Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145159.roa
File: AS145159.roa (raw, json)
Hash identifier: kH3UIn69x41VIzE6kjolnoDwHVB5mc9txEXRjWlRBqs=
Subject key identifier: EB:CF:32:C6:C1:E2:41:D7:29:59:AA:7A:EB:22:25:60:A8:35:F5:20
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 10C084952158CD1248E7A044F579A2A6C6294663
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145159.roa
Signing time: Mon 25 May 2026 01:50:55 +0000
ROA not before: Mon 25 May 2026 01:45:55 +0000
ROA not after: Mon 24 May 2027 01:50:55 +0000
asID: 145159
IP address blocks: 240a:a9cd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:c0:84:95:21:58:cd:12:48:e7:a0:44:f5:79:a2:a6:c6:29:46:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:45:55 2026 GMT
Not After : May 24 01:50:55 2027 GMT
Subject: CN=EBCF32C6C1E241D72959AA7AEB222560A835F520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c4:d5:6a:85:63:25:49:94:53:76:9e:5d:56:
8a:9e:73:44:ac:bb:7c:17:f5:a0:e0:a1:08:7c:99:
c2:53:3f:b4:1d:c3:6f:f6:1c:ee:07:84:25:f2:15:
53:84:28:36:9f:47:13:6b:68:69:36:0a:b9:fc:c6:
c2:24:9b:5e:57:de:af:0f:65:64:7c:1e:eb:d2:39:
f4:86:34:85:cd:dc:62:61:cf:b4:86:b2:04:45:be:
98:3f:ef:15:2e:95:8a:38:7f:f3:aa:c4:88:62:5b:
1e:93:bb:5a:18:0d:fc:c5:74:11:76:52:3e:a4:95:
94:c0:5d:96:70:ba:d6:91:c3:ac:63:2f:64:a6:fc:
73:ed:81:16:b3:6e:1c:44:2c:59:17:77:86:5e:5b:
27:c2:92:5c:13:b3:4e:77:e7:e2:bc:b0:55:ef:bc:
b2:da:01:90:2f:24:4a:7e:51:44:53:6d:46:e1:da:
f7:01:97:68:c4:b2:b5:4e:d8:6c:d4:13:83:80:94:
bc:f6:b3:91:5d:b8:6c:88:1f:51:b2:b4:41:53:27:
96:3c:2b:09:7d:59:4c:79:89:1b:07:e6:78:26:b7:
1e:2e:63:2e:31:db:34:f5:52:cf:7a:b6:6d:c3:6b:
a8:a8:30:ba:6f:89:29:a6:7b:b1:28:0a:f2:56:0b:
e3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CF:32:C6:C1:E2:41:D7:29:59:AA:7A:EB:22:25:60:A8:35:F5:20
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145159.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9cd::/32
Signature Algorithm: sha256WithRSAEncryption
13:2d:07:b7:85:13:c6:b6:38:fe:d7:fa:a8:2e:1f:57:ab:c9:
ed:ca:7e:9b:bd:6a:c6:f9:bb:fd:af:f2:50:2b:1a:f2:ef:25:
9d:01:d9:52:cb:72:2a:4c:4e:42:1b:55:82:06:ec:59:ad:fc:
03:55:82:55:3a:61:d8:ff:02:5e:2a:15:57:be:d6:7d:2a:d2:
9f:85:12:8b:bf:c9:55:92:ee:39:0b:a8:60:6a:8b:b0:2a:57:
14:2e:c8:9e:eb:6b:08:b8:13:bb:7a:10:24:aa:2b:de:a6:68:
d1:ae:54:34:56:04:90:7a:5e:24:17:60:8b:02:9d:b1:cb:af:
8f:bd:2a:28:33:83:b4:11:65:fe:01:2c:1c:9a:80:9d:d4:28:
42:b6:c0:9b:f8:1f:2a:a3:5a:32:6c:68:8a:de:de:18:3f:97:
14:6a:ec:5b:74:74:39:05:d7:3b:a5:78:35:cf:37:8a:82:1e:
01:c1:a2:86:f1:49:a8:ed:99:72:48:df:db:e4:77:21:9d:c3:
ed:e1:ff:59:39:88:9d:63:c5:6d:b5:f8:85:48:08:8f:d8:c9:
13:ed:83:99:ab:32:06:63:d0:29:f7:8d:dd:6d:53:ad:0e:7a:
b3:03:81:9e:6f:c8:fa:e1:57:36:ee:dc:cc:0c:79:40:6b:a8:
07:4e:dc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:39 2026 by rpki-client