Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145194.roa
File: AS145194.roa (raw, json)
Hash identifier: zWzBdSbZPL9A/PCIX37Lft7qqdOX18PmAt3ZY6YZHoo=
Subject key identifier: C3:35:37:D7:F0:B6:96:4D:F0:86:A2:02:DF:E2:69:A1:3E:20:CE:2D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 30A32699F64900D929E887F442C4FE0F1372DE14
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145194.roa
Signing time: Fri 22 May 2026 06:58:48 +0000
ROA not before: Fri 22 May 2026 06:53:48 +0000
ROA not after: Fri 21 May 2027 06:58:48 +0000
asID: 145194
IP address blocks: 240a:a9f0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:a3:26:99:f6:49:00:d9:29:e8:87:f4:42:c4:fe:0f:13:72:de:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:48 2026 GMT
Not After : May 21 06:58:48 2027 GMT
Subject: CN=C33537D7F0B6964DF086A202DFE269A13E20CE2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:ca:35:89:f5:3e:7d:b1:52:6f:8c:c1:b2:
8d:a0:44:f3:73:7d:43:44:25:64:2e:0c:8f:33:f5:
a0:36:11:39:15:64:fc:cb:90:43:15:9a:9d:24:48:
e5:d9:ee:45:93:1e:aa:2f:8f:83:f0:9a:ff:37:e3:
27:2b:c0:a4:36:dd:fd:20:89:14:9c:90:bf:ac:20:
44:a2:88:46:0b:5b:05:6d:1c:48:df:ab:da:ec:1f:
4c:d5:d2:66:45:35:bb:a8:d7:eb:48:84:ac:9d:61:
e6:df:79:aa:dc:e0:90:3c:6c:27:14:d3:d9:f3:91:
c6:b0:9c:11:30:54:80:a3:eb:a3:23:f9:af:90:d4:
bc:d1:95:67:a1:4a:dc:90:7c:04:2b:fb:37:e5:cb:
20:81:96:0b:78:a9:00:14:8d:17:96:96:e4:d1:05:
9a:2f:43:94:7f:0f:8a:e3:e9:1d:1b:40:72:18:62:
37:66:db:81:03:ed:2b:91:ef:5e:08:65:5b:fe:7e:
9a:88:9c:f0:a2:a9:1e:e8:9f:84:3a:f7:13:98:1d:
a4:a6:ba:4e:c5:c9:9f:8d:7c:15:38:a8:f5:ed:f4:
41:66:cb:3c:25:df:8d:11:a9:e8:52:9d:8a:21:e4:
de:70:19:7f:f5:0b:36:df:a2:70:b4:dc:57:c3:0e:
4a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:35:37:D7:F0:B6:96:4D:F0:86:A2:02:DF:E2:69:A1:3E:20:CE:2D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145194.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9f0::/32
Signature Algorithm: sha256WithRSAEncryption
3c:b4:7a:a0:a1:d3:04:38:b0:96:ea:c2:7b:87:6a:d8:32:b6:
81:75:03:42:9c:f2:b9:c8:ae:06:17:49:4b:c1:8a:83:3d:b1:
8a:97:fe:31:9e:b2:3e:d6:c3:f2:ec:7f:8a:8b:00:e9:1c:e7:
12:92:bb:9a:37:9a:2e:5f:ce:33:44:ae:db:e3:99:33:f4:a1:
d6:8c:84:7d:86:63:b3:24:96:ca:9d:3c:d3:73:e7:6f:3a:58:
65:50:c7:12:d3:5d:ff:95:b5:6a:29:1c:6b:0d:d2:b9:fb:17:
e5:0f:a9:c7:17:aa:d0:e2:40:f5:c8:60:24:0d:df:2d:91:8a:
f1:3e:0d:c0:c1:4a:39:78:f2:9f:7c:81:cb:cc:02:1a:a8:f9:
20:ad:e1:a4:9f:04:da:0d:e1:54:ab:7e:45:ef:f4:15:2c:2c:
96:e4:61:38:c1:cf:d6:4f:19:b8:90:5f:3c:af:6a:da:f9:59:
07:b6:95:bf:a8:0e:04:71:8d:4c:2d:15:cb:f9:58:c3:14:e1:
64:3a:54:2c:a9:da:c0:61:3b:cc:be:02:3d:f1:10:fa:41:9e:
2e:fc:55:4a:79:9e:2d:fe:1b:74:3e:90:71:e1:86:99:91:e9:
c3:60:14:94:dc:c0:3d:0c:cc:1f:d0:c0:84:e2:1a:de:03:ef:
e3:6a:c3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:06 2026 by rpki-client