Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145273.roa
File: AS145273.roa (raw, json)
Hash identifier: 7dIEhC99eKKWD9IuHQvwx3PeyUZ6tNxor5ozKcVD/yA=
Subject key identifier: BD:2E:3C:52:43:90:81:C0:FB:35:83:17:F5:FD:E3:9E:93:C9:4E:83
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 60F6930D873B5841CB8574CF1EC65BC9ADC4EC16
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145273.roa
Signing time: Fri 22 May 2026 06:05:22 +0000
ROA not before: Fri 22 May 2026 06:00:22 +0000
ROA not after: Fri 21 May 2027 06:05:22 +0000
asID: 145273
IP address blocks: 240a:aa3f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:f6:93:0d:87:3b:58:41:cb:85:74:cf:1e:c6:5b:c9:ad:c4:ec:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:22 2026 GMT
Not After : May 21 06:05:22 2027 GMT
Subject: CN=BD2E3C52439081C0FB358317F5FDE39E93C94E83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:26:78:d2:c8:04:b7:d7:1e:92:37:b9:be:c4:
6b:3a:e3:8c:66:54:db:11:a3:ad:26:15:49:5d:28:
a5:0a:f5:80:df:64:d9:1b:e8:50:2c:60:35:68:5b:
54:3a:a8:1d:5d:bc:09:52:39:e6:7b:04:dc:6c:10:
8b:20:a5:a5:4e:41:f2:38:78:e8:c3:fc:4b:44:db:
60:53:d9:a0:d5:e1:51:c1:c4:d3:b7:4b:60:1c:8e:
cc:e4:8b:f9:0c:8c:31:08:1c:e6:12:b2:45:cc:2b:
f5:48:57:48:57:aa:31:65:5a:44:c1:8d:9e:d3:59:
43:ca:c8:1b:57:85:d1:da:a7:8e:c3:c9:d1:00:69:
c1:64:72:c8:b9:7b:20:09:11:a3:cb:d4:a2:84:60:
9e:d0:3d:45:f9:54:b6:75:b9:83:3f:ae:ab:72:3a:
d2:0e:ca:5f:27:dc:51:a7:35:ac:b0:7f:7f:73:38:
e9:7a:8f:77:63:d9:df:50:9d:9f:26:c4:d9:ce:ed:
3f:4e:5d:65:1d:fd:10:95:69:09:a5:43:11:f3:4c:
8b:02:8b:be:61:e6:7f:2d:3f:5f:d7:33:d2:80:d3:
cb:fd:73:cd:2c:de:b4:a2:94:87:11:66:5f:6a:09:
71:5d:74:ec:77:85:e6:95:a0:e6:16:f1:d4:f2:9c:
8a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2E:3C:52:43:90:81:C0:FB:35:83:17:F5:FD:E3:9E:93:C9:4E:83
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145273.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa3f::/32
Signature Algorithm: sha256WithRSAEncryption
2f:da:15:43:8e:6f:12:95:b8:db:1f:16:0b:a9:3a:05:03:1b:
6d:64:3c:c7:54:43:d6:08:be:18:a0:92:4b:73:b6:b4:4e:f2:
7a:db:50:6a:a0:cf:0b:d9:a9:a3:b8:6d:d5:fd:d9:43:3f:ad:
af:b5:9f:78:95:e9:aa:d3:14:c0:e4:57:a6:86:ec:44:0c:47:
7a:df:c8:07:a4:03:1e:38:6e:77:e0:bb:c1:3c:3b:75:b1:98:
7e:d6:6c:76:aa:54:c5:24:d4:8e:b5:c2:58:ed:6d:3a:0b:1b:
e1:19:6b:c0:31:92:1f:c5:de:2f:8c:70:0d:f7:cd:28:7d:27:
35:d2:c7:2e:8b:c6:3e:d2:b4:64:61:be:f2:91:61:20:db:d3:
ce:28:68:d6:e8:27:40:12:43:96:bf:9b:6b:b0:dd:69:e4:5d:
5b:f5:80:94:a5:30:dc:9c:8f:c2:36:fe:7b:1a:8e:82:2b:2d:
3a:01:62:a6:5a:2e:12:b9:93:68:71:e9:e5:60:72:94:05:64:
07:cc:76:37:5d:10:9a:91:b7:c9:c5:1a:95:0a:f3:0f:05:e5:
76:3b:c2:13:3e:79:f9:35:eb:3f:9b:77:95:cd:a7:41:fe:4a:
75:41:9b:58:8d:5f:97:fa:9b:dc:fa:71:65:50:ad:e0:39:0d:
56:fc:c9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:31 2026 by rpki-client