Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145121.roa
File: AS145121.roa (raw, json)
Hash identifier: CR95EQltYUY3kPsDAFpKHMf+VRevssm+BZIwqXCbTGE=
Subject key identifier: B3:A1:2A:51:35:97:E0:AA:30:63:93:6B:D7:FA:E8:A1:C9:1D:91:95
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0A7BD1176C2E4D1E259B5202F7F34AF7F4BD7099
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145121.roa
Signing time: Fri 22 May 2026 07:08:39 +0000
ROA not before: Fri 22 May 2026 07:03:39 +0000
ROA not after: Fri 21 May 2027 07:08:39 +0000
asID: 145121
IP address blocks: 240a:a9a7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:7b:d1:17:6c:2e:4d:1e:25:9b:52:02:f7:f3:4a:f7:f4:bd:70:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:39 2026 GMT
Not After : May 21 07:08:39 2027 GMT
Subject: CN=B3A12A513597E0AA3063936BD7FAE8A1C91D9195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0f:9a:0f:36:ce:6d:b0:51:17:01:e6:64:a6:
ca:2a:06:73:b8:54:c3:98:22:69:25:e7:1c:b0:b6:
99:41:8e:29:25:8d:67:d9:fd:1f:e4:61:13:78:9b:
66:70:aa:85:dd:73:e8:2a:a0:01:7b:93:09:df:80:
8f:28:24:78:e2:9f:ca:b1:c2:85:69:cd:20:8b:0e:
8b:01:4a:25:b0:ad:60:00:e7:e7:95:52:af:a8:9d:
17:27:23:0a:3e:77:ac:6e:3e:6c:49:39:f2:a1:fa:
fc:db:66:72:d2:a7:8c:1e:07:fa:bf:3f:4f:f6:93:
0b:85:cf:03:f1:ae:b3:7d:40:69:72:f1:7d:e7:3c:
21:d8:1e:4e:e0:6a:7a:f8:82:8b:d5:b8:d5:7f:9e:
c7:32:46:bb:3e:56:99:0d:12:4d:1a:f6:8c:ad:2d:
9d:58:8f:5e:79:3a:75:b9:1c:0f:1c:4d:ee:d5:3d:
ad:db:2d:c4:ac:7a:e9:e2:92:e2:3e:b2:0f:71:90:
13:ff:cc:51:5b:18:99:59:1c:f0:7a:e1:ae:1e:86:
b2:f3:34:9b:ab:ee:bc:2d:90:4a:63:c0:72:1b:c2:
61:63:30:4c:a3:a0:35:eb:c2:37:58:12:dd:48:b7:
7c:57:2e:45:b0:a6:d8:66:b5:f2:fc:3f:73:83:f6:
5a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A1:2A:51:35:97:E0:AA:30:63:93:6B:D7:FA:E8:A1:C9:1D:91:95
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145121.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9a7::/32
Signature Algorithm: sha256WithRSAEncryption
35:73:e8:9c:25:9b:52:f8:31:4b:8f:76:3c:e9:86:c4:6f:10:
61:bb:cc:44:aa:9d:d9:67:79:76:20:77:bd:a4:de:2f:a3:5e:
4e:66:ed:6a:88:a1:43:81:b2:34:ed:c5:8e:cb:13:2b:9b:ef:
ec:d3:ce:1d:18:0d:cb:6e:2e:7c:e7:15:67:b7:18:a7:69:c9:
e9:84:b3:0a:ee:50:b5:a3:65:da:13:20:e0:49:5f:13:43:90:
d5:e4:7a:bc:da:1c:fd:b6:21:c5:66:b8:38:ec:9f:61:f6:9e:
28:39:91:c8:ae:f8:62:27:00:2b:3f:71:22:28:11:97:cf:b2:
04:49:20:76:63:f7:e0:70:99:e7:e7:53:a3:e1:82:43:07:80:
c9:f5:c9:b9:5e:ee:db:07:20:5c:1d:59:4b:c4:8f:33:d2:02:
7d:eb:ed:31:ba:fd:10:5f:50:32:3a:b7:dc:ad:02:66:5a:78:
b4:2d:e2:bf:3c:72:17:d0:7e:16:e9:66:ce:0d:36:c1:2d:a2:
87:1d:7d:b8:6e:51:5a:9e:69:b7:9e:ef:66:2e:47:e7:cd:01:
40:fd:4c:4b:b5:a9:9d:7b:ac:45:fa:07:ec:6c:ec:b2:cb:53:
8e:13:76:0c:4f:e1:f0:2b:63:f9:5d:d0:7a:fb:d6:87:6a:df:
07:24:54:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:49 2026 by rpki-client