Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145332.roa
File: AS145332.roa (raw, json)
Hash identifier: RrVYWdUkjRrYeEgm4os8FY+I1bk0Dp3n4NVsIYJHF+g=
Subject key identifier: D3:D1:11:9D:30:C5:FC:C7:F9:D8:B5:51:AD:6F:32:5B:E8:9E:E3:33
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 28FC3B49722FBEC3FDD157E4EE5E2888CE65729D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145332.roa
Signing time: Fri 22 May 2026 06:05:39 +0000
ROA not before: Fri 22 May 2026 06:00:39 +0000
ROA not after: Fri 21 May 2027 06:05:39 +0000
asID: 145332
IP address blocks: 240a:aa7a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:fc:3b:49:72:2f:be:c3:fd:d1:57:e4:ee:5e:28:88:ce:65:72:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:39 2026 GMT
Not After : May 21 06:05:39 2027 GMT
Subject: CN=D3D1119D30C5FCC7F9D8B551AD6F325BE89EE333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:10:44:24:91:9e:0a:6f:3f:b4:70:2e:67:
39:94:b2:20:44:7e:cc:83:53:b2:d7:98:8a:f5:99:
cc:14:5c:2e:58:41:32:fa:b6:c4:a1:26:c4:30:19:
13:87:42:28:d3:0f:2b:67:7a:e5:48:25:16:93:8a:
e2:8a:39:6c:a5:17:43:84:5f:64:a6:ae:6e:33:fa:
b4:9e:5d:aa:bf:7a:4e:ed:6e:12:aa:f3:dd:01:76:
b3:16:1d:4b:ae:02:5e:79:d5:79:06:ed:5a:3c:58:
32:62:3c:1f:d3:5d:f7:18:6d:bf:ae:e7:5d:8a:37:
e8:26:42:dd:b3:2d:91:ee:16:6a:9b:c1:07:ed:e6:
70:2f:1b:60:5e:4f:34:19:e5:0b:3f:a8:68:25:e8:
ba:94:57:86:9b:20:56:4f:24:35:e0:49:c3:c3:4b:
fc:e3:0f:44:e9:e5:ba:ce:4a:ca:d9:68:96:de:a7:
f9:37:af:81:47:5d:5c:86:43:56:52:47:a8:75:c1:
f5:0e:3f:3e:dc:a9:e2:00:aa:c1:90:18:80:28:b5:
21:6d:2e:f3:ef:38:c8:83:51:dd:5c:b0:15:14:8a:
61:6d:0f:e3:ce:c6:f8:5b:2e:d5:13:32:af:d9:f3:
38:ea:9c:37:61:e1:f3:f4:b6:d0:d1:d2:d9:40:57:
2b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D1:11:9D:30:C5:FC:C7:F9:D8:B5:51:AD:6F:32:5B:E8:9E:E3:33
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa7a::/32
Signature Algorithm: sha256WithRSAEncryption
2d:34:ec:c7:7a:eb:23:68:46:13:e3:ad:70:39:65:8b:b0:4c:
05:fb:c1:dc:01:34:82:7f:98:01:95:57:68:5f:06:69:62:9d:
ca:a9:f8:d7:57:14:7b:87:5e:d4:e6:a2:82:a8:00:a2:49:e5:
47:42:b0:f3:68:b0:35:c9:69:94:95:d1:b4:39:b7:83:83:08:
ee:6e:2b:85:83:82:ed:bc:d8:ce:bc:5a:45:23:d6:4b:e1:aa:
7a:d3:03:27:05:09:eb:fb:18:44:78:f0:6f:c7:fe:7c:39:a6:
0f:6f:06:08:88:ee:84:74:9a:90:77:69:30:fd:b6:f6:5d:9e:
5b:f6:8d:9b:a2:22:e0:d1:5e:42:ff:1a:5c:19:3b:da:c1:18:
99:cb:3f:47:a8:d4:84:3e:b0:1c:ce:68:dd:7c:ad:9f:f2:02:
2f:20:76:69:13:12:48:ea:94:02:dc:ce:de:0c:3a:a3:4a:69:
aa:a5:04:ef:b8:16:37:5e:54:dc:6e:40:1d:fa:55:ec:05:a7:
33:07:c4:32:a6:52:8d:1f:45:7c:61:4c:74:c6:d0:c1:5d:e5:
98:f2:f3:0f:3f:37:7b:bb:90:51:b0:4d:c9:15:b4:ca:46:67:
82:ee:7c:a6:48:bb:c5:7d:49:d4:5a:a6:e2:27:53:ee:a9:b6:
e6:67:9d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:42 2026 by rpki-client