Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145296.roa
File: AS145296.roa (raw, json)
Hash identifier: LzHjA6rPtTfgAY5JyQow7Y39w3rakSytC47Iy8CRrHg=
Subject key identifier: 1F:0D:99:F9:6E:22:34:22:F8:7A:32:F6:AF:BE:11:E3:14:F2:7B:AB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 47D7A61A4F2A6DEE1A627F536ABDFAAA4433C285
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145296.roa
Signing time: Fri 22 May 2026 04:26:59 +0000
ROA not before: Fri 22 May 2026 04:21:59 +0000
ROA not after: Fri 21 May 2027 04:26:59 +0000
asID: 145296
IP address blocks: 240a:aa56::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:d7:a6:1a:4f:2a:6d:ee:1a:62:7f:53:6a:bd:fa:aa:44:33:c2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:59 2026 GMT
Not After : May 21 04:26:59 2027 GMT
Subject: CN=1F0D99F96E223422F87A32F6AFBE11E314F27BAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:12:39:7a:0a:4b:08:cc:10:f7:16:bf:84:0f:
03:d4:2a:bd:1d:6f:a4:1c:5f:50:f0:47:3d:e8:a0:
d3:15:5e:c9:31:1b:c0:d2:8f:f2:a8:c4:1f:c5:03:
f3:77:09:66:1f:e1:38:18:56:25:69:93:ff:38:40:
61:76:01:2c:49:c0:9d:38:d5:f8:6d:68:92:6f:22:
16:67:de:9a:7b:c5:05:3b:08:23:66:fc:e5:fd:c2:
bd:f0:1a:0d:a8:2e:41:bf:ba:60:fd:f8:68:bc:0c:
eb:6b:18:9b:7e:66:e5:cc:35:40:1e:d4:95:fe:7b:
d9:72:fa:fa:e4:de:19:08:34:d9:c9:3e:a0:89:e4:
b4:1f:8d:01:30:23:4b:08:99:dc:b9:bf:d7:26:92:
d1:68:94:bd:47:dc:79:17:06:9e:95:1e:ec:26:f1:
32:48:5a:7b:fc:07:60:60:3f:c2:0b:33:64:19:59:
b0:cb:05:73:50:0f:cf:b4:87:96:48:68:e8:58:70:
fb:cf:3d:06:1f:2b:f5:74:f2:34:42:bf:a5:b0:b6:
d4:92:33:46:82:b0:66:2a:ed:cd:6a:39:c5:65:6f:
4c:d3:10:b0:9b:d9:f2:c8:0f:a7:9d:fd:b4:dd:9d:
2b:f6:f2:16:4a:d2:80:e5:d4:33:d1:6b:aa:78:bb:
c2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0D:99:F9:6E:22:34:22:F8:7A:32:F6:AF:BE:11:E3:14:F2:7B:AB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145296.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa56::/32
Signature Algorithm: sha256WithRSAEncryption
1a:e3:ce:9a:89:c4:7e:cc:ab:80:e3:ec:4c:12:a0:fc:ef:e0:
81:31:66:37:8a:97:f6:81:d2:a5:32:c1:f4:ac:91:24:db:ad:
98:0a:6e:e6:9f:46:b5:1c:78:65:bd:34:51:af:06:93:c5:bf:
3d:f9:d3:db:9b:93:aa:93:1e:94:7d:34:b6:78:7c:26:4e:2c:
01:ba:00:0c:e8:5f:27:85:11:18:89:09:44:bd:26:10:73:12:
c6:6c:9e:2a:e1:c3:ee:d8:51:20:4a:62:12:fc:aa:ae:d3:a9:
0f:60:2f:06:56:f7:9a:4e:9e:47:34:83:53:89:cc:e3:c6:7c:
6b:10:56:1f:87:47:28:a1:81:1b:02:13:ce:ac:03:e0:b5:9f:
c7:fd:85:85:f3:4b:2c:05:c9:f8:d5:0d:69:45:26:17:c3:db:
a9:4e:87:d2:d9:c6:b1:65:ad:30:68:80:16:bb:f0:6b:33:fb:
cf:0e:b1:7b:b1:03:79:fe:d1:eb:96:1a:ee:b4:37:d1:ad:c7:
b9:d6:dc:59:11:9e:8a:5f:c9:30:92:c9:12:35:fc:b8:37:6a:
ef:c4:72:fb:c4:8e:25:ef:20:ae:5d:5d:93:c9:bf:df:1f:d6:
b7:87:99:68:81:93:0a:f8:a2:62:12:6d:99:c8:6b:db:16:98:
bb:71:a3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:46 2026 by rpki-client