Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145181.roa
File: AS145181.roa (raw, json)
Hash identifier: E5xJK5oFB17ne6XSxNYdVvmiu8iMt+Lba5lRIHdmhIY=
Subject key identifier: 27:3B:35:63:C6:47:D5:41:EC:DE:04:04:FD:D0:A7:B6:87:62:1D:80
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 699BB30C90B0A15568E3C3B19CAADCA3B73B8723
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145181.roa
Signing time: Fri 22 May 2026 06:05:33 +0000
ROA not before: Fri 22 May 2026 06:00:33 +0000
ROA not after: Fri 21 May 2027 06:05:33 +0000
asID: 145181
IP address blocks: 240a:a9e3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:9b:b3:0c:90:b0:a1:55:68:e3:c3:b1:9c:aa:dc:a3:b7:3b:87:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:33 2026 GMT
Not After : May 21 06:05:33 2027 GMT
Subject: CN=273B3563C647D541ECDE0404FDD0A7B687621D80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:4b:e9:21:49:a8:72:a1:31:6d:09:ff:5b:
82:44:2f:3d:21:4f:30:be:a2:58:72:b1:10:ab:43:
8a:e2:1c:5b:a6:3b:e5:1d:79:d9:55:3e:05:a1:ba:
4b:2a:6e:8f:c3:61:88:a5:56:c5:7e:64:57:ab:00:
a7:89:83:96:c5:ce:d1:74:51:f5:ad:a3:6f:ce:9b:
7a:30:d0:90:bd:4c:f3:07:8d:da:5d:bb:d1:dd:bf:
b0:b4:a4:27:fa:95:9e:91:12:0d:60:b1:da:4d:97:
fa:fa:8e:9e:5c:86:89:bc:27:3f:c0:c3:c3:df:c0:
96:14:b9:0f:35:10:60:73:cf:37:e4:40:eb:30:8a:
0f:66:65:aa:7b:25:9e:34:c4:bd:61:34:fa:4c:a9:
ce:25:53:a7:36:52:cf:c4:b0:81:db:f9:80:b3:99:
49:3c:82:3f:2c:0f:c0:bd:6a:f6:81:ee:b4:83:36:
1b:4a:14:39:38:5a:fc:12:a0:94:3f:2f:51:f8:38:
e0:13:5e:81:43:72:7e:41:69:6f:31:83:84:dc:1a:
4b:07:93:d8:8a:2f:b7:fe:af:fc:74:4c:45:97:8b:
cc:55:06:91:80:4e:56:20:2b:c4:6a:0f:86:4b:a3:
16:0d:64:68:94:c9:64:15:84:de:5e:86:22:42:5c:
6f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3B:35:63:C6:47:D5:41:EC:DE:04:04:FD:D0:A7:B6:87:62:1D:80
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145181.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9e3::/32
Signature Algorithm: sha256WithRSAEncryption
87:cf:ab:b2:56:83:97:3b:ac:7f:dd:50:84:32:4d:c2:27:07:
44:fb:77:c9:07:77:dd:c5:2c:26:02:92:c2:f1:b8:5e:c4:79:
06:c4:e5:ee:f0:93:7a:a3:8b:47:97:f3:d1:b5:70:6b:0b:2b:
b1:97:5c:28:07:13:fb:57:69:4a:38:c2:d5:82:10:42:98:c3:
53:20:dc:eb:b4:e2:04:f3:e6:36:44:a3:f2:f8:b5:04:2f:c3:
89:5f:d5:88:eb:74:58:27:61:c4:84:c1:33:91:00:54:a5:79:
0f:a6:85:59:12:f1:fe:da:81:86:0c:06:5a:50:77:ba:0b:ca:
ff:e5:1c:c2:7d:bd:ce:71:c7:20:a3:57:67:61:1e:11:72:b4:
13:b0:45:b6:97:95:8a:ac:1f:a1:52:a7:cb:19:2b:80:fb:02:
13:07:6e:4b:6f:52:39:d9:b4:ca:bc:b3:57:90:eb:3a:76:29:
3f:c5:29:48:d9:50:88:86:07:41:1b:c6:2f:5b:32:82:d9:54:
d8:68:09:43:6b:57:c8:47:d0:5f:61:e0:6e:7b:9f:09:20:9a:
64:f5:e3:a3:d8:99:ce:cd:fc:d8:30:ed:fc:3f:67:2c:90:da:
97:fe:0b:a6:dd:d1:b5:68:16:be:d0:67:5c:9f:a6:35:e6:da:
fe:d0:1c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:52 2026 by rpki-client