Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145059.roa
File: AS145059.roa (raw, json)
Hash identifier: bLYMEbhYEDfN1RFLIhWpeWmracVSwg33+mMqzoVVrRo=
Subject key identifier: 53:00:A6:F7:17:6E:42:BF:C6:5F:5D:B4:A7:0C:F7:AE:DF:81:A1:24
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 76D139F0899A031A69341A8643098D9D077CBC86
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145059.roa
Signing time: Mon 25 May 2026 02:22:29 +0000
ROA not before: Mon 25 May 2026 02:17:29 +0000
ROA not after: Mon 24 May 2027 02:22:29 +0000
asID: 145059
IP address blocks: 240a:a969::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:d1:39:f0:89:9a:03:1a:69:34:1a:86:43:09:8d:9d:07:7c:bc:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:29 2026 GMT
Not After : May 24 02:22:29 2027 GMT
Subject: CN=5300A6F7176E42BFC65F5DB4A70CF7AEDF81A124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0d:85:91:be:19:91:b3:2d:d7:f4:22:32:80:
5e:44:18:81:02:b4:ec:9c:27:08:d4:87:81:1a:33:
0b:2c:99:fa:58:66:19:1a:91:e5:86:03:c3:37:72:
14:a9:1f:9a:0a:f7:a6:08:80:9a:b4:17:2f:6f:3a:
ab:34:d9:79:42:5b:eb:bf:aa:79:ec:71:8a:2b:e6:
6b:5d:a1:7d:00:74:5d:91:5d:fb:01:e6:02:cd:55:
80:c2:3b:2a:05:7c:6a:48:a7:00:15:d3:8a:99:65:
52:5c:c0:75:73:60:6c:ef:34:2a:35:08:be:c5:34:
6f:d7:fb:2b:bf:4d:7f:6b:6b:d7:ed:a8:c8:67:05:
d1:fa:b0:a4:64:e5:03:cc:65:ab:e2:8e:d6:2a:0a:
fc:d4:a4:e1:1f:3c:90:d6:f3:bb:ff:54:7c:1e:95:
4f:c5:74:f4:02:ca:20:ae:2e:0c:60:a0:22:8e:56:
1d:53:f8:64:7a:b0:63:27:fd:64:cd:89:6b:bc:a6:
c3:cb:ed:15:f7:5f:bf:4b:93:fe:c3:dc:b0:5b:b0:
fe:1c:45:0f:b5:c5:1b:a0:66:64:24:9c:c9:18:99:
d1:d6:78:78:9c:0c:42:91:0a:e5:a3:6b:d3:d1:71:
53:ca:fb:bc:73:7d:13:93:37:ce:3b:39:9c:f8:28:
78:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:00:A6:F7:17:6E:42:BF:C6:5F:5D:B4:A7:0C:F7:AE:DF:81:A1:24
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145059.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a969::/32
Signature Algorithm: sha256WithRSAEncryption
94:e2:1a:10:c4:f5:a1:39:8e:9f:af:8c:2c:ae:d8:7b:12:e7:
0e:6f:84:75:e5:96:51:0a:4e:2b:0c:d3:24:b8:18:83:31:9e:
94:83:0b:7f:b1:52:de:99:01:91:78:06:b5:26:4f:8a:b1:47:
73:70:05:f6:0d:df:1e:62:2f:42:93:d5:1d:46:4d:f1:ab:1c:
1f:97:a8:20:f0:e9:5f:9a:7d:67:78:db:44:91:49:5f:10:17:
36:8f:de:4f:17:36:35:14:ad:b0:24:d4:a3:54:dc:eb:12:5e:
4b:a7:c7:df:8c:aa:c8:c5:ac:ac:9a:b8:ee:7a:dd:12:7c:a7:
42:b8:a8:aa:fb:67:ea:88:8b:c3:9d:58:78:28:b9:28:9e:5d:
fd:b3:50:c8:5e:b6:da:0b:e1:9d:01:15:23:d7:74:86:c4:e7:
e6:de:22:5d:4e:6b:59:f3:c9:87:f8:78:8b:9f:bc:2c:0a:ed:
69:b1:8b:28:09:0d:a1:61:87:c7:b1:ec:e2:f4:7c:34:f4:21:
10:01:56:63:ba:c6:fb:24:ae:5e:2c:56:24:50:4b:b4:38:d8:
d4:49:9c:f5:08:af:41:7d:c8:1c:d6:63:71:93:28:dc:7c:2b:
b6:05:35:77:b3:45:f2:19:c6:e5:f3:08:87:06:3a:26:4a:c6:
ce:8a:a3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:44 2026 by rpki-client