Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145300.roa
File: AS145300.roa (raw, json)
Hash identifier: TuVTMn3txISAiNVUQNH06q88wY5a5aXSaYxvPZPUbD0=
Subject key identifier: 59:72:FC:BF:94:1A:38:34:2B:40:73:E4:27:53:20:55:55:70:0B:AD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 15E8BFFFAAF743C496AB87302B3C1678A1F58080
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145300.roa
Signing time: Tue 26 May 2026 03:16:51 +0000
ROA not before: Tue 26 May 2026 03:11:51 +0000
ROA not after: Tue 25 May 2027 03:16:51 +0000
asID: 145300
IP address blocks: 240a:aa5a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:e8:bf:ff:aa:f7:43:c4:96:ab:87:30:2b:3c:16:78:a1:f5:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:51 2026 GMT
Not After : May 25 03:16:51 2027 GMT
Subject: CN=5972FCBF941A38342B4073E42753205555700BAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d8:65:2c:db:58:61:20:a9:d8:35:82:a3:d8:
8a:46:da:b2:0a:61:4e:6c:4b:d3:0b:e4:98:33:90:
e8:13:3b:ac:29:5b:c6:87:2b:43:b1:c7:17:63:07:
8f:73:04:fd:ad:16:d0:b3:cf:d5:ef:73:cb:47:ad:
24:9e:94:7f:d8:66:23:13:cf:42:84:10:d1:cb:01:
4f:3f:83:8a:4d:ff:ba:79:93:5d:49:ee:fd:82:ff:
14:ea:56:51:72:68:37:8b:61:bc:63:d9:5b:35:18:
07:ee:0e:4c:0d:96:92:54:22:f0:ef:0d:78:11:39:
16:a3:42:41:fb:ea:5a:bc:c0:64:f1:15:1c:f8:d8:
94:2c:ed:c8:70:dc:91:cb:20:b2:2f:e1:77:c9:d4:
54:b0:92:56:f1:1c:bc:3b:0c:1e:ed:a1:8c:42:f7:
3a:70:5e:a7:5c:ab:74:6f:cf:84:86:da:01:b0:9d:
e3:ff:a1:3e:5d:27:69:e9:6a:65:19:ed:88:72:31:
7c:33:e2:eb:c3:31:06:42:b1:ad:f9:17:4d:73:5a:
a1:28:5f:2d:25:65:62:7e:39:b8:72:0d:65:dd:90:
49:cd:56:b9:4e:ea:97:a4:f7:84:0f:d2:9f:d7:07:
23:fb:8e:9a:91:8a:60:d1:9e:15:eb:47:16:0c:c1:
88:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:72:FC:BF:94:1A:38:34:2B:40:73:E4:27:53:20:55:55:70:0B:AD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145300.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa5a::/32
Signature Algorithm: sha256WithRSAEncryption
6a:49:94:bd:25:2c:9e:43:50:29:9a:64:20:a0:bd:54:b4:c6:
e1:b5:27:42:63:37:75:46:85:16:7c:35:41:6c:3f:1e:ae:e6:
d3:06:7f:a6:ee:5b:e6:98:f5:82:3d:77:8d:d6:4f:a8:82:7e:
76:07:9e:57:4d:59:2c:da:fd:ed:70:47:a6:4c:af:e8:5a:0e:
b3:2a:ff:d8:ce:2d:b6:c2:c3:82:f3:83:5d:5f:4b:da:aa:ad:
37:62:f3:53:37:73:af:87:e4:12:b5:a3:1b:d0:ca:a4:68:ac:
aa:34:b4:f7:db:28:0a:09:2d:63:c5:66:1b:96:1e:12:40:98:
5d:f2:37:9b:41:e4:57:76:12:f2:24:b8:86:48:b2:15:76:ac:
c0:14:3f:4c:22:c9:01:8b:e8:3f:2e:66:8b:18:12:4d:1d:48:
a4:00:93:91:4e:a8:47:77:3b:65:67:43:a1:e2:18:97:74:78:
f1:99:3c:f8:46:ab:92:90:f6:f4:b8:c0:49:2f:2c:7c:46:8b:
d1:26:46:0e:6c:72:a1:23:70:9c:c3:7a:7d:ba:d9:9d:88:69:
84:dc:ae:44:9d:88:98:7e:40:14:19:16:a1:94:b0:e1:d1:52:
38:65:65:7d:fe:06:82:b2:c4:09:55:bf:87:16:50:e1:4e:55:
15:aa:78:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:45 2026 by rpki-client