Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145158.roa
File: AS145158.roa (raw, json)
Hash identifier: J/2xLoDUeSO90GumDq3+ElNzWmKvxCVv0adgDUt32EA=
Subject key identifier: 35:E9:0D:EB:47:22:96:AE:4D:EB:5D:9A:66:06:92:67:47:18:D8:58
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 54628DB70768DB7D53AF4901458D4DEB672A50EA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145158.roa
Signing time: Tue 26 May 2026 03:17:15 +0000
ROA not before: Tue 26 May 2026 03:12:15 +0000
ROA not after: Tue 25 May 2027 03:17:15 +0000
asID: 145158
IP address blocks: 240a:a9cc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:62:8d:b7:07:68:db:7d:53:af:49:01:45:8d:4d:eb:67:2a:50:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:15 2026 GMT
Not After : May 25 03:17:15 2027 GMT
Subject: CN=35E90DEB472296AE4DEB5D9A660692674718D858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0f:f8:df:4b:4c:9d:f3:21:2f:08:53:b2:aa:
ea:42:1d:0b:2d:ce:23:57:fd:28:d0:b5:56:43:81:
c6:2a:98:f5:9a:3b:40:df:39:ba:2c:ae:f7:de:b5:
10:a9:b2:e2:d9:84:4b:9f:5b:46:08:d9:33:9b:95:
42:12:bf:01:12:65:bc:13:a1:68:7c:cd:2e:d2:ea:
0d:16:35:c5:67:a5:1c:fb:b6:ae:94:33:36:fc:c7:
6f:c6:7d:0d:cb:0b:3a:76:df:7a:ac:89:96:e0:da:
49:5a:1d:74:11:b5:5b:27:95:d7:a0:b3:24:c5:1a:
b5:53:09:25:35:66:7e:b3:0c:25:d1:cd:4b:36:d6:
c8:5c:4f:39:60:45:9a:37:59:f3:69:11:9f:a0:14:
9e:df:8b:d7:87:36:b5:dd:ff:00:40:83:0a:08:47:
df:ed:9e:97:9a:44:55:b4:fb:21:5c:0f:a4:5c:7b:
f8:54:0f:10:1a:0f:ad:56:f3:d3:07:af:f3:84:01:
6c:49:5f:b6:ed:88:5a:ed:bb:f1:91:68:71:39:c3:
38:8f:44:3f:dc:ed:75:21:5e:db:a9:a6:ef:65:04:
7d:09:23:ff:a2:57:40:46:d4:97:c9:14:d7:37:b6:
42:0b:98:20:cb:2e:94:de:d7:4e:e7:16:87:37:bb:
1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E9:0D:EB:47:22:96:AE:4D:EB:5D:9A:66:06:92:67:47:18:D8:58
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145158.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9cc::/32
Signature Algorithm: sha256WithRSAEncryption
85:93:32:5a:8b:b0:d8:51:55:2d:92:4b:8b:52:cb:33:ff:f2:
46:b6:2b:15:7a:f3:bb:99:17:8f:18:e1:5f:eb:30:86:66:2c:
be:4c:72:6e:a6:0f:cc:65:a2:ab:2c:13:07:12:dd:cf:09:a8:
01:60:43:64:be:20:69:e8:cb:95:7e:49:59:8e:e2:02:9e:5c:
44:7d:50:36:95:af:af:a0:31:6e:0e:f7:96:af:83:9f:c9:a8:
b8:9a:ef:92:c3:57:9d:7c:3a:05:c7:61:1e:bf:41:99:81:d0:
0e:37:dc:8e:0b:21:73:a5:87:6a:d4:08:a7:6c:fc:51:0e:a6:
a2:00:be:32:72:22:f3:ba:f2:ea:1f:02:38:fa:12:fc:b5:51:
0a:dd:8f:73:72:95:7b:e5:db:14:a6:97:b1:7c:32:4b:7d:44:
a6:4a:6e:2d:2c:ba:aa:9f:10:7c:25:e1:bf:f9:7f:c1:61:3e:
ba:a4:99:ea:42:17:ed:89:16:d6:fe:e1:c4:0d:eb:47:b1:71:
dc:4d:da:73:08:46:f7:07:70:e1:8d:aa:56:1c:b1:fb:ab:76:
85:47:5d:91:3c:d2:79:45:2a:d2:9f:43:8b:87:d7:0f:b4:9d:
fb:48:84:43:fb:5c:48:f8:10:dd:33:6f:1c:ba:b7:3f:3b:3c:
a2:ed:6f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:55 2026 by rpki-client