Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144947.roa
File: AS144947.roa (raw, json)
Hash identifier: 5jPwbKHA/gujaLwMbfZ4wJeEnkav5abo7SIcH636+pU=
Subject key identifier: A2:5D:9B:0F:20:5F:90:55:04:D1:77:4E:A9:D3:1D:52:57:BC:FA:64
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 64668F5BEAFB37972A3FE3A8F91A0B67963F8725
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144947.roa
Signing time: Mon 25 May 2026 03:19:12 +0000
ROA not before: Mon 25 May 2026 03:14:12 +0000
ROA not after: Mon 24 May 2027 03:19:12 +0000
asID: 144947
IP address blocks: 240a:a8f9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:66:8f:5b:ea:fb:37:97:2a:3f:e3:a8:f9:1a:0b:67:96:3f:87:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:12 2026 GMT
Not After : May 24 03:19:12 2027 GMT
Subject: CN=A25D9B0F205F905504D1774EA9D31D5257BCFA64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f8:43:cf:81:1d:f1:5f:a4:ce:a9:50:e3:7f:
b3:4d:55:73:7d:ed:21:12:08:98:eb:38:6a:e4:20:
40:c9:d1:9e:74:2c:58:17:38:55:cd:49:c8:f1:74:
d9:93:1a:d3:8e:a9:1a:05:6b:7a:0f:25:f4:d1:d8:
37:76:18:d1:c4:3e:d2:0a:98:35:2f:6e:a8:97:3c:
70:aa:f3:d1:e5:bd:2e:aa:b0:f0:e3:4f:51:72:2b:
57:be:c3:1a:2a:be:86:91:3b:20:90:36:0f:4e:15:
4f:e4:ac:71:69:d2:7f:1f:43:a8:5d:51:22:92:3c:
75:4d:71:3b:2a:bc:a8:a3:3c:91:36:59:d7:f1:64:
a1:a9:67:15:17:26:e2:96:9d:3e:18:71:64:68:2d:
d4:48:f2:9a:63:92:24:20:c0:41:64:a0:a3:13:13:
5f:b9:60:d6:ae:f4:42:76:77:16:f1:b1:c5:f9:a8:
51:2c:1a:ed:cc:1f:9f:34:f4:33:85:52:95:01:15:
83:26:f3:bb:84:43:f0:15:68:0c:e6:81:fc:ce:ce:
7b:be:f6:55:7a:22:0e:49:7c:25:79:82:18:2c:f7:
e1:2a:64:92:03:f3:b5:f7:53:59:87:ae:51:07:3b:
a3:04:2d:68:16:ab:91:d5:68:45:6a:8f:c8:1d:1b:
b5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5D:9B:0F:20:5F:90:55:04:D1:77:4E:A9:D3:1D:52:57:BC:FA:64
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144947.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8f9::/32
Signature Algorithm: sha256WithRSAEncryption
47:57:a0:72:d3:fa:c5:71:e2:d8:88:e2:42:7c:ad:e0:f7:11:
73:ca:10:8a:07:b7:cc:1f:2c:84:d3:bd:9b:aa:49:25:a4:6b:
93:03:6e:8d:b8:3a:30:45:66:a7:e4:7b:f7:37:f1:36:7b:30:
d9:8d:c7:97:13:a6:26:1d:de:74:01:21:b7:31:44:93:c6:b7:
9d:26:96:20:d5:63:88:ac:5b:1e:1d:3b:4b:a0:33:17:7d:b9:
ba:fd:c2:23:0e:56:55:ac:6c:28:b4:9b:1c:98:93:18:6a:e4:
29:60:2b:50:ea:13:c1:95:db:cf:2c:bc:95:76:43:98:56:51:
eb:f4:4f:63:7a:e9:52:1b:15:16:ff:68:df:f7:03:a6:63:87:
f9:d0:f1:e8:ac:11:99:49:d7:58:99:24:0b:0d:00:25:e0:c6:
ac:56:e0:95:48:aa:d9:f7:ac:dd:03:aa:79:f5:66:50:4a:ca:
fa:08:af:fc:a1:bb:36:33:b9:ca:00:db:ef:f8:16:18:cb:5a:
f1:59:1d:46:75:98:5c:23:92:07:4a:7f:20:fe:93:47:0c:ef:
11:32:18:7c:09:a6:0a:81:e0:e8:1c:14:c5:ad:1c:4e:e4:0b:
5e:c0:0f:d4:67:f8:b2:26:a9:23:ff:73:4a:b3:55:6a:d2:37:
14:e4:1f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:58 2026 by rpki-client