Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145313.roa
File: AS145313.roa (raw, json)
Hash identifier: 1N/SQq+VBgMn/y0BiMhQGP61grIxL42cLZ8gr6wfNdQ=
Subject key identifier: DE:8E:84:86:FE:49:1D:14:FA:C1:E4:5F:66:7E:11:1A:FC:BB:4B:BD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6329FCC7A17DA3EDD6B03519D70383940154E457
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145313.roa
Signing time: Mon 25 May 2026 01:51:25 +0000
ROA not before: Mon 25 May 2026 01:46:25 +0000
ROA not after: Mon 24 May 2027 01:51:25 +0000
asID: 145313
IP address blocks: 240a:aa67::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:29:fc:c7:a1:7d:a3:ed:d6:b0:35:19:d7:03:83:94:01:54:e4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:25 2026 GMT
Not After : May 24 01:51:25 2027 GMT
Subject: CN=DE8E8486FE491D14FAC1E45F667E111AFCBB4BBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d1:48:a5:e2:36:ce:e9:bf:82:46:0e:73:a4:
26:f1:1e:f7:7f:06:a1:d3:50:bc:8b:cd:b7:8e:5b:
7d:11:3a:90:4c:16:59:dd:c1:74:39:d2:90:43:9d:
77:7d:fb:4e:f5:9b:f3:69:86:4c:fa:34:f3:ac:5f:
c4:b0:0e:ea:a2:bb:32:0e:1a:7e:c4:04:69:cf:01:
c6:08:54:27:cd:5d:53:92:0e:43:b8:9b:f9:41:10:
44:08:55:d9:64:52:41:63:36:08:5f:5f:8f:f9:d8:
7a:0d:5d:db:4e:c0:07:6c:46:0b:1a:a3:a5:34:dc:
b6:72:e2:bf:bc:2d:06:f8:98:d4:39:02:b6:5a:b0:
36:1a:bd:26:c1:d5:c9:b9:44:f0:93:34:2c:0d:39:
a9:b6:4c:2e:ac:ec:52:3c:1a:a8:68:f6:45:5f:60:
9f:fd:5a:e2:3a:5b:42:6a:3f:5d:f9:14:bc:9c:ff:
43:c7:8c:88:2e:69:7a:5a:28:6c:bb:7a:52:f6:10:
fc:5d:9b:c9:fc:57:5b:38:72:0a:c9:ee:50:a4:9c:
52:4e:94:f7:6f:6e:b4:d2:f2:83:12:e7:5f:03:02:
23:dc:f1:48:7c:d1:07:90:dd:ea:30:3c:11:86:f7:
23:0e:ad:30:bb:71:9b:c1:5b:e6:cc:12:6d:12:16:
d6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8E:84:86:FE:49:1D:14:FA:C1:E4:5F:66:7E:11:1A:FC:BB:4B:BD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145313.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa67::/32
Signature Algorithm: sha256WithRSAEncryption
a1:d1:b6:8f:fe:57:09:3e:27:89:99:4e:09:28:87:53:e1:8d:
a0:25:b5:cc:71:d3:68:e3:5a:bf:1d:94:9d:f7:aa:72:54:73:
89:bf:90:b6:33:17:41:26:6f:1b:6d:f2:8f:f8:52:54:3b:50:
db:28:a4:4e:10:d0:de:db:2b:ac:c9:ca:7a:40:99:9d:9e:ef:
1e:b7:0b:da:b0:a4:80:97:9b:08:36:33:a6:3d:31:1d:e7:b4:
a4:29:75:64:34:83:3b:e0:e7:1d:63:d2:92:0d:25:91:ff:8a:
6e:5b:65:22:31:3d:73:f4:4d:cc:ef:a7:d6:5e:6f:20:ed:a6:
72:9f:a5:d4:ce:d5:cd:bf:b0:bd:89:0b:2c:ff:76:d9:2e:79:
f3:92:39:b8:19:36:23:95:1a:c1:63:65:57:32:2b:c7:74:d3:
19:19:b2:fc:ee:ea:30:c0:b1:ba:12:a6:d6:92:9a:cc:d7:0e:
d9:21:f4:6b:6b:cc:01:11:e3:66:6a:2d:ef:1f:39:ef:21:80:
28:d1:ee:59:7b:c4:1d:e5:77:3e:d8:a4:91:e5:06:7a:e4:d1:
0c:9a:72:af:9d:10:1c:92:c3:65:82:64:14:21:20:f7:e9:fb:
7c:fb:31:06:dd:21:10:7a:82:70:c2:91:03:3e:92:70:ea:b4:
da:31:1b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:09 2026 by rpki-client