Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145329.roa
File: AS145329.roa (raw, json)
Hash identifier: dI7yGzLar3vRhcgp4rY1CyQuFTTHG1fFkdj9ADd0jls=
Subject key identifier: A6:98:0A:BC:6F:03:FD:65:98:47:46:9D:E2:06:33:FC:2E:FA:7B:E0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 65C355D217C091F5A5F71B37627419801A551DBF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145329.roa
Signing time: Tue 26 May 2026 03:16:59 +0000
ROA not before: Tue 26 May 2026 03:11:59 +0000
ROA not after: Tue 25 May 2027 03:16:59 +0000
asID: 145329
IP address blocks: 240a:aa77::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:c3:55:d2:17:c0:91:f5:a5:f7:1b:37:62:74:19:80:1a:55:1d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:59 2026 GMT
Not After : May 25 03:16:59 2027 GMT
Subject: CN=A6980ABC6F03FD659847469DE20633FC2EFA7BE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:7e:f7:28:8c:83:5d:95:9d:75:f0:58:01:
24:d4:f1:56:e7:96:53:26:bd:39:04:e7:21:ac:47:
60:c7:45:8c:bb:2d:9c:b0:b0:5a:a0:4c:43:a0:0d:
df:60:af:bf:04:99:86:db:02:e2:90:88:f3:c1:fe:
46:bd:2f:3c:69:ce:63:9e:dc:4c:45:ea:04:84:82:
a7:99:f1:8b:11:b8:3a:50:78:3e:62:31:5d:e0:9c:
7d:c8:62:a7:a5:ea:4d:b9:a7:81:66:03:81:7d:cc:
18:8e:a8:99:bb:94:fc:99:fc:c2:0a:f4:11:d2:b9:
c8:00:09:19:96:4a:d8:eb:ef:c0:2b:da:52:e5:c5:
20:21:34:65:db:30:86:06:ae:66:93:7d:77:ad:78:
f5:a8:3e:69:c3:c1:3a:30:86:9c:c3:99:8f:14:8e:
7f:69:2a:7d:a8:1e:fd:08:ce:d9:1c:26:a7:95:ad:
0d:50:b3:1d:11:83:b7:9b:de:de:10:15:bc:16:9e:
20:04:a8:0a:1a:79:5d:fc:37:15:03:85:54:77:e9:
31:20:af:6d:78:9c:61:94:c0:2a:16:eb:e2:9a:9f:
30:80:1f:0b:a4:f1:44:ca:eb:3d:21:ba:5c:f1:83:
94:34:7d:e5:9f:64:ce:09:52:bc:35:6d:97:06:34:
f9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:98:0A:BC:6F:03:FD:65:98:47:46:9D:E2:06:33:FC:2E:FA:7B:E0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145329.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa77::/32
Signature Algorithm: sha256WithRSAEncryption
ac:15:a3:c5:6f:47:40:e4:cc:d5:98:7f:f5:d5:c0:f3:79:6c:
8c:9e:de:8b:b9:e5:ab:04:a9:54:4c:fa:c1:0c:b1:f7:cb:48:
9e:3a:23:12:4b:dc:80:dd:4e:7b:ec:ee:d3:3a:9a:5e:0c:1c:
72:88:da:e2:48:6c:b9:dc:a0:7e:42:a1:c0:05:3e:f4:c1:c3:
99:4c:37:d9:0c:68:0f:ee:9c:f9:96:91:91:1f:8b:72:7c:e5:
42:4d:db:88:07:64:ec:61:1f:8c:bd:7c:8c:76:b1:fb:78:84:
1c:3b:41:27:a6:18:a9:35:e3:7a:8b:e9:13:50:0e:5b:4f:33:
2f:3d:3b:6c:26:07:6c:82:c2:70:53:85:1c:a8:68:a8:4f:9d:
cd:9d:16:72:38:ff:21:2e:b9:e9:f8:80:e7:aa:fe:be:18:27:
36:e1:ef:3c:91:21:10:51:ea:95:2a:db:d1:ec:96:4e:83:7a:
ce:6a:24:91:b5:b8:31:54:02:7a:0e:ec:3c:48:15:06:d2:77:
c8:8f:24:d0:e2:81:b4:45:3e:53:02:bc:b1:e4:9e:c6:88:d7:
4f:d9:c6:da:a5:3b:5c:9c:23:8b:21:fd:d6:13:8e:32:cd:0c:
7e:c0:9b:29:d4:c3:a8:c7:4c:dc:7a:23:58:59:29:48:d3:04:
02:f7:8b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:45 2026 by rpki-client