Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145174.roa
File: AS145174.roa (raw, json)
Hash identifier: QxZm+75P4yfNJTqRcX/YZTwAJna07YBzy+1dSdbSnKk=
Subject key identifier: CC:A2:30:1E:80:53:5F:6E:5F:21:88:73:27:E1:58:A8:AC:0D:95:C6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5DB9A695AE15DB6435C0869B1D7AD08E2581F1BE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145174.roa
Signing time: Tue 26 May 2026 03:16:44 +0000
ROA not before: Tue 26 May 2026 03:11:44 +0000
ROA not after: Tue 25 May 2027 03:16:44 +0000
asID: 145174
IP address blocks: 240a:a9dc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:b9:a6:95:ae:15:db:64:35:c0:86:9b:1d:7a:d0:8e:25:81:f1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:44 2026 GMT
Not After : May 25 03:16:44 2027 GMT
Subject: CN=CCA2301E80535F6E5F21887327E158A8AC0D95C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:25:02:38:46:45:35:ab:54:2f:f3:16:09:92:
2e:ca:be:dc:dd:21:69:28:94:d9:59:0d:69:86:b4:
6e:91:73:9d:94:4d:1b:df:8c:4d:fe:1f:2b:a5:f1:
a8:d7:85:47:bb:95:8e:6d:50:f1:d2:fc:39:7a:32:
e0:48:83:e8:f4:a6:3f:f3:d8:de:27:73:b4:89:ec:
7b:02:4a:74:6b:37:82:28:35:1d:59:a5:d4:d4:f8:
93:d7:8c:40:23:b6:83:bc:b9:78:26:45:8f:b5:f7:
5d:57:94:1f:2d:25:73:2e:1f:b7:0e:8e:a9:a4:59:
58:0b:96:3e:e1:cc:fb:5e:22:d0:e9:57:f9:d1:4d:
d2:48:15:a7:fa:c5:e6:1e:e0:b8:34:73:89:10:d4:
81:3a:ed:ee:6a:72:c5:4c:e9:6e:23:66:69:07:b7:
fb:f1:2a:5f:39:55:63:42:08:21:62:79:7a:fd:17:
f4:fa:10:08:2f:8c:73:d3:96:5f:22:61:55:4f:bb:
ef:c0:0a:69:dc:f8:02:8e:bc:17:8f:63:d9:95:3d:
7e:b1:ff:66:34:44:ee:11:fe:38:28:58:4c:fd:22:
d9:d4:54:62:99:de:1f:72:aa:b2:ee:fa:76:58:b0:
86:b5:08:31:72:13:8b:ef:2d:c6:b1:1a:50:71:4b:
27:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A2:30:1E:80:53:5F:6E:5F:21:88:73:27:E1:58:A8:AC:0D:95:C6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9dc::/32
Signature Algorithm: sha256WithRSAEncryption
7b:c9:9d:72:1a:6c:c0:1c:2b:c6:ee:bf:70:11:30:21:9a:83:
20:6d:06:4e:aa:a2:1d:c2:c1:65:04:1e:4b:ca:d8:19:ef:49:
6a:1b:48:0f:18:31:52:45:8a:2b:84:c8:d0:e6:1a:17:4f:d1:
37:38:1a:7e:c6:01:d9:86:01:e6:0b:68:4f:c9:8b:f1:33:e2:
79:59:fc:e4:27:98:5e:fd:d0:bd:2b:0f:c7:93:48:f9:21:5e:
21:3e:de:1a:86:ca:40:84:b0:7c:1e:c0:bc:7e:53:c1:9c:96:
29:e6:ad:c0:bb:58:51:56:99:10:88:b3:0a:ad:d7:1d:59:cf:
08:13:85:7c:4c:3b:89:26:cc:64:0a:68:2b:08:18:7f:ba:52:
ac:21:ca:90:6a:18:a5:4b:95:a0:c9:90:ff:41:33:97:d4:79:
92:1e:32:ce:40:37:b7:73:96:02:51:f2:e6:3c:19:a8:9e:24:
a1:1e:6d:7a:37:e6:57:7e:d3:7f:00:34:42:62:b8:a1:45:0a:
b8:21:93:1b:22:e9:63:ab:d7:83:bf:2a:60:a6:25:29:cc:d4:
3b:f2:22:83:e7:c0:8f:b9:c5:ba:f7:8b:30:cb:ea:89:ef:d1:
54:8d:76:70:c0:04:f5:6c:6f:8a:22:5d:5a:8d:3a:e6:af:74:
64:66:65:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:20 2026 by rpki-client