Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145143.roa
File: AS145143.roa (raw, json)
Hash identifier: 53HZ1TLeHxe1+14RSscwAjvcTCiyt9Ccwp3sIxIlfMs=
Subject key identifier: D7:4F:16:AA:BA:D8:E1:14:83:AA:D3:47:A3:FA:1C:8A:9B:F9:11:AE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 06014A5881DCBE971DD6E9FB43E5AE72787118F1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145143.roa
Signing time: Mon 25 May 2026 02:22:16 +0000
ROA not before: Mon 25 May 2026 02:17:16 +0000
ROA not after: Mon 24 May 2027 02:22:16 +0000
asID: 145143
IP address blocks: 240a:a9bd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:01:4a:58:81:dc:be:97:1d:d6:e9:fb:43:e5:ae:72:78:71:18:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:16 2026 GMT
Not After : May 24 02:22:16 2027 GMT
Subject: CN=D74F16AABAD8E11483AAD347A3FA1C8A9BF911AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:d9:06:f4:63:d0:a8:4f:17:60:fe:28:a3:
cd:29:8a:a9:61:a3:6a:a9:75:50:bd:60:de:7d:6a:
ad:f5:3b:90:61:d8:0c:f3:8b:cb:75:61:f1:cb:ed:
93:74:76:d6:e4:22:81:ac:79:ac:2b:9d:84:21:e0:
8a:e3:0c:3c:58:8e:d7:01:f8:98:02:85:0c:1d:2e:
71:c3:d7:55:da:87:05:52:61:d6:2d:6b:b6:e7:5d:
3a:21:f0:57:27:d6:ac:cf:32:b9:8a:fe:6d:7f:ce:
5e:68:d9:a8:fb:ec:93:dd:d8:d0:bf:56:d2:db:72:
10:dd:4b:6a:77:ef:4e:be:bf:46:25:93:10:1c:63:
c2:a9:1c:a8:98:ca:31:a7:c3:7b:d3:7c:1d:85:9f:
f0:9b:c1:b7:cd:92:ae:82:1e:8f:2d:ae:cf:83:8a:
52:82:bb:21:d6:ad:9f:bb:d0:1f:a7:c9:42:08:cb:
e8:97:b9:6f:ca:3c:85:ae:ea:2b:c3:ab:a0:fb:58:
ef:fa:5f:45:ec:c4:4a:84:65:a5:2f:d4:15:0e:20:
a4:64:e2:eb:cc:11:66:03:84:1b:66:7e:44:c8:c7:
8e:56:a0:ed:77:4a:91:79:58:45:0c:a1:2d:9c:92:
5a:73:77:e9:a4:fa:a7:df:4c:c1:76:ad:f2:28:13:
f9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4F:16:AA:BA:D8:E1:14:83:AA:D3:47:A3:FA:1C:8A:9B:F9:11:AE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145143.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9bd::/32
Signature Algorithm: sha256WithRSAEncryption
18:28:66:3f:f0:51:17:d5:2c:5d:5b:c3:19:f7:ff:ea:58:0e:
77:93:0b:56:5f:6b:d9:e5:8a:a5:dc:a3:96:82:27:61:15:bd:
09:48:e7:82:12:8b:a5:be:a2:b8:ec:a4:2f:c8:0d:92:8d:4a:
43:7f:69:d4:69:53:43:04:87:69:ce:7a:9d:d1:5f:89:31:2b:
2d:e4:a1:55:45:b0:c4:d9:78:f9:94:6c:55:30:8b:9d:d4:94:
75:1b:d5:d6:01:6b:84:7d:24:82:cb:ca:7a:c4:41:4e:e3:d6:
19:52:31:59:26:86:67:54:ff:4b:3e:5b:36:a3:99:6c:aa:25:
04:a1:37:f8:ca:8b:f4:df:06:20:f4:ab:dd:7b:ac:39:e3:dc:
5c:fb:1f:ef:b5:11:e9:be:c2:d4:80:35:ad:2f:63:1d:22:f3:
ff:d3:2f:f8:2b:76:b6:7a:7b:f4:c1:fa:d6:aa:3d:ef:6e:6f:
2c:1d:7f:7f:59:0c:5c:30:4d:9b:9d:e9:cb:55:bf:84:51:79:
9d:7b:bb:b4:93:ed:05:7c:dc:20:05:e4:16:a2:8a:90:e6:2b:
e0:6f:23:5c:43:4a:5e:d8:03:21:fd:5b:20:e5:8a:48:5c:8b:
4e:6c:17:5c:b1:42:d3:dc:c7:13:e0:34:1b:00:c9:9a:af:72:
9c:12:38:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:57 2026 by rpki-client