Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145211.roa
File: AS145211.roa (raw, json)
Hash identifier: 8hMsF5E+y/W6xzk5qiWIZpBiXiyZfRd4BEWMieSEa9k=
Subject key identifier: CD:EF:27:84:A5:CF:BE:7B:BF:7A:1E:FF:5C:98:A8:6B:FB:AF:51:4C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 289E1C6A63FD548BC112B7CC668BA257E1BB8F5E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145211.roa
Signing time: Fri 22 May 2026 04:26:56 +0000
ROA not before: Fri 22 May 2026 04:21:56 +0000
ROA not after: Fri 21 May 2027 04:26:56 +0000
asID: 145211
IP address blocks: 240a:aa01::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:9e:1c:6a:63:fd:54:8b:c1:12:b7:cc:66:8b:a2:57:e1:bb:8f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:56 2026 GMT
Not After : May 21 04:26:56 2027 GMT
Subject: CN=CDEF2784A5CFBE7BBF7A1EFF5C98A86BFBAF514C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:11:79:5b:3b:93:45:fc:5c:6f:9b:54:b9:7e:
86:e2:43:58:15:ae:a6:d0:d4:31:e6:79:10:aa:90:
94:9c:64:34:b2:a9:d3:a3:bd:db:b6:4b:5c:1e:1d:
7a:53:e0:32:d1:22:66:ce:0b:10:e1:79:45:0d:22:
d1:c7:8a:b8:5e:ea:1d:ae:27:8d:02:c4:54:02:d1:
3a:d9:b5:02:05:a0:d7:ed:58:90:aa:64:e2:12:b7:
a6:44:2f:86:56:7e:d2:0f:0e:bf:a3:13:65:61:77:
4f:41:aa:de:8d:07:06:df:65:05:05:37:3b:52:97:
3d:ed:94:e2:47:cd:63:11:13:2e:e3:8e:de:d2:28:
1a:99:2a:5a:a3:14:1f:e2:a1:15:09:42:c6:cc:4d:
14:80:9e:7e:06:04:ed:bf:4b:0b:29:7d:df:0a:dc:
49:d1:65:83:4b:3e:04:52:4e:15:6d:28:3b:05:30:
34:2c:3f:cc:9c:2d:e5:12:08:c7:94:9c:ca:cb:0f:
8c:20:96:f0:6d:e1:69:cb:04:5f:fd:45:ad:29:99:
61:1e:00:29:37:33:93:d5:06:1d:ca:36:a0:f0:1c:
ee:b1:74:c8:72:33:00:8c:5e:dc:c2:38:bf:27:eb:
ee:88:5f:30:ba:51:61:6d:f8:58:84:57:82:2f:37:
61:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EF:27:84:A5:CF:BE:7B:BF:7A:1E:FF:5C:98:A8:6B:FB:AF:51:4C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145211.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa01::/32
Signature Algorithm: sha256WithRSAEncryption
87:8b:2b:61:39:6d:ca:3c:f7:cf:83:e4:38:b5:49:59:5e:e1:
7f:b7:2a:b2:b1:9a:77:a7:99:3d:3b:85:24:d8:6e:b3:a2:fb:
29:a3:44:9d:1c:50:d1:00:a4:b1:63:c5:7b:a7:18:87:b0:25:
02:25:75:3f:da:f4:b7:f8:29:36:33:d0:d2:01:90:2e:f4:c9:
be:57:b5:6e:e4:9b:4d:fe:c8:0c:e5:ec:ec:28:bc:77:cf:49:
d0:84:a3:7c:ab:c5:39:4a:7b:3c:b1:15:fc:07:1e:c1:7d:61:
04:49:bc:f6:70:17:90:f3:97:cc:b2:34:5f:e5:81:fc:1c:56:
99:34:47:c8:dd:3c:88:d1:f1:ed:d9:47:3d:61:de:2d:19:cc:
bb:21:29:28:f1:1a:91:2f:34:90:ff:95:4d:05:e2:5e:61:7e:
9d:04:f5:2c:02:e7:6c:0c:1a:2b:43:f0:d1:cc:a6:06:db:f5:
de:da:e2:09:fc:66:db:3d:0e:35:5f:ea:9f:6e:3f:78:16:e3:
72:6b:ac:17:10:f8:6b:1d:50:09:b0:80:87:a1:06:00:7c:13:
8b:33:90:04:0b:e8:cc:6f:67:2b:04:df:df:51:6d:c7:ee:69:
1c:59:3b:68:39:7c:27:3e:d0:9e:ff:6f:4e:b7:49:17:cb:88:
42:a9:6d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:30 2026 by rpki-client