:da:28:92:4f:
cd:53:cf:b8:ba:11:72:37:47:ce:0a:72:87:10:42:
47:6d:59:9a:83:f2:f4:8c:47:46:2c:68:81:dd:b6:
f3:8d:61:38:92:fa:73:d7:87:21:7f:d2:ed:be:fb:
c3:8d:fe:d5:4a:98:0f:7a:cd:f0:bc:bc:17:32:20:
a4:c4:c9:94:03:6f:cb:16:c4:cc:f9:c0:bb:84:f1:
5f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7D:6F:C8:98:FC:80:EE:D2:DF:5C:AA:98:CF:86:AD:39:C9:F3:CB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144942.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8f4::/32
Signature Algorithm: sha256WithRSAEncryption
0f:e5:46:74:90:cc:48:92:f8:dc:39:c2:55:c2:15:7e:a3:ae:
61:96:d4:03:ac:3a:fa:23:73:62:6f:35:48:11:65:1c:31:53:
dc:7d:d1:1b:68:fb:87:a1:ed:91:8d:5a:38:3c:c1:07:17:32:
c2:e0:57:e1:9b:d6:59:9d:c5:26:ba:1b:fb:c0:3f:24:f4:a9:
98:8e:ce:9a:5b:1f:f6:41:a7:c2:89:84:c3:95:50:35:27:7b:
73:e2:10:c4:3a:59:64:b2:f1:bf:02:cb:d6:c7:1a:e1:5f:af:
1b:3c:3c:5c:92:68:33:5c:1d:b0:34:77:c8:d8:ed:80:21:3d:
7b:a8:19:f4:ad:7a:56:7e:dd:b4:c3:1d:df:a3:23:d3:ad:28:
62:4b:e3:84:53:58:11:59:e0:11:58:60:4f:74:8a:70:83:22:
46:fb:5a:4c:ed:3e:e3:21:5a:79:45:8e:7c:b0:b0:82:46:a1:
0f:e0:13:8a:f8:c9:09:e5:b1:8a:d3:ee:eb:68:58:2f:a1:1c:
7c:4e:e6:f0:71:2a:74:ce:3b:35:5e:6a:21:44:1c:fc:c4:70:
ce:55:a6:bc:7e:30:d1:fa:61:9e:fa:af:d0:ca:34:e3:01:e1:
34:de:14:49:0c:46:b8:72:8f:29:60:c7:ab:4c:35:d1:d2:23:
5d:61:55:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:41 2026 by rpki-client