Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145183.roa
File: AS145183.roa (raw, json)
Hash identifier: OYiPEFVEzcNF2huwTD1wijQOMt8+9s0EPGWBKyXaPg8=
Subject key identifier: D6:3F:5F:2D:36:49:B1:73:36:99:AF:E2:56:15:1A:DE:03:EE:1E:76
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 101FDF7FC69C699F079BF790167A31438618D8CD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145183.roa
Signing time: Mon 25 May 2026 06:49:01 +0000
ROA not before: Mon 25 May 2026 06:44:01 +0000
ROA not after: Mon 24 May 2027 06:49:01 +0000
asID: 145183
IP address blocks: 240a:a9e5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:1f:df:7f:c6:9c:69:9f:07:9b:f7:90:16:7a:31:43:86:18:d8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:01 2026 GMT
Not After : May 24 06:49:01 2027 GMT
Subject: CN=D63F5F2D3649B1733699AFE256151ADE03EE1E76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:55:b4:00:fb:ee:da:ad:6b:74:4a:df:73:
44:3a:f8:17:66:a8:a3:f6:53:5b:83:e1:97:88:72:
8a:bf:53:2f:d7:7e:d8:d0:f1:57:59:45:b9:90:d9:
b9:e2:4b:5a:82:ca:71:60:4d:cb:5f:ff:ff:cd:b1:
ce:31:1b:52:01:6d:25:fa:0f:09:43:6f:89:fd:20:
15:0b:cf:fa:f6:ae:a9:8e:3d:e7:4b:f3:7b:5c:8c:
1e:38:9c:b0:69:ba:f8:03:74:f9:c7:1e:d0:00:f9:
07:99:37:7d:db:25:0c:36:5c:73:42:5d:31:03:33:
29:a7:48:b1:de:69:be:16:eb:32:d2:19:43:c4:5c:
e4:92:9f:7f:3c:77:21:cf:ba:06:61:e2:02:62:b3:
c0:24:12:8f:7c:17:09:38:f2:5a:5c:21:ad:de:84:
53:3e:32:11:da:d0:30:c8:a0:b8:c8:da:9d:d0:85:
14:48:50:ee:f2:e2:74:50:81:63:92:e2:7f:3e:6a:
f7:55:f1:eb:34:31:ae:00:b9:05:d1:07:67:b8:58:
17:1e:b9:9a:46:e6:b5:6f:e6:74:b5:7f:01:95:08:
11:fa:d8:3b:7c:4d:b5:8b:a7:b8:6f:98:ed:31:8e:
4a:99:d2:0e:64:df:85:80:1d:a5:5b:e8:e3:c6:07:
34:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3F:5F:2D:36:49:B1:73:36:99:AF:E2:56:15:1A:DE:03:EE:1E:76
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145183.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9e5::/32
Signature Algorithm: sha256WithRSAEncryption
49:3d:9e:6c:93:46:14:8d:bf:b3:ee:e2:4b:ef:9d:e1:75:db:
59:34:7e:f8:55:71:97:20:39:f1:b5:77:3e:62:67:05:fb:a7:
64:30:11:86:9b:a4:c2:33:9d:fe:5a:f5:8d:fa:ae:0a:b4:23:
20:61:32:dc:4c:e9:d4:4e:f9:03:06:1f:31:d5:77:ab:08:39:
ca:4b:cc:5b:81:86:6f:8f:c5:83:1c:06:b5:ac:bd:76:1b:c2:
1d:7f:a7:9b:81:9b:9c:bc:4d:56:30:e3:12:1c:8a:64:9d:6b:
29:96:90:ad:f3:43:04:5b:51:2f:9c:31:6c:45:1a:d6:18:a1:
ca:39:1e:c2:45:10:86:62:56:11:ec:da:d2:66:b9:71:e3:cc:
e2:1f:d5:13:b3:95:2f:19:22:1e:a0:0a:8a:8a:d0:6c:d1:aa:
1e:9b:91:ab:47:1f:ec:33:aa:6f:64:a2:14:6c:5a:e5:8d:f9:
db:c4:42:8b:7c:93:68:5d:c9:c4:19:1e:e0:d8:d8:e2:c6:53:
43:3a:d4:c4:e3:71:9f:d4:bc:05:2b:dc:76:62:70:b8:ec:4d:
86:c0:ec:95:62:ef:d3:b5:d2:6c:13:c6:15:00:51:88:18:b3:
c3:17:5d:50:18:f7:cf:e6:63:9d:df:73:c7:d2:13:ff:98:da:
64:a3:86:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:32 2026 by rpki-client