Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145053.roa
File: AS145053.roa (raw, json)
Hash identifier: OBjVVs3m6vbNiNl9PtHU5rlawNOHlI8wksgqv+QxVbI=
Subject key identifier: AA:64:4E:44:C2:14:DA:D4:24:46:A7:A5:38:9D:08:46:77:34:26:1D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0855C1A4E6A4D50CE5862A7B0622D6DAC7E67652
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145053.roa
Signing time: Fri 22 May 2026 07:32:29 +0000
ROA not before: Fri 22 May 2026 07:27:29 +0000
ROA not after: Fri 21 May 2027 07:32:29 +0000
asID: 145053
IP address blocks: 240a:a963::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:55:c1:a4:e6:a4:d5:0c:e5:86:2a:7b:06:22:d6:da:c7:e6:76:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:29 2026 GMT
Not After : May 21 07:32:29 2027 GMT
Subject: CN=AA644E44C214DAD42446A7A5389D08467734261D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3c:04:b6:2e:f3:65:9c:8c:2e:48:50:f1:03:
14:82:6d:df:4c:e4:a7:1c:2f:6d:d2:c4:3c:1f:98:
b3:fd:46:bb:ad:fe:c6:0a:82:3c:68:f7:73:8d:3e:
30:55:e4:f4:4b:b6:0e:fb:b1:4a:aa:e2:ec:08:52:
ee:b8:4a:fd:32:23:44:33:bc:b9:59:0d:bf:e8:d4:
a6:51:e0:cc:2d:78:03:fe:20:3e:f7:de:fd:32:2c:
79:29:17:58:27:01:18:6a:26:3d:5b:91:2d:0d:65:
22:5e:bb:f4:81:53:cc:4b:8a:5e:a5:ed:58:41:3f:
ed:48:b7:54:d1:16:93:4c:93:13:e9:8c:b8:32:45:
e8:14:fb:6b:37:4c:f2:4b:15:83:ac:6d:87:92:61:
00:28:21:1c:ce:36:cc:2f:da:c1:2a:d4:54:89:36:
64:21:40:b0:d0:19:f6:bd:56:82:01:9d:ce:f5:c8:
eb:31:72:60:bf:a5:c8:03:f1:e0:6a:fd:b7:99:e0:
7d:66:93:a5:55:ee:8a:e6:33:b3:ad:55:cb:99:a4:
a0:9f:a8:91:0f:d5:8a:22:a9:ec:34:6b:79:86:15:
a7:da:e4:a6:b7:4d:a3:6c:c7:6a:99:8f:71:50:cc:
2a:fc:89:65:01:ee:1e:5b:d2:2e:44:57:1f:b8:3b:
da:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:64:4E:44:C2:14:DA:D4:24:46:A7:A5:38:9D:08:46:77:34:26:1D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145053.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a963::/32
Signature Algorithm: sha256WithRSAEncryption
9d:bc:a6:77:ca:b3:0c:f4:37:47:2c:41:e1:e9:cf:5b:31:1d:
ac:b5:bb:4e:f0:2a:e7:61:52:80:bb:5f:2d:c2:b9:85:e2:ef:
54:70:59:f6:6d:0f:cc:59:cf:aa:7e:6b:08:80:b6:b0:40:ce:
d9:dd:3f:e1:35:f9:62:0c:b8:6e:64:01:12:92:47:66:a3:33:
b4:5c:7b:65:95:ca:cb:b3:01:23:67:8b:cc:0e:f8:bd:e1:e5:
4f:f5:1f:43:3a:d4:52:9c:bb:cc:a0:41:fb:f4:37:a3:67:78:
0f:cb:b5:df:c3:98:f8:65:75:ca:71:b2:9f:34:ee:35:0a:b7:
3b:ad:af:eb:bc:38:c9:24:1d:83:dc:5a:22:2a:a1:f7:2e:77:
81:d2:4f:fc:28:eb:72:31:59:1a:80:3f:0f:67:4a:f6:da:86:
c4:03:51:65:67:a3:7a:c3:1a:ef:33:fa:39:4d:1d:77:aa:0e:
33:86:6f:19:11:c3:1d:9b:f6:ed:a9:44:11:24:50:d1:fb:1b:
bc:69:20:aa:ee:2f:15:4d:e2:18:f0:a4:d7:ec:ee:c6:97:e5:
6b:e0:25:21:c1:90:67:ac:3b:e6:5d:f6:ef:d9:57:36:59:4a:
b4:7a:9b:2a:e6:68:6b:9c:8d:13:9c:51:a6:5f:d5:d0:df:e3:
21:12:48:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:49 2026 by rpki-client