Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144951.roa
File: AS144951.roa (raw, json)
Hash identifier: Zz+TnSIx1wJ/QjcYpx869GXru6v6L6br98gNuEa2ig4=
Subject key identifier: E2:B7:7E:3F:29:D2:B2:82:97:46:27:98:6B:79:8E:EE:0E:4A:BF:E0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4FDA145BB7CAA4D3B01C1850C05275188D849495
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144951.roa
Signing time: Mon 25 May 2026 01:20:38 +0000
ROA not before: Mon 25 May 2026 01:15:38 +0000
ROA not after: Mon 24 May 2027 01:20:38 +0000
asID: 144951
IP address blocks: 240a:a8fd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:da:14:5b:b7:ca:a4:d3:b0:1c:18:50:c0:52:75:18:8d:84:94:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:38 2026 GMT
Not After : May 24 01:20:38 2027 GMT
Subject: CN=E2B77E3F29D2B282974627986B798EEE0E4ABFE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:5e:cc:ea:f3:92:d9:e7:1b:ac:7c:e4:57:
5b:8a:44:3e:41:2a:b6:2b:fe:cc:3a:74:d2:21:92:
88:2f:b1:88:08:9c:09:7a:97:f7:be:76:0d:92:dc:
c5:1d:e3:94:c0:05:ac:e5:53:c2:27:7b:73:e4:c9:
f2:45:4b:2c:7e:f6:05:9d:0e:7c:30:f6:ba:ec:ec:
08:ba:09:82:2f:7f:8a:2b:07:8f:8f:f4:e2:7c:b9:
00:ac:81:28:59:13:8e:9b:5e:50:23:52:aa:e1:9d:
32:c8:d8:11:9b:42:16:ff:92:a8:5a:71:b2:9a:21:
8b:8f:89:80:a9:c2:07:2a:9d:ef:be:65:25:71:4d:
98:83:2a:99:ca:0e:48:22:b4:c4:c4:f1:cf:20:b0:
30:00:2c:fa:83:4e:29:75:74:0d:1d:32:0b:f7:82:
b5:18:1d:a3:40:09:a2:6e:56:4a:ae:0c:15:45:b1:
77:20:fd:2d:6e:c9:cd:59:0b:f7:c9:a2:1d:3c:67:
f4:e8:98:ce:09:31:b5:e0:49:71:bc:d8:8c:a1:65:
3b:58:d5:38:2e:ef:9c:28:7c:71:93:0a:87:d8:7d:
17:a1:d1:68:0b:c9:23:0f:a7:79:50:64:ab:1e:52:
03:85:1e:9f:9d:f8:21:0b:61:ab:80:82:7e:28:a7:
79:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B7:7E:3F:29:D2:B2:82:97:46:27:98:6B:79:8E:EE:0E:4A:BF:E0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144951.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8fd::/32
Signature Algorithm: sha256WithRSAEncryption
a9:d7:e0:02:8f:9f:5a:91:04:b1:97:40:37:f5:f0:0b:9a:e8:
5e:42:9e:b7:bc:8b:cc:42:7e:59:3e:3d:d9:45:b6:cc:b4:47:
42:e4:2f:25:81:c2:e0:25:a9:50:35:42:95:7e:d1:76:b9:b2:
65:1e:3c:38:88:22:c4:ed:7f:4d:8e:64:4c:7d:b0:ff:54:e6:
31:61:32:62:0c:6f:75:dd:91:e1:54:c3:c6:24:6d:98:c9:36:
c9:b1:cd:cd:0c:b9:95:3c:85:30:b3:dc:bd:c1:07:0a:9a:01:
d7:96:1c:30:d2:c7:0e:c4:17:69:ca:d5:db:8a:ca:79:e4:30:
36:0a:fb:43:c3:85:11:f1:cf:89:fe:6e:6a:a5:cb:aa:04:2e:
f5:61:84:60:68:d4:4a:17:23:53:bf:3d:d6:f1:1d:37:99:77:
06:b5:e5:95:b9:c5:6b:12:93:94:07:02:a8:96:49:05:5a:64:
01:2f:d5:24:07:d0:fb:ee:71:54:9d:04:f9:45:86:2a:47:36:
36:57:71:b0:50:7c:bb:80:8c:eb:45:a7:a7:c6:8e:29:6e:fb:
02:3f:e2:31:d4:16:2e:1d:bc:73:4e:89:a4:3d:59:58:37:b9:
3c:dd:a0:b1:fc:ac:8b:0c:0f:61:dc:76:91:67:19:9f:8f:dc:
67:23:d6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:50:02 2026 by rpki-client