Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145337.roa
File: AS145337.roa (raw, json)
Hash identifier: JvXqSyK2U9HBMO2jtAVF0nkEhDi2K5O5c18ql5kn6ZA=
Subject key identifier: 46:7B:10:94:91:33:86:7C:16:37:23:6F:E1:FF:AF:F1:C0:F4:65:10
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6714D545FD8A2BADB1092CDC0E637D8C2EF26676
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145337.roa
Signing time: Tue 26 May 2026 03:17:12 +0000
ROA not before: Tue 26 May 2026 03:12:12 +0000
ROA not after: Tue 25 May 2027 03:17:12 +0000
asID: 145337
IP address blocks: 240a:aa7f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:14:d5:45:fd:8a:2b:ad:b1:09:2c:dc:0e:63:7d:8c:2e:f2:66:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:12 2026 GMT
Not After : May 25 03:17:12 2027 GMT
Subject: CN=467B10949133867C1637236FE1FFAFF1C0F46510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f6:be:a2:41:45:9c:04:14:9b:71:98:bc:c5:
a7:82:6c:f9:b2:d2:f4:82:97:83:d3:0d:f2:09:09:
9f:cd:99:3e:e4:5f:4c:f9:87:42:b9:04:58:eb:f1:
e4:cc:16:93:7b:07:79:d2:45:9f:ca:0c:0d:d3:45:
2f:67:fc:77:0f:55:fd:92:e2:44:5e:ae:ba:bd:eb:
b9:0e:6e:94:bb:c0:a8:4e:30:e2:8e:5e:c1:61:df:
7b:44:c0:e3:54:25:96:81:09:9b:73:37:a3:34:5b:
7b:24:bd:dc:29:d2:b9:f9:f0:d7:2a:a5:fe:68:14:
df:94:b7:97:4b:94:c8:21:52:ac:0e:87:13:ed:8d:
21:2a:aa:e4:eb:e6:9e:fe:bd:a0:e3:96:59:2b:0a:
40:8e:a4:67:28:fe:c1:a1:c0:ab:1f:07:89:18:e7:
1b:9d:85:eb:c0:20:7e:c6:a7:13:2c:59:d9:a2:43:
6e:84:b2:e6:a1:95:a2:09:72:f4:19:a8:c4:c0:a9:
d4:f4:00:2e:23:37:0b:59:35:28:b1:90:b9:d0:8a:
af:52:31:43:c3:6d:94:be:dd:93:51:85:f4:90:42:
e9:30:46:35:d4:ed:3e:65:99:7a:67:be:a8:07:49:
ff:85:42:d3:12:f8:06:c7:f7:c3:f3:3a:e4:eb:cc:
0c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7B:10:94:91:33:86:7C:16:37:23:6F:E1:FF:AF:F1:C0:F4:65:10
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa7f::/32
Signature Algorithm: sha256WithRSAEncryption
a4:16:96:b0:fc:cf:46:18:55:96:d3:53:a5:6b:17:63:4e:c0:
5d:b1:58:0e:9b:88:12:39:2d:03:be:d4:89:e7:4c:e4:23:6c:
8f:8b:bd:14:3c:2a:4b:67:b7:21:b1:b9:40:4f:5e:69:fd:23:
82:02:a2:7c:d6:bb:21:0c:77:29:a1:b3:af:aa:f4:67:38:06:
ee:90:d0:39:fa:1b:28:06:b6:26:47:08:a1:cb:c0:51:ec:41:
85:cd:ef:2a:e8:3f:9b:ab:b6:39:0e:1f:88:ef:50:34:e3:e3:
43:93:f2:d2:0d:32:2e:32:7b:10:03:78:59:1e:ce:4d:6a:ab:
12:1c:41:7a:23:63:7a:fb:36:73:df:91:a1:47:17:3e:96:2a:
d0:c4:36:21:b2:22:c3:6a:5a:12:97:7c:10:84:73:92:0c:9b:
c5:30:3b:39:ab:53:91:25:46:bd:2d:fe:65:ee:cd:b3:c5:11:
9b:61:c7:e7:1e:58:5c:f0:21:99:66:74:26:90:d3:f1:7e:76:
a6:a7:c2:52:29:53:f0:e9:06:d9:41:74:1e:b2:12:09:dc:c9:
ce:d1:85:83:dc:a2:c5:4d:06:ad:12:fa:be:09:a1:3a:87:54:
ab:17:82:c0:8f:9e:16:e6:de:fa:6b:15:b6:2f:26:89:f7:cc:
e8:7b:11:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:53 2026 by rpki-client