Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145119.roa
File: AS145119.roa (raw, json)
Hash identifier: NPOGGwiPG5BPq6fgjGctFCFIueo7CSk3J45pimZmSSQ=
Subject key identifier: BD:DC:77:40:9A:17:80:0A:E7:08:8C:67:57:50:88:2F:E5:AA:93:88
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6A682C6FFB95C54297C326AE0493D689952BA3FA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145119.roa
Signing time: Fri 22 May 2026 04:08:19 +0000
ROA not before: Fri 22 May 2026 04:03:19 +0000
ROA not after: Fri 21 May 2027 04:08:19 +0000
asID: 145119
IP address blocks: 240a:a9a5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:68:2c:6f:fb:95:c5:42:97:c3:26:ae:04:93:d6:89:95:2b:a3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:19 2026 GMT
Not After : May 21 04:08:19 2027 GMT
Subject: CN=BDDC77409A17800AE7088C675750882FE5AA9388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:03:f5:0c:18:7c:db:a4:20:79:9c:06:e5:21:
f8:94:8f:24:51:e7:dd:2c:e4:01:c1:67:cf:c3:7a:
e1:43:1f:50:78:ee:09:04:00:3a:5b:73:17:52:c8:
09:a5:65:7c:e4:3e:ec:3c:c8:92:a4:72:da:e1:b0:
0d:8c:44:9f:85:7a:aa:2a:6b:58:a5:69:d3:b3:1b:
39:ac:b7:8d:d9:fe:36:bf:4b:ae:8c:9d:01:ad:f7:
ab:b7:64:a6:76:bf:ca:2c:11:1b:65:f0:34:55:c2:
74:d4:bc:a8:62:4d:a4:f3:e5:ac:e3:fb:4a:83:81:
52:96:fa:b6:cd:a1:62:ba:f6:c0:f5:9e:d6:e2:f2:
e2:ed:5f:59:79:a9:d8:0e:bd:73:d2:25:71:cc:37:
ef:60:06:1e:da:cf:05:f1:05:c4:d0:43:b2:3c:6d:
c1:b9:4c:4f:4f:50:d4:a6:7f:38:ab:e8:0f:ce:6a:
af:57:9f:b3:38:75:77:ec:b2:5c:fb:44:2f:de:97:
84:5a:ba:f6:73:f3:ef:0c:c2:d4:e7:da:b5:27:25:
35:07:60:7c:38:17:0b:4e:8a:d1:2a:47:d4:55:5e:
4c:b0:12:b4:0e:fa:59:07:cb:1f:4f:91:1d:41:7c:
cb:10:48:a4:d3:2e:05:6d:05:69:6c:9a:97:8c:bc:
3b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DC:77:40:9A:17:80:0A:E7:08:8C:67:57:50:88:2F:E5:AA:93:88
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145119.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9a5::/32
Signature Algorithm: sha256WithRSAEncryption
6a:9b:ea:4d:60:73:65:17:f3:df:e5:60:89:b1:a3:9c:91:d6:
d0:99:e9:fe:93:4b:46:12:46:07:5d:a8:b8:15:c2:a9:65:3d:
a4:28:0a:d2:1f:2f:84:2a:2a:45:9e:8b:66:55:8e:1b:a3:7f:
f9:45:70:59:1e:a2:ca:b4:e1:8c:8f:58:6a:f5:9b:b3:1f:91:
f4:6a:3e:63:2d:b6:21:1e:17:9b:19:eb:e7:25:33:a7:db:e9:
44:6c:3a:6c:ca:73:aa:c6:eb:22:2b:11:3a:b8:58:d2:3f:86:
00:3e:97:b2:4f:aa:1c:03:6c:b9:73:5a:73:0a:b2:7e:e4:8a:
cf:6d:f4:d3:0c:8e:e7:b0:fc:b9:50:43:30:00:92:78:9e:fe:
cf:e6:f9:91:6b:5f:8b:01:76:78:fb:c0:bd:98:ec:f4:bf:ca:
7b:d3:ff:62:4c:e1:77:fa:e6:b6:86:a3:ac:79:46:d3:4b:bd:
7e:f1:f5:06:f4:81:5e:6c:88:ed:d2:00:6f:98:3a:cd:72:44:
ac:57:b8:21:86:35:7f:55:a2:f5:71:ab:d3:9f:dd:cd:20:0b:
05:67:e9:ce:d7:44:66:ed:05:d7:22:2d:37:dd:79:5b:a2:8b:
fe:0e:c4:9f:a3:97:23:51:cb:c2:d1:f5:8f:0f:7e:3f:44:c8:
9d:ca:ff:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:56 2026 by rpki-client