Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145176.roa
File: AS145176.roa (raw, json)
Hash identifier: IGy3l3FseT3/IvGhRoZodmwjqkeG71uLKJO8lD/vGVs=
Subject key identifier: A3:3E:75:88:54:1A:D4:03:5D:D7:03:02:AF:34:D0:37:F6:91:F5:DD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 657FC6D8BEB4E6CF414ABC61976C9638D0884EFC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145176.roa
Signing time: Tue 26 May 2026 02:35:20 +0000
ROA not before: Tue 26 May 2026 02:30:20 +0000
ROA not after: Tue 25 May 2027 02:35:20 +0000
asID: 145176
IP address blocks: 240a:a9de::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:7f:c6:d8:be:b4:e6:cf:41:4a:bc:61:97:6c:96:38:d0:88:4e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:20 2026 GMT
Not After : May 25 02:35:20 2027 GMT
Subject: CN=A33E7588541AD4035DD70302AF34D037F691F5DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e2:51:68:7d:95:3e:9a:e0:1c:8b:3f:b5:a3:
bd:5a:f3:32:e5:62:44:bc:51:3d:01:85:7f:79:0b:
f2:e8:9d:8a:7a:fc:d7:03:9b:a8:d0:b0:e7:a0:11:
08:3a:88:cc:21:b8:0c:bc:9e:08:48:19:3d:17:dd:
b6:25:7f:91:56:50:90:62:1a:6a:c4:b3:3c:c0:cd:
56:76:62:f0:f6:7b:bd:5a:2b:1e:bd:38:74:9b:26:
a6:a7:fc:bc:1a:4a:4d:c2:76:9c:24:18:88:0c:32:
f1:44:0b:59:70:a7:43:64:68:f3:98:36:de:10:82:
ce:96:a1:73:a2:c8:49:f3:e0:8e:09:a0:1e:3c:f7:
88:12:bc:a2:9f:33:1e:47:87:16:aa:8e:0f:42:bb:
16:75:84:c7:a1:ab:2c:40:5c:fd:e1:59:ef:30:d0:
35:6c:57:f4:11:1a:f8:90:67:ab:48:c1:47:0f:12:
00:6c:cc:14:41:c7:94:60:e0:1a:53:b9:5f:9e:e8:
cd:2c:a8:1b:b1:12:b9:42:c2:8e:b4:79:5b:e1:73:
ed:20:75:c1:85:f2:65:bc:c7:f1:a9:9e:b4:3d:0f:
91:40:85:d7:ff:30:e8:54:6b:5a:8d:68:4a:9d:14:
88:32:88:41:e2:5e:6d:f4:ac:b2:bb:a7:fc:a5:b3:
b8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3E:75:88:54:1A:D4:03:5D:D7:03:02:AF:34:D0:37:F6:91:F5:DD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145176.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9de::/32
Signature Algorithm: sha256WithRSAEncryption
17:b8:87:95:e1:a1:7a:de:03:b8:6e:b0:af:c7:dc:e3:54:12:
68:61:b8:86:2c:63:d8:b6:f3:6f:43:98:d9:e4:0e:48:1a:41:
be:1e:16:20:29:53:80:ab:be:61:a7:e7:73:59:36:45:7d:84:
da:d6:a8:7f:f0:ae:af:a4:07:78:2a:89:50:78:fd:c9:59:12:
c5:10:49:55:f4:16:dd:3c:45:4f:c2:2f:93:af:c4:6c:fa:ff:
3d:f8:73:91:57:fb:87:04:4d:f6:eb:0a:61:de:ef:ce:a9:e2:
52:6a:e2:9c:21:94:d4:d4:5f:d6:eb:83:11:4c:f7:bf:84:33:
08:6b:9a:f4:bd:c5:93:a3:43:cf:75:e9:00:66:2e:ed:88:1a:
6c:5b:93:e8:7b:05:1d:eb:6f:ea:d4:5c:5b:10:17:0b:27:e5:
80:96:4c:de:d1:da:db:0a:93:bc:2c:37:32:90:d2:3f:c6:a7:
29:a8:a3:2c:9e:a0:2b:a1:79:cc:71:ef:36:5f:1a:4f:c1:4e:
1e:1d:8c:23:2c:7f:97:d0:38:85:00:75:33:d4:7b:65:72:66:
ed:6a:7c:6c:33:03:2a:da:5a:5c:6f:3e:f4:59:50:4f:e1:57:
43:20:9e:0e:7e:0a:da:b2:14:2e:27:09:3e:8b:9f:e4:1d:33:
98:27:fb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:41 2026 by rpki-client