Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144945.roa
File: AS144945.roa (raw, json)
Hash identifier: tkBlU9MNpREZwJUVkmxCfLcOFDsJKe5hHj0P8ta+vPk=
Subject key identifier: ED:57:47:7D:C5:38:55:AE:5B:A4:28:E4:67:34:E2:ED:AC:56:D8:88
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 06154B71AE9FB3C1DB5430F7E5547FECF624D31E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144945.roa
Signing time: Mon 25 May 2026 01:20:06 +0000
ROA not before: Mon 25 May 2026 01:15:06 +0000
ROA not after: Mon 24 May 2027 01:20:06 +0000
asID: 144945
IP address blocks: 240a:a8f7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:15:4b:71:ae:9f:b3:c1:db:54:30:f7:e5:54:7f:ec:f6:24:d3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:06 2026 GMT
Not After : May 24 01:20:06 2027 GMT
Subject: CN=ED57477DC53855AE5BA428E46734E2EDAC56D888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:5d:b8:94:6f:94:e9:fd:64:ca:e9:05:4e:
ca:6e:94:f5:57:15:7e:6c:46:27:22:35:fe:c9:56:
4e:2d:f9:81:e2:10:42:9f:b4:3b:c9:20:25:04:e7:
81:b0:64:b0:a9:c2:63:1a:76:e6:b4:c0:db:a8:ce:
1c:24:9d:d7:b3:b3:2a:3f:11:36:36:3b:ea:e1:d9:
a8:c9:18:46:0f:cc:64:08:4d:b9:ce:36:d1:5e:35:
d3:44:97:34:9b:5d:22:2e:f2:2e:b5:a5:56:fc:9f:
f8:19:75:2c:25:10:65:00:cf:d8:69:7e:61:c3:55:
bf:7f:07:c0:76:ea:66:d0:6d:ac:5c:76:1a:3f:22:
32:2b:4d:33:97:c9:67:ca:8d:c0:a3:db:06:8f:39:
98:48:77:d1:61:bc:d1:56:71:a1:3c:59:2a:6d:89:
14:14:7c:d1:9f:77:04:21:e8:45:42:28:d6:94:e1:
42:11:de:c3:55:41:39:18:17:2d:37:81:79:16:c3:
5c:12:7c:68:d7:54:ad:36:74:66:44:51:ce:32:4a:
b4:50:bf:f1:1e:cc:f1:74:09:8e:ba:f1:c9:0b:3c:
ae:7d:f0:aa:fd:d4:16:99:a7:03:84:e5:54:f4:51:
83:1f:bd:f5:7e:91:33:c5:7f:08:e5:2f:b9:2f:9b:
54:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:57:47:7D:C5:38:55:AE:5B:A4:28:E4:67:34:E2:ED:AC:56:D8:88
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144945.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8f7::/32
Signature Algorithm: sha256WithRSAEncryption
50:b5:c0:e7:98:99:6b:cf:10:a5:23:df:5b:4e:33:c1:ea:2b:
9c:2b:62:69:27:06:c0:fb:69:18:81:20:e9:52:20:43:09:18:
ac:45:ba:41:a3:7f:2b:a9:b9:6d:e8:a2:93:4f:1c:f6:1b:97:
a3:b8:33:32:df:49:8b:d8:93:86:6c:49:59:17:59:a7:b6:ce:
f4:43:a0:39:3e:70:1b:de:25:94:fc:95:52:9c:69:f3:98:74:
35:d0:f1:9c:7b:10:7e:fb:f6:26:8c:ce:50:ad:f2:a8:bd:63:
a1:d2:c0:74:e5:df:27:12:15:79:fa:4d:46:6c:6b:cc:68:7b:
97:5d:4e:da:80:ec:fc:e0:02:5d:e6:ae:c5:f7:43:7c:c9:8a:
5a:3f:12:ea:02:86:65:9e:1a:20:10:14:ee:52:05:95:1c:aa:
0c:ce:3b:6a:b0:75:5f:a4:54:4f:48:fe:f6:67:06:fa:d0:bb:
e9:97:10:74:9a:e7:16:c2:3a:dc:21:c2:c9:61:22:26:3c:22:
72:6b:d4:db:62:ee:2b:d5:b2:1b:f7:57:ea:9c:65:1a:a9:a5:
e4:ed:b9:ef:8b:95:8b:37:5e:85:1f:80:37:fe:5e:46:f0:70:
39:d6:21:64:74:0b:ff:4b:36:d1:c7:8c:57:66:52:4e:5a:02:
fa:72:b1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:00 2026 by rpki-client