Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145260.roa
File: AS145260.roa (raw, json)
Hash identifier: OTWYwepm4ZhNrTVi5ZSrm/2B0EZUUKJsCFqf1dXkOPM=
Subject key identifier: 2C:0E:71:7E:9F:32:7B:5E:44:06:D7:0C:A2:FB:38:71:32:DF:08:09
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2A4E3AF757C3B9F4F32950945A9FFAA3FC4BE296
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145260.roa
Signing time: Fri 22 May 2026 06:58:46 +0000
ROA not before: Fri 22 May 2026 06:53:46 +0000
ROA not after: Fri 21 May 2027 06:58:46 +0000
asID: 145260
IP address blocks: 240a:aa32::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:4e:3a:f7:57:c3:b9:f4:f3:29:50:94:5a:9f:fa:a3:fc:4b:e2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:46 2026 GMT
Not After : May 21 06:58:46 2027 GMT
Subject: CN=2C0E717E9F327B5E4406D70CA2FB387132DF0809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6e:f5:97:73:f2:87:26:c8:c3:6a:1c:a2:60:
55:cc:dc:2c:ac:4f:cc:8c:ad:63:7f:41:49:eb:c2:
1e:79:e0:e6:85:74:04:e3:9a:b3:4b:7c:c0:ee:70:
4c:cc:1c:c8:54:c4:1e:9e:5b:f6:a2:70:43:99:52:
eb:7f:dd:93:cc:25:f5:f5:6f:cd:cc:f7:19:0e:2c:
3b:d6:91:77:4d:23:20:2a:46:57:ee:69:55:96:b3:
b6:20:65:21:f9:1c:1c:b0:8a:bd:30:a9:46:b6:48:
cd:61:17:a3:34:b3:90:14:cb:eb:cc:ee:04:8c:6a:
a9:6e:f7:ff:46:9b:b4:00:64:a5:6c:53:28:8c:88:
1d:90:a1:5e:74:ad:d2:9e:06:6d:99:78:a7:cf:c4:
b4:78:5b:54:10:14:d1:f4:15:72:c7:35:8e:f9:3e:
41:de:b2:3c:71:a7:29:f1:17:a6:a1:27:86:a2:59:
9e:f4:1a:19:2e:b6:a5:33:8b:6c:68:d8:fd:17:e7:
c4:3a:c5:77:68:12:6b:f7:f0:6a:ff:77:6c:78:0c:
22:63:0b:b0:ae:42:a1:cf:04:b3:d7:a4:2d:68:77:
6a:df:59:d8:2d:2a:a9:bc:85:da:31:2f:e3:2f:d3:
01:36:1f:f7:fc:43:7f:b9:16:86:52:9d:85:f7:52:
69:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0E:71:7E:9F:32:7B:5E:44:06:D7:0C:A2:FB:38:71:32:DF:08:09
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145260.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa32::/32
Signature Algorithm: sha256WithRSAEncryption
7a:07:87:0e:fb:82:f0:b3:5c:3a:ee:8a:c9:ae:b9:2f:6f:57:
c8:16:c9:e3:4f:32:7d:0b:6a:07:9a:08:98:5a:41:6c:69:ed:
c3:8c:a9:fb:78:46:dd:59:3e:23:6f:7c:8b:f2:c0:60:53:94:
3b:de:f7:19:39:74:b3:21:52:75:00:93:11:7c:a9:19:51:01:
30:76:ef:52:41:59:09:23:74:44:11:1a:28:9e:bb:ac:07:83:
ed:db:42:af:36:64:41:aa:78:0a:bf:3b:59:80:15:4f:a4:b6:
8d:95:15:83:61:f3:95:71:65:72:18:00:d0:9d:e4:57:42:1a:
79:c9:20:d6:4f:6f:cc:99:12:62:4f:9a:3d:4e:73:30:b5:d8:
0e:5f:78:b9:a3:8a:aa:91:8a:c8:5b:6b:21:44:87:82:0e:c3:
44:e1:7e:1b:4d:1c:4e:bb:c9:bc:42:40:ea:9b:1c:cb:f8:82:
54:ef:cb:62:6d:60:70:04:c9:e7:ea:55:ca:6a:45:f0:fb:38:
99:fc:7b:fd:13:49:6d:a6:34:7b:44:08:aa:2d:c1:12:6a:73:
b3:ea:7f:cf:e3:8e:6f:d8:c3:0f:92:84:78:e8:0f:f1:92:aa:
ba:56:b3:5b:e0:ac:8c:e3:e9:59:eb:05:c2:c4:d9:a0:fd:62:
c2:bb:c4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:19 2026 by rpki-client