Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145017.roa
File: AS145017.roa (raw, json)
Hash identifier: wZo17UUEh5/3Xq+9QXfQ8jRvP1WWQbdKqCcrSn91R98=
Subject key identifier: 53:AB:2D:3D:04:6F:95:C3:A2:AD:9D:4C:9A:D1:AF:22:A5:08:60:66
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7D4E225917AA11830574A39ADD094FA3D6CFB7AE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145017.roa
Signing time: Fri 22 May 2026 06:27:34 +0000
ROA not before: Fri 22 May 2026 06:22:34 +0000
ROA not after: Fri 21 May 2027 06:27:34 +0000
asID: 145017
IP address blocks: 240a:a93f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:4e:22:59:17:aa:11:83:05:74:a3:9a:dd:09:4f:a3:d6:cf:b7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:34 2026 GMT
Not After : May 21 06:27:34 2027 GMT
Subject: CN=53AB2D3D046F95C3A2AD9D4C9AD1AF22A5086066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f0:d8:39:6f:b2:7b:91:7b:24:4d:eb:72:f2:
f4:ea:f0:0a:ae:4f:9f:8b:e8:6f:8b:59:cf:16:a6:
fe:6f:64:db:f6:6e:f4:89:8f:84:14:63:66:3b:77:
ee:74:96:1a:8b:f0:6f:a8:bb:85:75:30:e8:86:8a:
0f:7b:71:d6:d6:ae:4a:50:78:8d:6b:7d:ee:82:09:
62:a6:20:71:55:22:c4:e9:c9:f2:c6:ea:d1:4b:6a:
6c:43:6c:6f:36:40:0e:c5:9e:60:d8:04:58:09:3c:
a6:f0:64:7c:6d:7d:57:56:2d:f9:2d:74:0b:fc:5c:
97:dc:cb:8c:06:73:e0:50:cc:4d:7c:e6:31:c2:a9:
a9:e6:98:61:b8:d1:99:f1:7c:dd:b6:66:d4:93:ce:
c5:02:d6:d5:6e:f0:55:0d:9f:eb:0c:0c:6b:07:dd:
b7:c5:b0:13:18:ca:99:be:7b:2a:06:56:df:2d:a3:
4b:47:ee:18:63:e8:76:e6:d7:27:21:59:81:1e:b8:
59:1a:4e:41:41:72:f1:e4:d1:31:a7:9a:58:f8:ca:
cf:27:02:ff:23:85:c1:17:5c:d7:aa:98:09:9a:fd:
aa:86:90:64:6b:23:47:d5:f9:70:cf:a5:4a:0f:1f:
37:9e:0d:6a:01:fb:cf:d5:f7:43:02:19:18:e6:b3:
eb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AB:2D:3D:04:6F:95:C3:A2:AD:9D:4C:9A:D1:AF:22:A5:08:60:66
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145017.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a93f::/32
Signature Algorithm: sha256WithRSAEncryption
60:c8:e2:7c:5a:12:e6:57:da:a8:37:8d:1c:6b:7f:65:16:0a:
78:14:e4:c2:90:a0:61:4d:1f:79:a7:24:59:3a:7a:02:28:6a:
4e:92:01:58:a4:1e:fd:00:d9:25:42:de:02:55:0c:3b:e4:50:
1d:b1:cd:7b:5f:d3:82:6f:ef:a2:a8:58:f7:05:6f:c1:89:ad:
3f:e3:eb:1d:7b:0f:f9:64:5f:9e:8c:4b:c6:fa:13:69:83:2a:
5c:2d:ee:5f:1c:dd:29:86:2c:fe:a9:4f:33:68:32:96:e4:cf:
7e:ac:d9:ae:d3:33:01:a3:19:3c:dd:e4:1b:85:db:ff:9b:82:
96:e7:21:46:06:e5:ba:f4:fd:4d:d2:59:0b:e9:1b:79:51:95:
ca:10:a3:0a:59:eb:3d:1a:06:c6:59:6e:13:92:c2:13:bf:0b:
1e:29:65:ce:c1:06:ac:ac:6a:d8:79:06:70:87:de:d6:e6:6a:
06:33:6f:c7:d6:c9:56:5e:5a:18:19:4f:bd:39:6c:87:d9:71:
83:c5:2a:87:6a:2b:8a:41:bf:76:a1:59:45:19:34:f1:4a:eb:
a2:c3:2a:b1:67:28:5a:3b:5d:51:f8:1c:2c:d6:99:95:74:65:
c0:81:aa:6a:86:6a:bd:65:6a:a3:dd:42:0e:0d:9e:bc:6f:58:
cc:66:05:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:22 2026 by rpki-client