Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145249.roa
File: AS145249.roa (raw, json)
Hash identifier: QNTQhBXuniOQVFpbikgLl0Rso4M8lmjX3g3xfe7EGa8=
Subject key identifier: 6D:90:83:7B:2A:7F:BE:FC:9A:FC:EF:F7:B2:E4:4E:EB:44:2A:ED:0F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 01A98AD2AB16B3C546F395941A90B5BF30FC4EC4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145249.roa
Signing time: Fri 22 May 2026 02:47:38 +0000
ROA not before: Fri 22 May 2026 02:42:38 +0000
ROA not after: Fri 21 May 2027 02:47:38 +0000
asID: 145249
IP address blocks: 240a:aa27::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a9:8a:d2:ab:16:b3:c5:46:f3:95:94:1a:90:b5:bf:30:fc:4e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:38 2026 GMT
Not After : May 21 02:47:38 2027 GMT
Subject: CN=6D90837B2A7FBEFC9AFCEFF7B2E44EEB442AED0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ad:81:6a:40:55:de:b7:1c:8a:c7:e4:ee:34:
ea:39:94:fd:fb:18:4b:e0:c5:52:bf:df:c4:31:2a:
da:0e:aa:8f:ff:e1:57:77:6f:7e:36:cb:0a:82:8b:
ec:d0:e6:36:f6:5e:26:81:66:e7:04:81:54:98:63:
9a:00:e3:8c:10:d8:7d:d0:6e:0e:52:20:ac:c9:9c:
d9:02:fd:5a:ea:a3:8e:b5:57:f6:0a:b8:24:1e:b9:
f6:f7:f4:cc:fc:e4:a3:dc:2e:e5:0f:4e:70:23:83:
e5:9a:5e:9a:06:eb:37:ef:2d:26:59:1a:bc:87:f8:
eb:49:fc:c8:a5:5b:9d:ba:c1:14:b1:1d:2c:e1:1d:
b2:f1:21:0a:71:4c:f9:32:fc:99:b0:b8:c4:63:69:
73:b9:b2:1f:c8:c6:af:60:21:d3:e5:cc:63:ed:36:
22:75:99:16:4a:30:f4:e8:95:b6:75:c8:81:1b:28:
33:03:1f:60:65:50:db:51:12:41:a5:4e:a5:a1:59:
ad:f3:ed:1a:b3:03:7d:17:aa:eb:d4:39:de:a5:56:
a0:bf:6e:27:25:ec:9e:8e:1f:4d:f3:85:fb:ef:06:
93:57:d2:25:90:f4:b0:d1:ac:84:92:f2:3f:39:93:
b7:59:b1:a6:32:12:ff:4f:da:07:f6:77:70:2d:9c:
d2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:90:83:7B:2A:7F:BE:FC:9A:FC:EF:F7:B2:E4:4E:EB:44:2A:ED:0F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145249.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa27::/32
Signature Algorithm: sha256WithRSAEncryption
6a:03:11:4b:0b:ce:38:6a:c0:c5:56:58:be:ac:90:5a:6e:9a:
38:6b:d5:4d:f5:8c:66:ba:93:76:52:82:8a:de:57:b5:e8:07:
48:80:98:73:60:75:c3:ba:be:36:fb:0b:67:bf:4a:fa:1e:b9:
26:3f:9a:d5:8d:46:1a:93:dc:5d:63:3b:b8:e4:c9:b4:f5:6d:
5e:df:80:c4:41:19:7d:e8:2d:e4:5e:e8:4a:5c:e4:1e:69:b2:
c2:de:a5:21:71:b9:7b:2d:d0:bd:e3:e6:0e:19:c6:fc:c3:2a:
a3:84:09:cf:32:34:cb:0e:fb:be:7e:3a:e5:de:de:00:3b:81:
fa:b7:c2:ea:0b:b6:24:ae:7a:43:87:0b:80:70:4e:4a:48:33:
d4:20:ce:42:b5:9f:6b:ec:ca:d2:3a:62:11:c0:7d:30:dc:6f:
3b:c8:8e:78:bb:1d:d5:92:1b:2b:70:22:99:b2:3e:ab:2d:24:
8b:91:d1:36:10:93:5c:75:ef:ba:0d:68:93:fe:25:68:4d:17:
e1:4d:f4:f5:c4:fe:1d:46:e7:8b:67:07:da:f7:2f:0a:3c:32:
1b:ee:91:99:6a:a7:14:ca:af:dc:cb:1b:6a:66:15:5d:82:7f:
c3:2b:ad:ab:bf:c8:37:0a:9d:5d:4b:cb:7f:77:ca:eb:ee:63:
a1:e4:11:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:20 2026 by rpki-client