Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145259.roa
File: AS145259.roa (raw, json)
Hash identifier: qSw7542bGYnv82aHlDSWeoMMBYXf3Dl8N2P9srpNlxE=
Subject key identifier: 1E:94:04:5C:3E:6E:30:73:B2:47:4B:5D:3B:5E:95:36:0E:EC:06:5F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4977DC64301B24A1693233848E349B39D61EFFB8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145259.roa
Signing time: Fri 22 May 2026 04:08:31 +0000
ROA not before: Fri 22 May 2026 04:03:31 +0000
ROA not after: Fri 21 May 2027 04:08:31 +0000
asID: 145259
IP address blocks: 240a:aa31::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:77:dc:64:30:1b:24:a1:69:32:33:84:8e:34:9b:39:d6:1e:ff:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:31 2026 GMT
Not After : May 21 04:08:31 2027 GMT
Subject: CN=1E94045C3E6E3073B2474B5D3B5E95360EEC065F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:ee:d9:9a:f9:8f:2a:17:65:f0:e6:af:5f:
22:2c:91:c7:e9:29:2c:0e:6f:1e:cc:31:e4:61:04:
50:f6:4d:19:b1:60:d6:27:1e:cf:b1:ad:89:75:70:
e7:b1:90:ed:85:63:c5:c7:94:84:c1:56:5a:dd:18:
2d:4b:2e:b0:c7:9a:e1:12:f7:2e:84:e9:4d:29:1d:
5f:2f:fc:e5:0a:40:77:74:89:f7:eb:d1:7a:6e:31:
a9:fc:de:82:4a:18:dd:b2:35:a7:23:a7:62:57:d9:
bb:8f:bf:e1:04:e3:47:89:a5:48:1d:72:50:f2:96:
a4:ba:8c:8a:53:47:2f:7a:5a:0f:b3:83:b5:26:ca:
74:f0:05:81:4f:af:6e:a0:a0:71:32:21:f3:ef:b0:
da:25:b0:3a:11:f1:94:22:9d:4c:0c:b3:7a:4d:4e:
cb:f9:a4:e5:39:12:26:de:69:eb:e7:5f:6a:f0:ef:
fe:4a:1d:82:39:61:07:83:7f:3b:a8:00:67:98:0a:
1b:04:92:b1:42:db:2a:24:f6:f9:fa:bf:51:b1:43:
26:1a:44:2c:ec:87:b8:17:44:4d:7f:ad:ed:e8:2e:
b9:59:9a:58:01:0d:9d:be:7e:65:4f:b2:81:b0:e8:
1e:76:ff:21:25:78:75:3a:93:1d:c1:c7:68:8c:1c:
ee:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:94:04:5C:3E:6E:30:73:B2:47:4B:5D:3B:5E:95:36:0E:EC:06:5F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145259.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa31::/32
Signature Algorithm: sha256WithRSAEncryption
8b:f1:49:69:58:d7:f0:b2:ba:86:f4:5f:f5:81:67:65:33:86:
83:14:ab:7e:59:fc:12:54:d0:72:63:b9:44:4a:4a:40:64:2c:
9a:3e:ce:f7:6d:50:a2:f9:d3:f7:5a:11:84:18:27:0f:80:4c:
03:f1:4d:d4:e9:bf:fd:65:2e:c0:2d:70:88:0e:e8:6c:c3:26:
87:c6:74:ed:25:b8:a8:8f:41:db:68:b7:72:75:2e:99:47:e1:
64:2f:ce:0f:16:34:69:f9:91:37:a6:3b:75:a0:2d:50:ca:4c:
62:c4:10:67:a8:2e:25:6c:0c:46:31:fc:b5:f9:a8:3d:3d:29:
9a:62:e8:65:46:57:7d:64:8e:93:e8:99:29:c8:f5:95:54:b6:
e3:4a:b4:06:e1:ec:21:b2:7d:1d:e7:d2:86:1c:fa:97:38:ff:
d7:99:57:7e:e4:a2:c2:c3:67:95:ac:5b:f5:1e:3f:de:59:1b:
18:e9:80:15:b9:62:b7:1b:42:3c:a9:f9:db:75:86:2a:ce:18:
de:db:e2:c1:86:39:5e:e0:51:eb:e8:27:9f:e3:64:b2:50:4f:
ad:ef:50:8d:c7:f0:63:61:da:4a:b0:c2:62:86:7c:79:fa:5a:
00:c0:e7:06:d4:2e:97:aa:98:ab:3c:99:01:21:09:85:49:57:
a8:ee:54:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:27 2026 by rpki-client