Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145045.roa
File: AS145045.roa (raw, json)
Hash identifier: ULL5SlV/TG2QWdRFcJQ6nVOvqvDtY0UcwokrMpIaM7A=
Subject key identifier: C9:EE:C8:39:88:15:5E:88:B8:32:13:29:80:56:67:98:9D:6A:18:66
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 10F3A03695EA1DE7DBD439690F460F46AADBB6A4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145045.roa
Signing time: Fri 22 May 2026 02:48:09 +0000
ROA not before: Fri 22 May 2026 02:43:09 +0000
ROA not after: Fri 21 May 2027 02:48:09 +0000
asID: 145045
IP address blocks: 240a:a95b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:f3:a0:36:95:ea:1d:e7:db:d4:39:69:0f:46:0f:46:aa:db:b6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:43:09 2026 GMT
Not After : May 21 02:48:09 2027 GMT
Subject: CN=C9EEC83988155E88B8321329805667989D6A1866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:4a:c3:81:1a:51:ff:75:6e:98:8f:91:08:
3f:86:f1:7a:9e:ad:d1:8c:67:57:cf:72:c0:a9:87:
56:db:4f:29:fc:fa:a4:c5:24:d8:3d:4c:46:34:fa:
ac:88:81:86:2a:3c:65:17:c2:ad:50:02:ac:76:70:
b8:37:92:e5:f3:76:b5:36:47:2a:ea:df:a2:4a:e1:
47:5c:84:83:fc:8a:7e:40:5f:a9:dd:5a:70:26:7e:
e0:9c:2e:0b:85:bf:b5:3d:51:bd:c7:4a:97:e1:f6:
0b:c4:5e:40:00:3c:6d:35:3c:38:df:c6:34:bb:1e:
8c:a5:e7:26:c3:d7:86:fb:fd:6f:59:a6:82:6e:9a:
50:bb:36:63:f6:b4:dd:b0:6d:f7:9c:b7:0b:0d:a2:
36:a6:e1:bd:73:b6:64:ef:72:c2:be:9a:89:da:9d:
b1:44:bf:54:eb:84:71:17:c6:c8:f3:60:df:92:68:
05:83:31:2c:b7:71:3a:f1:82:70:8c:39:4c:57:93:
c7:a5:0b:e2:46:7e:ae:7f:76:9f:62:84:a4:f2:71:
cf:42:73:65:0c:7c:5f:5b:d2:77:78:be:e5:14:51:
ec:80:21:af:9e:08:64:d1:62:f1:52:49:16:d1:a7:
e4:77:ee:52:3b:0c:d2:dd:19:5a:6a:d3:58:be:c0:
a3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EE:C8:39:88:15:5E:88:B8:32:13:29:80:56:67:98:9D:6A:18:66
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145045.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a95b::/32
Signature Algorithm: sha256WithRSAEncryption
45:7e:32:5c:e4:c2:95:cc:dc:66:4a:87:83:f6:5e:88:8c:f4:
c6:83:b0:67:fe:cc:03:49:26:b8:ec:e1:77:6a:4e:ff:2a:b5:
ab:75:71:c7:f2:42:72:73:b0:81:bc:f9:a0:87:22:f0:b2:49:
3e:d6:4e:ba:17:ce:02:1a:0b:af:07:db:dd:73:06:f9:fc:01:
00:f7:2c:85:6c:bd:e4:86:9c:6b:49:14:0f:ac:4e:58:f9:e8:
40:c1:a7:8b:0c:41:1f:5f:55:54:29:3a:3c:e8:9e:df:08:a4:
97:ee:94:a4:39:0d:90:b4:a6:74:69:39:42:67:ef:08:ae:8b:
f7:23:21:42:ee:51:8c:80:75:52:17:7d:bf:c3:9b:f8:0c:a3:
ff:4b:8e:6f:d8:7b:4f:4d:cd:8b:5f:44:b7:d8:c7:ae:ae:77:
45:5f:61:da:aa:6f:33:bf:18:1b:75:38:36:b4:56:3f:2d:83:
cb:c6:2e:f4:f5:82:13:ef:55:4c:69:1f:d5:e4:00:18:f9:09:
3e:43:75:cf:46:94:18:9e:a1:aa:64:94:16:0d:72:9b:e7:32:
c1:3b:bd:b6:0e:7c:ba:ac:47:da:fb:f6:a4:a3:c4:60:eb:34:
23:8e:57:da:61:8c:77:7f:17:83:18:51:c9:66:65:8d:42:da:
6e:cc:03:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:55 2026 by rpki-client