Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145270.roa
File: AS145270.roa (raw, json)
Hash identifier: u8tMqlj4t2KsVxoLfIZFwWRURBArQj9S7Bk2O5Tc+XY=
Subject key identifier: 31:89:EA:C7:BA:69:F7:03:33:CC:81:48:55:8D:64:90:F7:4A:75:6F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2B18A39B52F3F71BF48862D88322028C4E90B6EA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145270.roa
Signing time: Fri 22 May 2026 07:32:20 +0000
ROA not before: Fri 22 May 2026 07:27:20 +0000
ROA not after: Fri 21 May 2027 07:32:20 +0000
asID: 145270
IP address blocks: 240a:aa3c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:18:a3:9b:52:f3:f7:1b:f4:88:62:d8:83:22:02:8c:4e:90:b6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:20 2026 GMT
Not After : May 21 07:32:20 2027 GMT
Subject: CN=3189EAC7BA69F70333CC8148558D6490F74A756F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9a:31:6f:1f:b7:f5:1d:5a:8c:88:d0:49:3c:
5f:43:41:c5:8d:ab:52:e9:22:b5:b3:c5:b4:cc:3d:
db:79:23:6a:14:d4:74:5d:3d:6c:61:72:ca:66:2e:
ca:23:48:79:98:ef:b8:f3:5e:7b:d1:cd:40:b7:6a:
36:c9:05:dc:ce:bb:cf:08:b0:72:a9:92:86:fc:76:
33:55:ef:e0:82:89:b1:96:9a:1d:f5:15:4b:f4:a5:
c3:db:ed:91:6d:d4:aa:8e:6b:e1:b0:e8:fd:12:49:
c4:5e:c3:3b:4d:e9:3e:45:f1:62:ab:d7:44:9c:cd:
9d:03:e7:67:9e:df:d2:0f:c5:67:e5:4b:97:64:79:
c6:5f:0f:1e:8a:fd:40:c2:52:eb:29:aa:73:fa:2d:
a3:f2:dc:bf:02:ea:4c:e3:e3:54:8b:21:89:13:af:
8e:27:53:33:2e:92:ec:9d:9d:9a:05:83:bc:63:47:
f0:4d:e4:bf:71:84:78:b9:b4:37:56:87:94:b4:a1:
57:f9:ea:63:4d:1f:2b:00:56:e4:2d:f8:4e:f4:66:
65:13:5b:1b:7c:40:8f:e6:b7:f6:68:2f:80:2f:24:
f5:d7:fc:43:d9:bf:60:86:e9:59:46:11:9d:42:f0:
7e:b4:d6:76:dd:ad:13:3b:30:69:88:5b:16:d7:83:
48:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:89:EA:C7:BA:69:F7:03:33:CC:81:48:55:8D:64:90:F7:4A:75:6F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145270.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa3c::/32
Signature Algorithm: sha256WithRSAEncryption
4e:ab:87:e7:7c:98:da:05:fd:f1:08:c1:8c:92:89:13:52:40:
90:a6:1e:0e:79:20:31:f3:eb:51:aa:1d:3b:7e:04:91:38:58:
22:63:b0:fd:d2:81:5d:69:0f:24:04:d1:92:79:2c:e8:5f:3e:
35:ee:44:98:14:ac:d1:0c:73:69:90:f8:90:bd:4b:95:ff:0c:
26:2a:c8:e9:0d:40:e3:1b:a8:1a:a5:9d:45:15:4f:a7:c7:2d:
b0:8a:8b:fa:63:e6:68:73:60:9c:41:d1:1b:96:c9:91:73:76:
2e:82:bb:4e:7e:c2:49:12:58:c7:c5:59:de:e0:52:c2:6c:5b:
1e:b0:7f:ef:9a:76:a0:b3:57:b6:23:57:3e:9d:7b:7e:e8:5d:
ae:aa:bf:de:a9:73:7d:5e:c9:47:5d:86:93:8f:88:73:9a:ba:
4c:5b:cf:1b:9f:5e:98:93:98:23:97:72:80:df:bf:cf:7a:92:
bd:56:da:9c:a9:4b:2e:61:e0:13:d7:7d:5b:80:e5:ac:4c:42:
d3:66:18:c3:b0:d7:0e:13:73:c8:a4:9b:19:fa:56:fd:35:88:
59:14:f1:6c:86:68:16:dc:8f:e0:0c:c0:f7:44:e9:3a:25:31:
96:b3:b7:8e:2c:78:b7:15:4b:d1:60:d2:12:4b:cd:a7:bc:de:
2d:b0:f7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:04 2026 by rpki-client