Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145123.roa
File: AS145123.roa (raw, json)
Hash identifier: 7M8koVMPPPHtqxMsk479JIdh0M/hWLlU+pHiG3hpbFs=
Subject key identifier: E7:3C:0A:34:DD:C5:96:FE:AC:2E:A3:02:34:D4:D9:88:A7:36:D5:39
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6BFC3ACA4026EF59C01EC016D3468520B477AAE6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145123.roa
Signing time: Tue 26 May 2026 03:16:46 +0000
ROA not before: Tue 26 May 2026 03:11:46 +0000
ROA not after: Tue 25 May 2027 03:16:46 +0000
asID: 145123
IP address blocks: 240a:a9a9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:fc:3a:ca:40:26:ef:59:c0:1e:c0:16:d3:46:85:20:b4:77:aa:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:46 2026 GMT
Not After : May 25 03:16:46 2027 GMT
Subject: CN=E73C0A34DDC596FEAC2EA30234D4D988A736D539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7a:3a:04:28:e9:b5:5d:43:ff:4d:39:22:e4:
34:c9:46:47:98:e1:d0:b3:18:4c:b1:8e:ed:51:a4:
f9:00:20:44:69:88:d8:8b:8f:90:41:81:02:bc:95:
be:1a:52:12:ae:cd:91:5d:dd:43:3d:17:c3:fe:f9:
2c:1f:3e:d8:51:b6:42:af:eb:dc:11:0c:6b:76:bb:
5e:8f:4d:13:73:f6:e8:a5:f8:6a:9a:74:54:c1:08:
61:0e:2a:2a:58:2b:dd:7f:c7:b2:bc:e3:9c:b9:9d:
5a:7f:49:d5:7e:44:39:63:20:09:65:88:37:4a:a1:
01:81:ae:41:1c:2d:d3:81:24:92:5f:ac:ac:59:55:
95:d1:b7:db:de:66:6b:3d:32:2d:ca:e6:c7:ae:b3:
15:be:e5:72:41:24:eb:b2:8a:9d:2b:2b:5c:4e:0f:
ce:c8:f7:d6:32:19:53:5e:94:27:4a:71:be:90:cb:
fd:47:b7:8d:64:c1:c8:28:80:70:16:39:1d:df:c8:
1f:00:dd:f3:30:80:4e:55:9b:3d:62:d3:86:9d:40:
74:5f:32:01:a5:80:34:54:ea:ba:80:4d:b2:1e:13:
bb:ee:45:58:c6:48:d2:4c:2b:4e:e5:c5:3c:5b:e1:
68:c0:16:49:57:a7:63:ea:5a:c9:76:cc:6d:9f:e7:
da:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3C:0A:34:DD:C5:96:FE:AC:2E:A3:02:34:D4:D9:88:A7:36:D5:39
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145123.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9a9::/32
Signature Algorithm: sha256WithRSAEncryption
06:b7:18:b5:81:8c:dc:8e:b0:14:74:52:49:4f:ca:ff:f2:20:
b8:3a:da:d2:4e:eb:74:67:8d:48:a8:8d:e8:45:b0:62:b8:35:
f7:7c:50:c2:38:6b:13:92:bf:35:8b:d9:09:64:32:14:f6:a4:
ab:f6:39:81:8d:57:df:53:80:b3:e4:f1:0c:41:32:65:2b:e3:
c3:7e:36:99:63:85:66:74:37:06:55:06:fb:75:09:8e:97:43:
2e:a8:a9:16:64:22:80:39:a8:e9:e5:bd:51:6a:27:8b:89:8b:
e2:ee:6b:07:1b:66:ac:78:b3:07:60:60:8a:b8:c4:73:f4:c7:
2c:35:69:52:8c:ce:6e:75:95:ce:8f:90:ec:f6:be:17:3d:6f:
24:09:a1:5f:91:97:c1:2b:b2:a5:7c:91:82:b8:ba:5b:27:36:
ea:f7:4c:b9:25:78:ab:ff:e0:31:18:7f:b0:47:a7:7b:3a:ae:
c6:2e:1e:d4:47:fb:d9:4d:20:7e:f8:5f:ab:30:46:c4:62:93:
87:f0:96:3a:07:69:c3:73:d2:dc:28:e9:77:b0:89:7a:d1:fb:
70:4c:4c:e6:e9:2c:e3:de:09:7d:af:3e:28:46:50:0c:c8:51:
f8:87:3d:c6:2c:8d:ba:a5:35:96:e0:c8:f1:6c:cc:b0:58:2c:
6f:10:57:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:19 2026 by rpki-client