Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145201.roa
File: AS145201.roa (raw, json)
Hash identifier: 7WXotX+rDeOUUzhbU9NM20JEjg/SHmh7xeAHh5WZCU4=
Subject key identifier: 48:26:BA:94:4F:84:CB:80:26:DC:C3:34:7E:45:D1:1A:C3:47:4E:2C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 65EDEA0697494E1B56926F76C4B5B747DA9D5BA7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145201.roa
Signing time: Fri 22 May 2026 04:26:59 +0000
ROA not before: Fri 22 May 2026 04:21:59 +0000
ROA not after: Fri 21 May 2027 04:26:59 +0000
asID: 145201
IP address blocks: 240a:a9f7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ed:ea:06:97:49:4e:1b:56:92:6f:76:c4:b5:b7:47:da:9d:5b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:59 2026 GMT
Not After : May 21 04:26:59 2027 GMT
Subject: CN=4826BA944F84CB8026DCC3347E45D11AC3474E2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9b:2e:8c:3f:1b:ec:ed:ad:de:47:3a:6c:70:
bc:54:1d:77:95:d9:19:ea:71:5e:ac:f7:cd:6f:b6:
55:35:f5:70:b5:d2:80:ce:3e:cf:c3:4e:d4:26:36:
a8:2a:5f:82:a4:41:d8:1b:20:01:72:21:55:f2:35:
cc:3f:82:1f:a8:99:3c:97:76:d5:08:e8:b5:a7:99:
2f:e9:1c:82:bb:7f:99:e2:54:19:d3:81:d9:8e:23:
5d:7f:97:81:26:1c:36:b3:94:a3:39:e5:ac:35:17:
e1:78:ae:35:37:c9:ad:45:0c:54:df:76:2f:40:78:
bc:ef:e9:0c:5d:55:a1:e5:ca:2d:74:e2:85:0d:b3:
64:bc:a6:e7:a5:16:ed:83:2a:e9:a3:46:16:39:bd:
08:b9:b0:24:e7:41:44:14:91:34:c7:a8:02:8b:f6:
81:95:63:65:da:9b:2a:30:6d:ed:29:af:23:8b:ef:
97:ae:2f:53:c9:c4:ac:29:ea:00:5d:a7:be:13:fd:
df:63:3d:e3:dc:04:3f:a0:4b:5b:83:ee:89:23:df:
f9:39:3f:52:42:b2:b4:68:98:24:4b:99:3d:5f:11:
54:b9:60:38:2c:09:d0:73:92:72:f9:10:5f:8d:6c:
08:b8:85:6c:25:f8:22:ea:17:31:2a:fa:57:33:86:
de:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:26:BA:94:4F:84:CB:80:26:DC:C3:34:7E:45:D1:1A:C3:47:4E:2C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145201.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9f7::/32
Signature Algorithm: sha256WithRSAEncryption
a9:0a:5a:b9:28:46:63:08:ee:c5:e1:51:d2:b5:6b:a3:4d:09:
51:08:6a:01:5b:37:15:47:be:b6:10:8b:62:d7:28:58:ea:f5:
90:c6:13:44:1b:74:44:64:a5:95:df:de:af:0c:ec:52:41:3b:
53:a6:22:a4:0b:62:51:b1:11:5d:ce:a7:15:f8:ab:d6:9f:7d:
cf:0c:fb:f2:93:3a:64:53:23:f9:e7:ea:88:50:66:99:64:0e:
cc:00:cc:68:6b:a9:2b:75:24:29:3d:91:06:d9:22:65:84:22:
6c:6b:94:57:4c:36:46:01:06:95:34:b6:5e:ea:7f:f5:27:e0:
25:fa:1e:f6:4d:34:1e:4f:1a:c3:c7:14:53:c1:49:c0:5d:9d:
06:ad:5f:12:5a:25:26:8e:d1:4f:48:6b:a7:1b:25:f0:a3:18:
f7:42:29:36:66:3f:d3:10:69:9d:e4:8b:94:09:60:76:5a:24:
98:c6:91:10:af:44:ac:0b:d5:9e:cb:3d:f8:f8:68:6d:53:8d:
3a:d4:62:a7:2f:54:38:af:79:d8:d7:e7:cc:0d:ab:39:5d:3c:
60:93:be:8a:75:ee:ac:fb:4a:55:c3:9c:3b:84:ef:50:3b:0a:
4e:56:39:14:92:b6:88:68:58:04:5e:2b:b3:5b:df:22:a3:a7:
40:90:7c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:56 2026 by rpki-client