Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145222.roa
File: AS145222.roa (raw, json)
Hash identifier: DHs+jd0XqpzROnKrndTmJ4X7M+yQF5MwYJIyCaEsR94=
Subject key identifier: C5:99:F3:8E:A8:CA:E1:57:1B:C3:32:DB:B7:55:9A:92:83:38:8C:E1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1D8D42CFC40E4EB2EC557784759CB7652D2277CF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145222.roa
Signing time: Tue 26 May 2026 02:35:10 +0000
ROA not before: Tue 26 May 2026 02:30:10 +0000
ROA not after: Tue 25 May 2027 02:35:10 +0000
asID: 145222
IP address blocks: 240a:aa0c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:8d:42:cf:c4:0e:4e:b2:ec:55:77:84:75:9c:b7:65:2d:22:77:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:10 2026 GMT
Not After : May 25 02:35:10 2027 GMT
Subject: CN=C599F38EA8CAE1571BC332DBB7559A9283388CE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e9:84:79:d1:31:64:67:88:98:11:83:5b:16:
f1:b5:db:aa:b2:b0:32:5e:aa:1d:06:39:aa:69:9e:
d0:fb:ed:da:1d:03:47:53:cb:05:3a:1e:b9:c7:05:
3f:0c:2a:a5:d2:53:ed:7c:9d:a9:9c:ff:62:2c:b7:
c9:56:24:c0:e7:dd:21:71:98:97:15:83:e2:ac:b5:
4c:b1:e0:07:88:ad:5e:30:72:55:01:1d:cb:a3:41:
e0:77:86:ce:01:7f:23:7b:2b:28:f2:7f:b8:58:01:
4b:3f:3c:9e:1a:17:68:11:40:2b:9f:97:e2:24:1d:
1f:74:39:fa:82:02:81:ce:75:90:c5:18:4c:d7:19:
b7:ff:90:b0:a6:89:46:14:e7:d9:a2:15:8d:fe:e2:
fd:1e:2c:05:9c:35:e6:63:f4:b1:23:7b:5e:a8:58:
e5:5d:4a:f8:a9:a7:0d:8d:aa:4c:94:74:8d:2e:f9:
ca:cd:f5:0c:44:98:19:26:5c:d3:7d:9d:08:bb:34:
2f:fc:72:ec:db:1f:69:7b:05:6e:a4:10:49:c1:38:
ff:f5:8b:8c:0d:05:6c:d6:0c:43:ee:58:a0:fa:ae:
4f:4b:9a:b2:cc:cd:06:a1:67:68:7e:13:51:21:1e:
1a:b0:39:3b:46:c9:25:b3:aa:9b:d7:8b:1a:5a:ea:
59:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:99:F3:8E:A8:CA:E1:57:1B:C3:32:DB:B7:55:9A:92:83:38:8C:E1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145222.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa0c::/32
Signature Algorithm: sha256WithRSAEncryption
6e:e2:fb:4a:f5:bc:29:88:41:d1:d4:61:e3:1e:0e:4f:f5:82:
29:7e:52:d9:8e:c8:82:68:a6:37:f0:16:f7:ae:f2:07:b4:26:
df:fe:b7:14:f9:00:35:4c:c4:f9:4e:6d:54:63:fa:f9:d0:82:
05:84:a5:c0:8f:2f:e0:a0:26:09:ba:0f:d3:9d:45:9c:23:2e:
ab:b9:91:9a:f6:38:1d:5a:89:7b:a6:f3:72:d7:66:32:8a:ed:
f5:59:41:22:6a:5e:f8:69:70:81:5d:b3:4c:03:13:37:78:05:
05:7f:6d:51:5d:3b:52:9f:a5:76:9c:9d:4f:20:37:6f:ab:84:
96:86:63:1e:c4:08:de:a9:b9:5d:b6:70:09:4f:98:62:40:ee:
80:80:57:0a:79:a9:47:d9:7c:81:15:bd:02:77:a7:50:8e:80:
7d:3e:56:3d:78:48:c8:13:01:0d:09:5a:df:c5:43:35:24:43:
83:0c:02:67:19:db:80:e6:17:e1:3c:ef:b8:ef:ba:e9:a0:45:
04:5e:de:1b:7b:8f:fa:da:e0:8c:b9:08:8c:5a:8f:69:1a:3a:
20:18:20:8a:d9:e7:41:30:18:e9:4e:4b:de:07:68:a7:d2:ef:
b9:b3:21:3c:56:86:6a:bc:37:68:50:f2:3c:ad:bc:7a:9b:d3:
d0:dd:2f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:41 2026 by rpki-client