Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145168.roa
File: AS145168.roa (raw, json)
Hash identifier: xY08ia0Y/SdLVoPolLzR4GhL2D/emxxPwOFRpt6vaGY=
Subject key identifier: 73:58:EF:7F:0A:77:DE:32:62:AE:4B:1C:50:83:10:6F:2C:04:7D:33
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5F6391309229F86045E4840E5BE9651B4CCBD300
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145168.roa
Signing time: Mon 25 May 2026 03:19:48 +0000
ROA not before: Mon 25 May 2026 03:14:48 +0000
ROA not after: Mon 24 May 2027 03:19:48 +0000
asID: 145168
IP address blocks: 240a:a9d6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:63:91:30:92:29:f8:60:45:e4:84:0e:5b:e9:65:1b:4c:cb:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:48 2026 GMT
Not After : May 24 03:19:48 2027 GMT
Subject: CN=7358EF7F0A77DE3262AE4B1C5083106F2C047D33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:97:87:a3:d3:1f:b3:39:eb:83:3b:8a:d4:
6b:81:02:90:1a:2f:1d:a0:c1:d2:70:53:46:6e:45:
2a:35:22:cd:bb:bf:3b:a7:40:2b:07:8c:c3:7d:1d:
27:a1:81:fe:df:6c:31:74:89:1d:10:f9:8d:1a:a4:
a4:33:db:07:94:cf:3e:7b:3f:8c:27:6b:c2:35:94:
ad:1a:ed:c5:3a:59:a3:ab:0f:94:6c:6e:9b:00:4b:
9c:9f:14:bd:d3:47:ba:26:64:a6:f7:4c:26:9f:86:
94:db:8b:9a:53:a7:90:54:1d:96:0b:89:25:1e:82:
b0:ad:5c:b8:cd:c5:ff:87:2b:ad:52:23:fc:c7:86:
09:f9:67:ad:3e:2e:3e:76:ce:c1:16:12:98:43:82:
f8:86:6a:9e:fe:29:14:2e:b7:8e:a4:12:90:3e:80:
6a:bd:f5:03:d5:fe:d0:b0:20:42:96:a4:a3:9e:8e:
19:09:70:bb:f9:1d:55:d9:de:69:ca:f5:41:ee:17:
28:51:bb:d3:92:78:9a:ae:b7:4d:17:ea:d6:51:ac:
6b:86:0c:9c:99:c6:b0:31:56:a0:bb:4d:23:b8:7f:
d3:4a:37:d4:b2:49:63:df:93:78:bf:27:4a:9b:9e:
c5:8b:cc:6a:d0:eb:4f:67:88:f6:39:41:45:64:7e:
10:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:58:EF:7F:0A:77:DE:32:62:AE:4B:1C:50:83:10:6F:2C:04:7D:33
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145168.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9d6::/32
Signature Algorithm: sha256WithRSAEncryption
aa:08:ce:5a:55:09:6d:e9:6e:aa:4b:7f:cd:88:96:03:c9:e0:
49:43:11:25:84:26:7f:1f:7e:8e:e0:3b:17:87:f8:b4:5b:ae:
db:b1:f6:12:81:a8:6c:b3:4e:3b:2e:8b:1b:3f:53:81:49:60:
56:a0:3e:07:96:f6:04:a2:5c:8b:9b:f3:38:16:e5:d5:02:a9:
71:d4:bf:a0:74:f3:01:e6:a5:3f:76:cb:96:09:37:62:81:3b:
68:8b:09:55:7d:f2:bc:6b:45:ec:57:5a:18:bc:f3:ab:b3:ec:
9a:f4:77:50:84:a7:2d:e2:6e:dd:12:08:d4:32:05:e3:4f:2c:
94:df:e9:09:fe:e3:26:c2:69:a7:ab:11:d9:9e:81:ad:a6:e5:
bc:47:c0:a9:c6:c5:d9:30:6f:95:a1:29:2d:2f:05:ff:29:91:
7d:d3:9b:dc:f6:53:bd:bb:ec:15:c7:25:39:a9:f9:6e:9b:1c:
a4:70:d3:51:2e:86:9d:f3:46:85:61:56:e6:76:fd:b9:cb:d7:
3b:05:51:7a:b2:e7:89:f3:c8:50:b3:f4:65:07:f0:6c:01:5c:
f1:e3:c4:ca:26:50:f1:e6:b0:47:ef:f7:72:fd:3e:71:9c:e8:
23:5f:49:ab:56:a3:f2:93:f1:6d:31:04:bf:16:88:7d:93:5b:
fb:f0:3b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:43 2026 by rpki-client