Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145000.roa
File: AS145000.roa (raw, json)
Hash identifier: H4oe/BKeLFwI/xKf1FMc/K4aD1j3VQSnsoubLr2GWOc=
Subject key identifier: 37:FF:FC:84:69:CC:1A:1F:9D:8D:7B:84:76:72:F3:BA:E7:D2:E6:74
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1B9940FD200BF8F30F0DB2ED996BC7E222AEA902
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145000.roa
Signing time: Mon 25 May 2026 01:38:00 +0000
ROA not before: Mon 25 May 2026 01:33:00 +0000
ROA not after: Mon 24 May 2027 01:38:00 +0000
asID: 145000
IP address blocks: 240a:a92e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:99:40:fd:20:0b:f8:f3:0f:0d:b2:ed:99:6b:c7:e2:22:ae:a9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:00 2026 GMT
Not After : May 24 01:38:00 2027 GMT
Subject: CN=37FFFC8469CC1A1F9D8D7B847672F3BAE7D2E674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ea:20:40:11:bd:18:83:9e:34:c7:ed:85:d4:
a6:ff:29:f4:6d:b9:ed:24:cc:4b:c4:6c:40:51:7f:
60:0b:fe:c7:c3:4c:af:fa:07:12:14:68:af:96:19:
c4:95:92:f8:66:71:c5:1d:a5:74:03:e5:3d:a5:50:
ec:20:83:9f:32:ca:b7:67:26:f3:a1:05:1c:83:de:
d9:38:21:8b:10:30:3b:33:49:84:c3:c1:be:4c:96:
34:f2:b3:bd:68:d9:52:e3:48:06:89:85:b7:03:3c:
1d:ae:d8:ea:13:bc:65:43:67:38:3f:c4:ce:99:b7:
3a:9c:25:dd:15:90:ec:0c:33:03:5d:8d:b9:6d:d8:
cf:2c:8b:3c:25:d0:3b:70:26:0b:e2:43:5c:0f:80:
89:e6:2b:79:23:dd:81:db:35:35:c2:d5:de:17:87:
64:d5:6d:d3:98:05:3a:da:a2:d7:25:43:09:9b:07:
f4:ee:eb:b1:86:6e:b0:9c:f0:8c:9f:35:c1:73:2a:
a3:14:8d:4d:b8:5b:4d:ac:8f:88:61:2c:ec:16:37:
84:38:9b:44:60:c0:f7:a3:90:12:ae:73:5c:d6:10:
ff:63:54:17:11:77:b4:67:ed:07:28:ef:c9:e6:1c:
35:91:7e:b5:9f:85:86:0e:a7:34:9d:29:bf:8d:e7:
bd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FF:FC:84:69:CC:1A:1F:9D:8D:7B:84:76:72:F3:BA:E7:D2:E6:74
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145000.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a92e::/32
Signature Algorithm: sha256WithRSAEncryption
64:2c:71:48:e7:f5:76:49:6b:83:33:bd:77:de:fb:6f:10:05:
f8:fc:ae:83:c1:1b:1c:e9:10:b3:3d:f9:af:c2:60:4d:f1:06:
f5:7a:2a:30:f4:5d:d5:43:27:57:76:82:2a:8d:d0:50:29:a4:
52:bf:01:33:35:18:41:d6:ac:03:06:71:61:7f:ca:bf:75:f5:
99:f6:b3:e1:7a:34:be:d8:d0:68:7b:02:bf:04:e3:2b:bf:0a:
58:d8:35:fa:29:de:a1:73:6a:5f:9b:04:0c:92:55:1d:b5:78:
ae:c3:f2:90:e1:fb:e2:a3:e6:e1:ce:3a:ac:9a:27:c5:b2:21:
0a:9a:f5:e9:70:af:5d:82:10:37:ad:3a:b4:39:1d:d1:87:ba:
a3:ba:06:39:f6:e3:15:e2:aa:f1:4b:57:de:17:4b:be:48:65:
1c:12:aa:5e:eb:24:3c:a3:95:fd:58:48:61:32:09:c4:ed:06:
41:ca:39:5b:ec:fa:cf:82:8b:da:93:6a:63:92:84:31:97:80:
2d:58:89:be:b6:e4:10:27:29:b5:4d:2c:d7:38:5f:fc:93:e0:
d2:c1:bb:23:dc:fa:28:20:71:0b:4f:3f:1c:a3:5d:e4:a7:02:
99:ab:f6:c1:34:02:5e:03:c1:d6:08:d9:0e:67:ad:99:2a:ec:
f5:dd:9a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:24 2026 by rpki-client