Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145041.roa
File: AS145041.roa (raw, json)
Hash identifier: sTiHGQ96BSGp6jClGrCf2JKKxcsuQRGvo+qOy3a/dlc=
Subject key identifier: 66:95:F1:6E:A8:30:92:36:B7:FA:AC:96:D5:FC:27:D2:8F:D2:13:3D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 65F291DE6E7A4B12425377444A3CD22A44FE0004
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145041.roa
Signing time: Mon 25 May 2026 01:38:29 +0000
ROA not before: Mon 25 May 2026 01:33:29 +0000
ROA not after: Mon 24 May 2027 01:38:29 +0000
asID: 145041
IP address blocks: 240a:a957::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:f2:91:de:6e:7a:4b:12:42:53:77:44:4a:3c:d2:2a:44:fe:00:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:29 2026 GMT
Not After : May 24 01:38:29 2027 GMT
Subject: CN=6695F16EA8309236B7FAAC96D5FC27D28FD2133D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:53:19:eb:00:b5:ee:14:4b:8f:e3:6a:0d:
00:21:21:ab:64:69:bc:92:d7:92:79:82:f4:97:4e:
46:24:eb:d2:5c:e6:2e:d3:67:34:59:72:39:9e:eb:
c4:f5:df:a1:98:7a:c5:4b:e0:3f:73:94:62:66:f9:
8b:29:3f:f1:9c:0a:2a:1d:b2:1c:a2:2a:a1:02:b8:
ea:b9:8f:bb:c0:45:ff:00:b7:f9:dc:55:c4:1c:b5:
23:d7:b9:8c:48:77:31:93:7b:6f:29:d2:dc:ab:66:
9a:e3:45:f4:e2:bc:e2:c9:9f:3e:ab:ea:f9:1f:8e:
4d:29:60:6c:15:c3:b1:bd:9a:e1:3c:a0:21:ad:73:
a9:2c:3b:49:0c:f0:69:f2:a0:4f:18:d1:29:29:db:
a0:7e:62:78:1a:3c:cb:d9:89:87:1c:e2:85:ee:c4:
e6:7a:8d:3e:ea:f7:e5:54:e8:5d:4a:c7:9e:ab:2a:
8b:0f:fa:c5:bb:7c:de:08:73:a6:d6:e7:37:ef:b1:
0b:6f:43:4b:57:f7:1e:8f:10:6f:af:3a:a4:95:c4:
b3:4b:8f:7d:ca:bb:91:ca:9e:e2:af:70:4c:6a:13:
8e:4b:a1:ba:74:b5:78:93:e5:2e:00:5d:dd:0e:77:
23:29:e6:45:18:8c:2d:d0:66:83:3f:56:b9:2d:8d:
e7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:95:F1:6E:A8:30:92:36:B7:FA:AC:96:D5:FC:27:D2:8F:D2:13:3D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145041.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a957::/32
Signature Algorithm: sha256WithRSAEncryption
7e:76:96:91:45:aa:e7:37:a1:bf:e7:63:b9:55:a6:f6:ad:05:
54:cc:71:78:20:68:4b:ed:9a:54:b4:e0:e9:b6:ce:77:2a:0b:
eb:11:62:7f:9c:a4:99:f5:99:06:a4:54:84:bc:bf:22:78:74:
20:87:09:8c:6b:44:1f:67:05:ca:40:ab:8a:9e:73:d1:99:6d:
1d:c0:e2:f2:f6:de:2c:b5:d1:7b:19:f8:f6:2b:d9:43:c6:72:
f3:49:0a:4d:fe:b6:48:f9:0c:bc:1b:af:5f:5c:60:fd:d4:cd:
0d:7c:f5:1b:bd:cd:92:d9:95:08:2c:20:7e:38:0d:1c:85:aa:
9c:b5:15:ca:5f:d1:2b:26:c1:52:10:49:f8:28:2b:c5:1f:ae:
2d:fd:72:e6:a9:bf:64:a8:d7:21:bd:6c:21:c4:8d:1a:c7:5f:
f8:13:c5:13:90:6d:d3:5e:f9:f3:81:f0:74:68:ce:cb:77:7f:
e6:a7:30:22:68:90:0a:1c:d4:fd:11:90:38:33:8e:1f:4c:c3:
86:43:25:0f:84:c7:0e:f0:fa:92:88:59:42:be:cf:e2:24:a8:
9b:13:31:cf:68:44:48:2a:25:1c:64:c3:9b:e1:c8:ef:83:57:
be:b9:4c:0b:7b:08:f8:fe:a4:13:aa:75:c8:2c:86:fb:f2:e0:
3a:88:f3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:53 2026 by rpki-client