Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145127.roa
File: AS145127.roa (raw, json)
Hash identifier: xREqcy3kH4Ho07NLseLkAGbXjwtczpgI/OvQ+Oxg4BY=
Subject key identifier: 49:4F:F5:A1:53:3E:9E:62:86:81:B8:C7:A4:7F:A5:4E:98:E8:8E:ED
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2583D7A4F2BE463B5C449AD8DFD5C28CDB79251F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145127.roa
Signing time: Tue 26 May 2026 06:12:41 +0000
ROA not before: Tue 26 May 2026 06:07:41 +0000
ROA not after: Tue 25 May 2027 06:12:41 +0000
asID: 145127
IP address blocks: 240a:a9ad::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:83:d7:a4:f2:be:46:3b:5c:44:9a:d8:df:d5:c2:8c:db:79:25:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:41 2026 GMT
Not After : May 25 06:12:41 2027 GMT
Subject: CN=494FF5A1533E9E628681B8C7A47FA54E98E88EED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e0:e3:92:f5:51:bd:2c:cb:99:ba:c5:0d:06:
15:f0:86:9e:d4:77:15:b2:50:3a:95:f2:5c:97:c8:
39:7e:18:6e:db:d0:77:f4:18:cd:a1:30:06:15:5e:
53:bc:24:ec:18:1f:24:8b:e1:2f:16:3a:43:bd:e4:
1c:db:39:85:5b:a7:a9:5f:b7:65:94:b2:cf:b8:18:
7b:c8:ec:01:09:e2:3c:e9:70:80:3b:ce:0a:ee:7f:
3f:48:33:9a:54:bf:61:1b:2a:36:f2:73:36:87:5d:
b0:e2:77:41:98:0e:fb:c4:76:14:68:a5:d0:2a:2b:
d4:61:c2:d0:ee:09:84:ee:7b:17:0a:06:23:a8:12:
b7:59:75:dc:76:a7:76:f6:b8:e5:cf:a9:f0:55:ae:
73:47:58:c1:6f:68:f9:50:a1:85:2a:2b:b5:8f:cb:
db:08:67:13:e5:0e:ad:cc:93:5a:9e:d6:4a:e7:99:
da:11:8b:06:cd:bc:16:ac:53:ba:b2:65:f5:f8:6f:
b1:bd:f0:90:4a:6c:09:49:79:32:b3:ad:0f:32:1f:
ae:dc:e2:0f:fc:13:2f:11:27:5f:c4:d2:e1:c1:a6:
ba:19:d0:b1:cc:8a:4e:2c:00:46:0f:14:6b:51:e2:
cd:bf:5b:2c:96:7e:c6:81:d2:1b:6f:9b:fc:c8:1b:
3b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4F:F5:A1:53:3E:9E:62:86:81:B8:C7:A4:7F:A5:4E:98:E8:8E:ED
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145127.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9ad::/32
Signature Algorithm: sha256WithRSAEncryption
ad:14:0d:0c:5a:82:f4:0f:cc:a1:7a:7d:a6:0c:bb:33:fc:a6:
ca:0a:a7:76:cd:1e:bd:4e:44:49:bf:08:b1:ed:2f:f8:df:58:
06:71:66:1a:28:89:44:5b:4e:24:f3:df:66:a0:42:ad:ee:22:
80:a0:f9:ff:be:43:8f:2c:62:a5:2d:21:f7:26:0c:60:ad:1c:
f7:1f:95:74:d1:0a:b6:74:4f:b4:76:01:e0:8a:7e:05:e2:d0:
ee:e8:a6:e7:5b:04:95:cd:6f:77:7d:8c:bf:8f:07:75:1a:93:
af:9f:5e:52:f2:78:3d:1c:09:99:c3:8b:b0:61:a8:ce:60:ce:
7a:49:d9:6b:1c:e5:28:44:58:05:c6:3f:e6:9f:0b:e7:63:80:
ff:ad:3d:e6:c4:aa:5c:00:5d:eb:fe:6d:a9:c6:75:8e:c8:a5:
6e:0d:6f:80:69:9d:a7:eb:35:bf:3d:97:1d:00:57:d1:1e:bd:
c2:78:68:16:31:52:9a:07:7c:8b:b0:db:21:e3:28:4d:60:9c:
f7:b5:2f:4a:b6:a2:6e:fa:0b:95:58:f9:70:22:25:2d:c9:eb:
1e:36:3a:9d:1a:90:d7:49:47:63:6d:2d:6c:de:4a:60:df:d0:
14:91:82:a8:d7:81:04:c6:56:34:53:6d:23:42:ee:bc:46:f1:
b9:b2:91:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:16 2026 by rpki-client