Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145003.roa
File: AS145003.roa (raw, json)
Hash identifier: gIoRAZV+rWvChcltRoAXo1TVymii8PPJs1rQmUtH3p0=
Subject key identifier: 08:0D:BC:8C:69:67:60:4D:E3:DC:05:8D:91:FD:66:2D:78:EC:F3:84
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 71BC858F3A85E4C2BB4DD17D7CAF21AD7022331F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145003.roa
Signing time: Fri 22 May 2026 04:08:07 +0000
ROA not before: Fri 22 May 2026 04:03:07 +0000
ROA not after: Fri 21 May 2027 04:08:07 +0000
asID: 145003
IP address blocks: 240a:a931::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:bc:85:8f:3a:85:e4:c2:bb:4d:d1:7d:7c:af:21:ad:70:22:33:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:07 2026 GMT
Not After : May 21 04:08:07 2027 GMT
Subject: CN=080DBC8C6967604DE3DC058D91FD662D78ECF384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:43:fd:b2:00:1a:03:dc:8d:4f:73:47:7f:02:
43:f1:7f:ae:9d:d6:a3:34:64:7e:ed:36:31:ce:f5:
71:3b:9b:bc:66:fe:23:52:44:1b:59:8d:a1:5d:c1:
f1:48:57:fa:f8:05:4c:d5:67:78:18:cd:bb:b7:e5:
4e:71:fa:31:93:68:1f:3f:cb:c7:15:73:06:7b:a2:
09:8e:ae:74:69:8a:fa:52:af:cc:de:56:31:03:bb:
23:12:a4:a8:43:d0:1c:f3:a3:f6:05:b4:83:2f:02:
21:41:15:de:ce:0b:01:0b:8e:8c:93:76:5a:4e:64:
88:8b:95:49:a6:2b:d7:7e:8c:fa:b7:f9:49:aa:df:
a0:8d:81:3c:92:13:5a:02:14:c5:fc:fe:f7:bb:49:
09:05:28:4b:d3:94:ac:47:d9:ea:fb:68:24:66:4a:
da:9a:4d:b1:e2:3e:c6:75:9d:78:27:38:67:0e:0c:
58:95:b7:dc:2d:eb:80:ba:5a:b9:25:2d:ff:6a:2a:
ec:46:35:dd:49:c6:6b:57:89:73:09:12:86:63:e8:
2b:41:5a:fc:9c:eb:88:2c:ec:0c:b5:8e:36:07:31:
b8:51:3f:d7:84:02:ba:26:f7:91:a3:da:ae:54:c7:
b8:b6:a0:57:2e:63:d9:44:bb:0d:df:82:0b:c0:73:
d2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0D:BC:8C:69:67:60:4D:E3:DC:05:8D:91:FD:66:2D:78:EC:F3:84
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145003.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a931::/32
Signature Algorithm: sha256WithRSAEncryption
b3:98:3c:97:eb:7d:23:91:53:60:c2:80:e3:db:5d:06:fa:b2:
0e:74:2d:79:e2:69:c9:5d:9d:69:2c:15:4d:d8:ca:5f:67:c9:
ed:96:78:62:7b:08:f7:4c:8b:ca:ff:6c:91:8a:f6:f9:85:6c:
8c:3d:c5:45:94:41:98:6b:4b:98:63:31:19:fb:ff:da:ce:32:
d8:bd:e2:81:dc:5a:dd:18:cd:84:42:2e:89:91:3f:35:68:49:
98:9d:74:b3:04:e6:ad:95:19:d6:bc:a7:0f:2e:86:0c:10:18:
17:1b:2e:11:54:cd:a6:d7:7e:ab:22:0e:92:e8:48:3b:a8:03:
a3:9b:09:d4:dc:da:4f:13:91:c2:41:77:07:6f:02:1e:4f:a4:
63:33:a9:b5:b5:c9:89:b4:d5:52:a5:3f:04:e1:ed:2c:2c:81:
1f:db:02:c5:31:73:60:42:4b:03:92:58:0a:d5:64:de:57:c5:
b1:5d:ae:84:be:b6:8d:20:0d:41:9f:85:3b:b4:a7:87:08:68:
4a:70:fc:c4:f6:f4:3f:a4:84:92:4f:0b:5d:ca:42:c5:fb:48:
45:6e:8a:10:ed:74:b3:e9:3d:f9:02:11:93:1e:67:c4:d9:32:
cd:df:ac:7f:6a:32:57:cc:d9:6a:bc:76:4c:27:65:a2:27:6d:
56:4f:95:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:03 2026 by rpki-client