Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145032.roa
File: AS145032.roa (raw, json)
Hash identifier: uR/riaQ+phEIvd2HMGhyA4JzmYj7323RWjgrEAvYMzE=
Subject key identifier: 2E:2A:07:92:82:45:7F:CB:2B:E7:06:65:52:8A:88:77:D6:2B:5C:E3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 713B305A5BB64E341502FC5800E4B539793FE934
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145032.roa
Signing time: Mon 25 May 2026 01:51:03 +0000
ROA not before: Mon 25 May 2026 01:46:03 +0000
ROA not after: Mon 24 May 2027 01:51:03 +0000
asID: 145032
IP address blocks: 240a:a94e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:3b:30:5a:5b:b6:4e:34:15:02:fc:58:00:e4:b5:39:79:3f:e9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:03 2026 GMT
Not After : May 24 01:51:03 2027 GMT
Subject: CN=2E2A079282457FCB2BE70665528A8877D62B5CE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c9:fb:36:a2:74:7e:a1:c2:50:35:ef:11:c1:
04:ad:6d:11:f0:61:30:ed:e5:98:4f:dc:a2:6e:60:
98:e0:2e:47:2f:43:50:06:e9:27:fc:aa:ec:cc:17:
b7:ad:38:18:65:1e:e1:b2:86:92:42:80:ec:e0:3d:
d8:5e:06:6c:d8:57:58:78:69:d4:b7:dd:68:5b:6a:
84:0d:0d:cc:7c:0e:3b:9e:1a:bb:9e:14:75:a4:11:
fe:30:46:82:f2:02:75:21:85:61:d7:84:73:8d:d4:
e5:26:31:ce:b9:46:aa:79:c0:c6:bd:a3:95:9b:55:
12:1b:1e:b5:2c:2e:37:42:3b:3e:1c:58:de:3e:af:
5b:37:de:18:d6:08:a7:b3:7e:17:6c:06:79:b5:2c:
55:5b:fe:3d:e9:22:45:cd:da:49:e5:f8:20:6e:46:
de:8c:31:73:1f:64:fb:bb:03:03:b3:79:81:2c:5c:
4c:22:bb:26:f3:58:91:4a:73:97:48:81:b3:a0:64:
00:dc:07:cf:4e:47:6c:30:f7:8f:69:98:af:69:e8:
0f:52:31:a6:fd:b7:34:48:e6:4c:7e:2a:6d:8d:fa:
70:05:82:b1:aa:fa:4a:b7:92:6a:c7:5b:1e:e9:a5:
91:4d:14:c9:6f:72:a8:03:f9:95:6d:8e:e4:62:57:
5e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2A:07:92:82:45:7F:CB:2B:E7:06:65:52:8A:88:77:D6:2B:5C:E3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a94e::/32
Signature Algorithm: sha256WithRSAEncryption
36:d5:88:41:24:35:4a:72:41:b1:50:56:0c:3f:96:b0:3c:1e:
33:0e:77:0f:eb:72:89:69:bd:05:93:4e:fe:f9:d1:59:53:7d:
7a:cf:97:66:c2:cc:7f:de:a2:b6:8c:64:37:96:96:f3:50:26:
76:5e:8d:18:1e:a2:fe:13:24:61:db:64:c9:8f:1a:3a:05:fd:
de:9f:3f:bf:46:1c:9d:7c:71:65:c6:5a:06:eb:5d:7f:df:cd:
d4:2b:b5:d7:7f:a4:8e:59:24:3a:98:e6:5c:99:6a:cb:5f:6c:
ee:2f:2b:04:a7:b1:c1:09:77:73:e2:d9:53:4a:4b:3d:4c:61:
f8:b8:86:e4:ce:72:a8:96:11:04:bc:93:19:04:ce:78:4b:04:
e2:ff:74:88:c2:71:df:b8:de:68:a7:3c:44:9d:4e:5d:8f:d3:
fc:85:19:e9:c8:16:f8:9e:87:54:22:42:44:97:d9:41:1c:e8:
86:ae:35:d1:a2:bb:9a:2e:8f:92:d1:31:35:28:cc:b2:d5:5e:
72:4d:dc:76:c4:58:bf:96:b1:b8:15:0d:de:dd:3a:13:85:2f:
bb:a0:0c:b3:be:47:43:83:c0:27:41:f0:ee:6e:7f:89:b3:db:
26:0a:06:df:a2:fd:16:91:84:79:c9:21:98:6c:18:52:73:5e:
97:d5:c0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:11 2026 by rpki-client