Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145353.roa
File: AS145353.roa (raw, json)
Hash identifier: SEje9JK3/+D6Qs8yjoB2bOlkvY1FhztE+oX2c5cYOw8=
Subject key identifier: 2E:42:59:60:D4:6C:F0:51:B2:0B:83:16:32:B7:DF:92:DC:94:82:E4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 41266DB32F64334EA66FB2B40A572A53F3AEF4D2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145353.roa
Signing time: Tue 26 May 2026 02:34:52 +0000
ROA not before: Tue 26 May 2026 02:29:52 +0000
ROA not after: Tue 25 May 2027 02:34:52 +0000
asID: 145353
IP address blocks: 240a:aa8f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:26:6d:b3:2f:64:33:4e:a6:6f:b2:b4:0a:57:2a:53:f3:ae:f4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:52 2026 GMT
Not After : May 25 02:34:52 2027 GMT
Subject: CN=2E425960D46CF051B20B831632B7DF92DC9482E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5f:01:74:3b:11:2b:a5:d5:40:4d:33:1c:09:
b7:d5:ca:11:80:6b:5c:d2:a9:82:c3:e7:6e:75:25:
9d:a9:04:48:e4:85:61:df:14:b0:91:67:8b:4d:c1:
1e:98:16:6a:95:ee:93:0b:97:03:87:2c:4b:d8:60:
38:ca:44:a1:4e:d8:dc:ed:11:68:65:79:e8:7b:83:
e9:25:86:10:c0:48:e3:c1:7d:08:a5:01:de:40:4e:
b7:22:b7:86:25:23:58:26:dc:db:36:54:a2:bf:9b:
b0:eb:56:94:3e:de:e3:15:9a:2f:b8:5e:8e:46:9a:
d2:27:aa:be:bf:b7:11:00:24:f4:b2:3c:00:d7:dc:
99:18:e0:78:ec:2f:5d:a4:d4:cf:5d:57:c1:f0:d0:
aa:b4:99:e8:19:f0:16:78:20:54:1b:68:5e:ca:3e:
b3:a1:1e:3f:13:c9:eb:9f:a5:f7:9b:9b:0b:71:c3:
c8:0e:32:0c:b0:a1:3e:2f:cd:d7:d0:fe:ec:d6:b3:
cf:38:1c:eb:ca:2f:4f:eb:f9:11:bf:87:2d:16:f6:
b6:08:22:8b:13:dd:3a:b3:dd:34:93:fd:e5:12:e6:
d2:bf:6e:e8:f1:00:93:f2:26:32:b7:d2:59:be:7d:
ae:17:f6:69:3c:43:52:da:3d:60:76:4a:d4:d0:f0:
4c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:42:59:60:D4:6C:F0:51:B2:0B:83:16:32:B7:DF:92:DC:94:82:E4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145353.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa8f::/32
Signature Algorithm: sha256WithRSAEncryption
25:38:42:2d:c0:ad:38:7c:26:3a:8d:27:81:71:96:a3:1a:87:
7a:ea:29:ab:ab:7f:59:4f:f6:35:d2:ec:e6:4f:a1:41:c8:b2:
ef:0f:b4:81:3d:5b:72:e0:18:89:20:bd:bc:82:0f:7c:15:ad:
28:3e:d4:e3:d4:74:4d:32:9d:c7:80:1f:7e:3b:45:38:42:2c:
02:07:6f:d8:20:b0:8f:21:a9:89:b3:0e:41:eb:5a:59:c1:e7:
48:57:01:41:a7:1b:eb:6f:20:77:29:a0:ae:0f:8f:0d:d7:6a:
f6:04:49:82:5d:35:c7:b4:af:c6:57:3f:f0:80:3b:4a:4b:e4:
58:06:fb:3c:1c:eb:b0:b0:22:ec:81:f2:14:0e:f5:12:d0:76:
a3:80:e3:ef:df:c5:c9:71:d3:4f:77:3a:20:ed:d8:5a:d5:96:
48:09:db:70:92:cd:f8:6d:4d:65:17:21:73:cc:b8:de:67:e3:
11:fc:4d:8d:ef:08:2e:e2:2b:af:01:48:2c:42:37:f6:40:07:
e7:3b:16:87:49:09:e0:e0:f5:4d:3b:3d:cb:39:83:6c:68:9e:
96:1c:16:22:7c:41:f4:66:96:23:ac:56:24:9f:0e:ec:a1:1a:
a6:62:61:48:7b:6b:73:a4:2a:7b:ce:b5:31:29:5d:3b:85:77:
0d:0d:32:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:06 2026 by rpki-client