Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144994.roa
File: AS144994.roa (raw, json)
Hash identifier: kEGxixtrI58yiZPSFkW0MkGcorpPvbdk+V5KUS/TlGc=
Subject key identifier: 60:A3:8E:89:B0:E2:34:65:10:83:58:34:85:63:23:BF:89:7F:AD:8C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 561C4CB4722EB225162B0FD018EDB3285541EA18
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144994.roa
Signing time: Tue 26 May 2026 03:16:42 +0000
ROA not before: Tue 26 May 2026 03:11:42 +0000
ROA not after: Tue 25 May 2027 03:16:42 +0000
asID: 144994
IP address blocks: 240a:a928::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:1c:4c:b4:72:2e:b2:25:16:2b:0f:d0:18:ed:b3:28:55:41:ea:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:42 2026 GMT
Not After : May 25 03:16:42 2027 GMT
Subject: CN=60A38E89B0E2346510835834856323BF897FAD8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a8:42:61:25:43:47:23:4c:9a:99:10:59:d6:
bb:b7:20:19:b6:a2:2c:54:f0:9d:29:44:13:5a:8f:
a0:7a:7f:d0:35:cd:f5:9d:79:ac:07:e4:00:de:03:
c4:34:74:9b:d7:ab:bc:75:b1:43:93:78:9b:9e:f3:
f9:84:66:ed:b4:55:d5:61:c9:45:86:8f:f2:0c:e8:
3b:06:ec:55:58:88:c9:b9:20:d8:61:9a:83:b2:bc:
ec:39:69:11:62:3b:1a:66:cd:2d:a6:24:34:48:84:
dc:9a:49:14:4d:bd:b0:09:62:e6:6a:dd:d1:8e:30:
c0:6f:d8:49:16:1c:fc:11:0f:87:29:cf:70:85:65:
6c:fc:12:8a:da:c9:d9:a1:1f:29:f2:71:78:c3:44:
50:b0:d0:02:03:f2:7c:9e:b0:3d:69:35:d8:4b:e7:
f6:d2:70:c1:bc:67:ec:07:ba:6e:88:72:c1:24:e1:
7c:79:a8:f3:d2:30:ee:92:ee:1a:f8:ae:78:fe:f0:
bf:c8:82:51:68:9d:4c:03:a7:47:89:19:e1:6f:82:
6b:5e:2d:6c:37:69:aa:eb:55:df:78:18:2a:fb:f3:
58:8b:5f:7c:fa:29:61:0f:a2:86:61:58:f2:8e:0d:
84:4f:db:51:43:d1:f3:86:71:bd:e7:65:24:f6:94:
7a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A3:8E:89:B0:E2:34:65:10:83:58:34:85:63:23:BF:89:7F:AD:8C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144994.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a928::/32
Signature Algorithm: sha256WithRSAEncryption
57:34:81:45:c8:68:83:61:92:a9:ec:fc:02:c7:b0:b5:ff:c3:
29:7e:ca:4a:11:e0:24:87:9f:16:d5:3a:33:17:23:d2:a4:17:
be:1b:5f:44:b0:9a:6b:1d:7c:8d:5a:73:2c:64:43:5e:73:6a:
78:bf:20:80:81:99:61:93:dc:88:ac:d8:53:fd:ee:90:ca:ba:
fa:8f:50:30:af:98:69:2d:65:cc:da:c4:30:1d:01:3f:10:42:
c5:5e:f7:08:e9:04:72:c6:53:95:0f:15:51:cd:85:48:91:c6:
32:d2:1b:7a:89:47:fc:9e:10:35:61:cd:ad:05:1a:cc:70:af:
f7:e8:33:c4:8f:00:58:53:b2:ee:37:df:97:1f:76:5f:03:1c:
84:f3:7d:e4:17:cb:96:3d:35:28:66:c6:62:b3:f6:10:fc:c4:
7b:f6:7e:dd:a8:0e:a3:ec:e7:fc:e8:d1:c0:bb:9b:2e:cd:c3:
3f:fe:40:53:f3:5b:a2:2a:68:55:50:e0:fc:f4:09:84:f4:b4:
c6:87:8e:94:c5:c7:32:c7:52:7e:0b:9d:47:b2:fe:d1:19:88:
df:e7:76:72:ae:5a:3f:e0:6e:d3:c3:b6:9a:8e:da:1b:de:77:
f9:e5:68:64:0d:31:a1:74:9b:30:dc:06:de:dd:a8:8b:c9:e8:
0a:71:61:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:55 2026 by rpki-client