Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145220.roa
File: AS145220.roa (raw, json)
Hash identifier: H0s10NiTj36e/Lv50koGC0E/c0qO0lZBQowPUifKEnk=
Subject key identifier: FC:24:7B:59:2B:BD:08:4A:9A:16:22:36:6C:A9:64:FB:05:18:86:A7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2E0949D943BA00DB7EA0E234996A1157683BC11C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145220.roa
Signing time: Fri 22 May 2026 02:47:47 +0000
ROA not before: Fri 22 May 2026 02:42:47 +0000
ROA not after: Fri 21 May 2027 02:47:47 +0000
asID: 145220
IP address blocks: 240a:aa0a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:09:49:d9:43:ba:00:db:7e:a0:e2:34:99:6a:11:57:68:3b:c1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:47 2026 GMT
Not After : May 21 02:47:47 2027 GMT
Subject: CN=FC247B592BBD084A9A1622366CA964FB051886A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1e:84:e0:17:70:5c:c6:0e:ca:4b:47:72:e2:
21:ac:e3:da:b4:90:a3:99:cd:92:07:a9:0e:0e:65:
60:89:c4:4e:db:5e:aa:5a:d3:02:86:9e:bd:8d:e9:
f5:6d:08:2a:30:d9:e6:80:d7:d8:b2:a9:df:27:12:
be:83:49:8c:72:f3:e7:c4:bf:e8:19:83:52:34:4d:
7f:8f:76:82:10:f0:89:87:e9:36:0a:b0:2f:93:6b:
ca:93:14:56:9a:aa:56:7d:2f:c7:f2:8a:cd:f6:f4:
7e:0b:30:02:8a:74:ec:7c:bd:5d:8f:f6:35:ca:17:
7a:73:9f:2f:89:1e:b5:6b:fd:c4:45:34:4d:11:79:
96:14:0b:1a:f7:38:08:44:81:35:cd:0c:fd:f2:f7:
4f:de:c2:d3:2d:11:54:c5:cb:0f:2f:4b:95:cc:d6:
2c:9b:54:a2:62:63:40:ad:82:58:80:9e:2f:7f:d0:
2c:38:05:bd:49:5a:78:42:9c:ce:a0:b6:f0:b0:f8:
d2:d9:94:28:d1:aa:dc:c9:db:73:6f:76:7b:05:05:
7a:79:1e:12:c6:91:aa:fd:55:8f:04:c6:21:d8:cc:
f2:c2:c4:b3:82:d8:bd:c0:b7:32:60:61:1c:4b:33:
c0:e6:ff:3a:c6:6c:5d:94:19:26:07:97:af:c9:cd:
bc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:24:7B:59:2B:BD:08:4A:9A:16:22:36:6C:A9:64:FB:05:18:86:A7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145220.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa0a::/32
Signature Algorithm: sha256WithRSAEncryption
0f:99:b2:24:81:7e:c6:c8:89:64:64:94:09:6e:fc:e9:b0:92:
a5:04:a0:be:0f:80:53:ea:db:d1:e1:ee:24:ae:7c:77:c9:84:
7e:05:f1:be:26:b1:7a:c5:72:16:d8:7e:a1:bb:d1:2e:79:49:
08:e2:2e:f2:24:5b:a7:0a:f2:d5:73:21:15:51:7d:d0:1c:5d:
d0:89:2d:39:4a:d2:5a:4e:db:e6:89:f2:85:2c:21:57:83:27:
7b:f6:33:4e:51:6a:9a:74:23:c4:d0:ff:c6:be:87:41:90:5b:
ea:cf:6a:57:b3:b9:e1:6c:88:39:f2:b3:e9:6f:cf:53:31:3d:
70:e0:42:b1:92:14:40:54:61:9d:a6:63:fe:50:b4:bc:d8:b8:
3f:ca:c9:68:57:9f:a7:e3:3f:1b:1b:b3:e8:04:ac:3a:fe:33:
90:6d:85:4d:3f:fc:f0:a3:c8:f4:9d:98:f9:75:9b:f3:3f:3b:
2e:a3:dd:5d:a3:45:fc:9c:76:db:43:ca:f6:de:e5:f4:b8:6e:
5b:6d:41:fe:8d:74:8d:8e:c1:52:48:cd:9f:26:a5:e9:42:ae:
74:c0:0c:cd:7e:c8:84:4a:e0:76:44:4d:7f:cb:1e:13:21:14:
bf:9f:8f:4a:9c:71:96:0e:b9:50:2c:3d:d2:9b:17:0c:ea:30:
74:9c:23:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:57 2026 by rpki-client