Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145048.roa
File: AS145048.roa (raw, json)
Hash identifier: 2B/mGUMELfO/ZSxAanlIWTD75cOEuQYj4ARpYTQgXAY=
Subject key identifier: 17:82:BD:97:72:8C:05:E4:88:68:1E:76:67:6F:E8:9E:C2:12:B9:97
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7F3FFB55083D14186451E84EAF809B95D960D55B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145048.roa
Signing time: Fri 22 May 2026 06:58:40 +0000
ROA not before: Fri 22 May 2026 06:53:40 +0000
ROA not after: Fri 21 May 2027 06:58:40 +0000
asID: 145048
IP address blocks: 240a:a95e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:3f:fb:55:08:3d:14:18:64:51:e8:4e:af:80:9b:95:d9:60:d5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:40 2026 GMT
Not After : May 21 06:58:40 2027 GMT
Subject: CN=1782BD97728C05E488681E76676FE89EC212B997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:24:7e:16:b5:77:a8:bc:12:12:1b:5b:e1:
23:57:93:2b:fe:78:2d:2a:ac:58:46:2c:8d:ea:8a:
cb:4e:7d:d1:e6:13:42:89:76:18:71:8d:7c:29:7d:
22:47:fb:3f:e8:fd:9b:f8:b5:d8:44:3b:dd:e1:f6:
0f:3c:9b:51:4e:8b:e7:1f:34:54:11:56:3a:22:14:
aa:4e:31:e2:04:b6:f3:68:76:67:7b:2e:45:17:6b:
1a:29:e3:80:14:72:0e:78:65:1b:5f:58:95:55:80:
d5:ce:41:cf:cf:8b:11:b5:7d:8a:52:f4:63:b0:d6:
50:fb:32:50:7c:d1:84:4e:b5:c3:6c:18:62:78:a8:
c9:2d:16:14:10:64:9a:e0:03:a2:4c:b5:07:93:b1:
25:07:2e:68:d7:8b:be:4b:ce:48:06:97:25:3d:74:
93:4a:82:14:dd:6a:59:bc:a3:98:93:db:1e:f6:5d:
9e:f5:40:5a:96:c7:12:fe:91:01:ea:43:50:d5:56:
f5:53:b0:64:75:e0:a5:b3:34:84:b6:ff:ba:8a:f2:
12:3e:3f:17:2f:3f:91:8d:9e:8a:ba:7a:d6:56:6d:
86:21:00:29:6b:d0:0e:66:aa:3b:89:66:5f:5c:c6:
db:3e:8b:6f:15:96:42:44:84:61:f7:5f:f6:31:4b:
e7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:82:BD:97:72:8C:05:E4:88:68:1E:76:67:6F:E8:9E:C2:12:B9:97
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145048.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a95e::/32
Signature Algorithm: sha256WithRSAEncryption
06:4a:5f:2c:9f:8c:f7:c2:18:d3:04:23:65:25:33:d2:8f:78:
e5:50:72:a9:a0:f2:f8:c4:50:56:39:e8:7a:3e:a2:27:e2:55:
d1:b5:78:55:d5:35:b8:e4:b4:0a:d4:46:51:43:5c:3a:a2:b2:
e4:0a:39:21:69:d1:20:f5:22:ed:71:05:58:fb:09:68:33:30:
b8:1f:1a:e3:19:5c:a1:6a:ce:66:66:d5:92:8c:68:c5:e7:3c:
7f:15:b3:73:2f:39:f0:6b:b6:39:f9:c8:00:b5:af:ad:53:c6:
f3:33:11:60:e6:76:29:42:e8:d9:45:80:2c:7f:6c:f5:15:81:
35:13:a5:99:89:9d:32:9e:5c:96:30:b8:c0:cd:df:c0:3b:cd:
d7:fd:04:68:22:e0:84:57:4d:aa:03:d5:ff:2c:ef:56:b5:27:
75:4a:50:f4:07:5d:59:62:d7:de:1c:74:27:8b:84:cb:81:7b:
f7:fe:03:e8:eb:7a:90:78:ee:ee:7f:35:29:65:9c:69:92:45:
21:0a:48:9b:39:b4:02:45:f9:37:55:51:5a:47:0d:a7:99:9c:
c9:e3:89:64:fd:94:93:a5:23:a7:37:ad:26:2c:e5:1d:97:c6:
c6:0c:ba:51:b6:50:a4:ce:8b:db:2a:ea:c8:1b:57:67:df:bd:
50:e5:af:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:31 2026 by rpki-client