Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144989.roa
File: AS144989.roa (raw, json)
Hash identifier: y3Pq9p3RCIVrTEN9rBwS23koC20WkYTe9MF+wnNDfSk=
Subject key identifier: B6:FB:DA:23:FA:01:51:B4:04:8A:27:FA:0E:9A:51:DD:BC:98:95:98
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 03B74CC5827F33AC4B048D333A87BAF7EB2100D1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144989.roa
Signing time: Mon 25 May 2026 03:19:44 +0000
ROA not before: Mon 25 May 2026 03:14:44 +0000
ROA not after: Mon 24 May 2027 03:19:44 +0000
asID: 144989
IP address blocks: 240a:a923::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:b7:4c:c5:82:7f:33:ac:4b:04:8d:33:3a:87:ba:f7:eb:21:00:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:44 2026 GMT
Not After : May 24 03:19:44 2027 GMT
Subject: CN=B6FBDA23FA0151B4048A27FA0E9A51DDBC989598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:52:18:3a:60:fa:97:e3:e1:fe:9b:91:57:a9:
6d:ce:32:d3:43:95:54:02:1b:88:e3:49:29:ab:fc:
eb:66:fc:df:4f:78:3a:24:28:5b:28:ce:93:ff:24:
31:fe:9a:0f:93:6d:43:f6:f7:1f:19:8c:31:60:80:
d0:4a:50:72:0a:0f:20:97:a4:58:bd:52:63:d3:05:
4b:b1:f9:8b:e8:d5:ad:4a:34:58:f5:68:fa:42:2c:
81:92:5e:3c:5f:c1:c6:d1:25:07:89:1f:54:94:a0:
95:b3:b1:cb:33:3f:45:a5:9a:a0:1d:b1:db:30:01:
0b:3f:0e:c3:42:84:b9:f3:75:55:6e:31:79:fe:7a:
2b:b1:9d:18:20:78:09:17:b5:9d:5b:2d:89:b4:6e:
91:80:a2:c1:f4:16:f6:20:fb:d9:33:98:01:3b:62:
80:89:78:ce:18:08:fb:c0:82:0a:26:32:f4:7f:78:
57:f6:6d:6e:6d:3c:1f:50:62:7d:6e:bb:0d:21:f6:
f2:15:6a:52:42:d4:61:c9:9c:90:05:11:c3:73:fe:
ac:3d:48:a7:64:ab:b4:4b:8f:89:3c:dc:73:37:75:
d8:18:47:cb:6f:3e:c3:3d:db:88:d3:a7:a9:df:0d:
b8:52:7c:72:72:a2:df:f4:f6:f6:01:c3:9d:a2:92:
5e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FB:DA:23:FA:01:51:B4:04:8A:27:FA:0E:9A:51:DD:BC:98:95:98
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a923::/32
Signature Algorithm: sha256WithRSAEncryption
71:d4:c5:7e:49:71:32:66:60:6b:75:9e:97:e5:16:03:07:b1:
4a:fb:1c:77:7e:00:7d:ec:75:61:2d:72:a3:ff:4f:78:01:7f:
ab:1d:a7:d6:e4:3f:9b:6e:3e:10:fc:e5:a6:68:62:d9:6a:5a:
0a:5b:62:06:90:a8:7b:7f:01:7b:36:ec:8b:48:5d:3f:32:5a:
7b:8e:f7:56:42:48:91:8e:b1:ea:cc:bc:f4:2f:79:80:bd:bd:
c6:20:f2:62:81:c9:91:39:fd:c7:c5:f3:1f:eb:4a:3e:62:13:
14:67:3d:7d:82:f8:6a:80:a1:db:ff:e1:dd:fe:08:d6:c7:fb:
df:a8:d0:2f:d5:05:a1:bd:73:b2:75:20:fd:bb:ee:86:71:d8:
85:02:dd:1b:52:dc:f6:7a:93:9a:af:66:91:e9:41:57:0d:d9:
57:45:89:e1:52:23:37:c1:64:f8:1c:ba:96:81:33:c2:ed:be:
f0:4e:bf:96:95:2e:9e:26:a8:be:aa:23:80:99:92:54:33:ea:
47:a0:33:e8:7a:af:40:9e:47:67:d5:2e:8c:bf:bb:dc:18:3b:
0c:32:66:52:bc:5d:b7:36:73:58:d2:87:27:c3:64:ce:01:1e:
79:6c:fb:33:8f:90:56:25:8e:10:59:5c:b8:76:e3:3e:8c:8d:
ad:ec:b8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:33 2026 by rpki-client