Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145207.roa
File: AS145207.roa (raw, json)
Hash identifier: C1b+rl0qXd8SF103BBFCqCaa6z8lEdEAuemAR7oMos8=
Subject key identifier: 01:E8:33:79:19:D3:E1:8D:01:A1:AA:5E:DC:F5:B2:DA:CE:B2:8F:1A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 21B6D7B8E083EDB06365BFCF8732E6C2AED0BB56
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145207.roa
Signing time: Tue 26 May 2026 06:30:41 +0000
ROA not before: Tue 26 May 2026 06:25:41 +0000
ROA not after: Tue 25 May 2027 06:30:41 +0000
asID: 145207
IP address blocks: 240a:a9fd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:b6:d7:b8:e0:83:ed:b0:63:65:bf:cf:87:32:e6:c2:ae:d0:bb:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:41 2026 GMT
Not After : May 25 06:30:41 2027 GMT
Subject: CN=01E8337919D3E18D01A1AA5EDCF5B2DACEB28F1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b2:03:ff:70:24:26:94:0e:8c:22:8d:45:41:
ae:9c:44:22:14:d5:96:97:b6:89:c0:aa:90:2e:34:
e4:da:01:65:fa:08:55:b4:bd:a5:1c:0e:84:0a:3c:
1d:11:11:d6:b5:4b:4c:08:7e:78:10:a5:f9:fd:45:
06:a8:88:8b:16:f6:65:69:49:b8:1a:8a:23:8b:c5:
0f:f2:2f:f2:a4:c1:f9:af:29:23:72:a4:80:5f:44:
ae:64:eb:af:2f:34:b6:0a:ce:2e:bb:1b:37:71:fc:
1a:dc:be:bc:4f:a6:6b:66:1c:25:19:59:1c:e7:23:
17:54:22:8b:e1:23:2b:71:d2:4a:89:9d:69:ce:4b:
bb:b2:35:da:24:df:57:37:eb:19:fb:43:79:aa:0f:
50:6d:79:3d:59:ec:c8:6e:7d:1e:2d:41:9d:58:78:
af:57:38:a8:c7:1b:47:49:20:96:e8:a5:1a:3b:ed:
b3:bd:8b:34:75:10:df:2f:2d:9c:88:e4:01:e7:b4:
87:b1:ed:9b:e2:98:d1:35:a0:c4:04:56:a6:5b:c5:
9b:89:0e:e0:fb:da:0b:61:c2:30:89:25:7f:3a:46:
b2:2a:0b:c0:89:2c:84:7f:80:f1:c7:c2:d1:50:47:
54:96:80:73:83:56:a1:ad:b6:18:3c:b0:c8:76:24:
d5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E8:33:79:19:D3:E1:8D:01:A1:AA:5E:DC:F5:B2:DA:CE:B2:8F:1A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145207.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9fd::/32
Signature Algorithm: sha256WithRSAEncryption
b5:eb:56:2e:73:94:2c:b5:1d:af:83:44:3a:93:95:ae:02:ae:
3c:a3:bb:64:76:90:53:b6:85:61:c2:ea:ac:88:e6:13:fa:4d:
b9:a8:a9:23:0a:35:4c:65:2c:f8:f5:2f:bd:e7:22:d6:94:fc:
a8:b8:49:db:76:f8:70:1b:63:92:2d:73:fe:61:fd:eb:c8:5e:
cb:8a:99:cb:bf:bf:41:5e:70:3c:70:cd:21:f5:2a:c5:ca:b9:
ff:87:b3:5c:e4:85:92:fb:17:b8:50:c5:4e:ea:99:e4:7b:c6:
0a:8e:c4:0b:47:76:ea:8e:f5:ca:ba:06:f9:17:59:73:09:0f:
66:2a:65:3e:af:9c:f1:69:a5:0d:8f:b6:7b:7d:6a:46:c4:42:
a1:38:76:a3:9b:3d:6f:fd:82:ce:49:3c:17:31:85:10:d4:6e:
3a:fa:ad:ec:31:e5:f3:97:76:9e:78:97:f6:d5:11:69:7d:fb:
09:c8:0d:bd:0e:2c:82:75:ec:c5:9e:23:f5:10:01:dd:65:af:
dd:4e:70:0b:be:4c:89:38:0d:e4:50:70:b1:18:26:4d:ef:9e:
b1:26:16:df:37:54:ec:ef:e5:ea:be:ad:dd:84:1b:20:61:a0:
12:a1:0c:c7:78:6a:6b:ff:51:62:19:d2:89:de:b2:b2:db:51:
a8:d1:8b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:31 2026 by rpki-client