Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145169.roa
File: AS145169.roa (raw, json)
Hash identifier: 7zERMPeDRjJwOfdA9SP8cuSkQMMp/vGVvRLEUUknwkk=
Subject key identifier: E3:7D:DF:B7:0E:C7:57:5F:B7:4B:C7:BC:76:6D:C4:32:6F:14:6A:C7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4264601E0A70B4094E4ED0369627FAA4A32E6ABD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145169.roa
Signing time: Tue 26 May 2026 06:30:46 +0000
ROA not before: Tue 26 May 2026 06:25:46 +0000
ROA not after: Tue 25 May 2027 06:30:46 +0000
asID: 145169
IP address blocks: 240a:a9d7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:64:60:1e:0a:70:b4:09:4e:4e:d0:36:96:27:fa:a4:a3:2e:6a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:46 2026 GMT
Not After : May 25 06:30:46 2027 GMT
Subject: CN=E37DDFB70EC7575FB74BC7BC766DC4326F146AC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:a4:cd:b1:d7:73:fc:33:e3:79:cf:8c:3a:
fb:79:3d:41:35:b6:bd:f5:22:e7:57:47:dc:67:55:
4c:b7:2f:b9:60:75:9b:3a:67:c0:9b:f1:9d:20:ee:
f7:83:4d:e3:0f:5c:43:bc:34:31:c7:c8:9d:1a:39:
c4:a1:51:80:64:6f:db:40:87:81:cb:92:25:ac:79:
e1:ad:18:17:82:22:ec:5e:28:8e:4b:c6:17:9e:41:
e3:39:f5:e4:aa:53:94:18:4c:94:56:41:68:0d:a7:
7a:83:f9:57:47:e3:d6:77:d5:38:65:4b:af:85:11:
b0:0a:3b:9f:2d:bd:c4:79:b3:60:66:30:f7:13:20:
36:07:94:ca:e0:6d:21:ad:78:cd:2c:a6:8d:17:c3:
08:7b:27:b1:d8:e0:54:bc:73:0f:87:cb:d4:a3:84:
c2:94:f6:cf:b8:e6:87:4e:29:99:47:f3:2b:60:6a:
fd:0b:f1:4e:ad:ca:27:65:50:a9:7a:46:96:e0:42:
b6:ad:2f:eb:78:4b:31:73:76:2a:42:16:78:45:13:
3c:76:b6:14:a5:24:b2:c1:f1:fb:6b:8d:b6:3f:f9:
4f:5b:0b:35:45:73:be:3f:ed:2f:b3:cf:54:dc:70:
8c:94:67:4d:9d:97:d0:b9:ab:28:7c:04:99:24:ee:
fd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7D:DF:B7:0E:C7:57:5F:B7:4B:C7:BC:76:6D:C4:32:6F:14:6A:C7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145169.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9d7::/32
Signature Algorithm: sha256WithRSAEncryption
00:b6:11:6c:57:4a:0b:93:24:f4:bd:fe:52:75:6e:43:ce:ec:
f9:0d:7a:4d:dd:2a:75:f5:68:9b:55:b6:ba:b2:57:38:66:e7:
38:1f:51:f4:76:15:c7:8a:51:0d:c7:42:34:de:73:e1:eb:c2:
b6:c4:63:76:2f:78:f1:44:58:2e:9b:83:03:d5:1f:4d:3a:5c:
66:77:b4:02:86:51:27:37:68:6f:f9:a9:e3:31:7b:9e:92:3b:
2b:2a:c0:ac:69:b6:3c:7a:da:49:38:64:a6:7c:3f:87:f4:50:
84:16:57:77:75:8b:47:f6:8f:ed:2e:9e:2f:4a:19:12:38:85:
22:44:3e:23:c7:b6:01:a2:ee:b2:55:c7:d0:6c:cb:f4:34:c7:
dd:0d:9f:93:f6:02:aa:5f:f4:e3:f5:1d:1e:58:66:f3:02:db:
f9:07:da:af:4a:c2:4c:22:99:5e:bb:b4:8d:ab:66:1b:9d:f4:
42:a9:6f:97:75:58:64:60:ac:5d:23:74:6c:e4:46:72:9f:4b:
04:b5:51:4c:9e:1b:76:c1:13:40:d2:8b:b9:57:77:40:d5:b4:
de:22:23:7e:ba:e8:a6:bd:ba:21:07:48:de:15:78:19:34:00:
63:59:63:4f:99:03:b7:66:4a:62:93:a4:db:56:92:51:f7:f2:
7b:89:dd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:30 2026 by rpki-client