Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145364.roa
File: AS145364.roa (raw, json)
Hash identifier: qRI8h+wl3VUIP6wgtlXWXHKp2DT1BS/cjeM2nu+SYXM=
Subject key identifier: 3A:34:BA:9D:26:85:4B:5B:C1:E6:DF:E1:98:2C:A5:A6:2D:7C:1A:64
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 538131AADFD4BB9E005F8DEF2D9BE19A1D24B8FC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145364.roa
Signing time: Fri 22 May 2026 07:40:44 +0000
ROA not before: Fri 22 May 2026 07:35:44 +0000
ROA not after: Fri 21 May 2027 07:40:44 +0000
asID: 145364
IP address blocks: 240a:aa9a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:81:31:aa:df:d4:bb:9e:00:5f:8d:ef:2d:9b:e1:9a:1d:24:b8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:44 2026 GMT
Not After : May 21 07:40:44 2027 GMT
Subject: CN=3A34BA9D26854B5BC1E6DFE1982CA5A62D7C1A64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:bf:9c:f1:7c:76:ad:be:62:45:d0:21:65:
00:c4:29:c3:d8:f7:aa:ef:df:6d:df:f2:0a:5f:d7:
90:cb:7b:0f:c5:83:38:1c:f4:01:49:a0:82:eb:65:
17:65:3c:dd:45:74:ca:f5:b3:d9:89:d4:8c:a4:cc:
9d:87:bc:67:14:09:89:46:97:bc:42:3c:b0:ef:18:
50:02:0f:67:1e:03:41:33:25:72:fd:08:e1:f8:67:
c8:e3:d8:d1:f7:0a:30:c0:b2:06:0a:19:35:57:d7:
6c:2a:dc:33:6d:3e:15:3e:09:f4:b0:d1:ed:88:5c:
f3:79:07:2b:63:bf:be:db:6c:ce:3b:08:ca:d5:36:
15:53:f5:40:a6:ef:d9:f9:a0:30:42:3d:b6:2e:14:
f1:dd:cd:71:e8:aa:f4:a4:49:25:61:7c:b5:04:6b:
9b:b9:69:a5:2b:f4:4f:d8:12:07:e5:40:b4:c2:56:
4c:1e:b9:a7:7c:64:00:16:f1:68:2d:fd:8a:1e:e8:
86:53:22:9a:f9:7e:48:ad:42:91:46:c8:e5:66:f4:
f9:9e:06:d6:97:03:c6:ef:b6:a6:5a:1d:6e:a9:95:
2b:90:4a:8c:05:34:31:be:74:df:bd:97:6e:06:27:
6a:be:86:a4:05:af:3f:c7:9c:03:39:ca:eb:89:27:
9a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:34:BA:9D:26:85:4B:5B:C1:E6:DF:E1:98:2C:A5:A6:2D:7C:1A:64
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145364.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa9a::/32
Signature Algorithm: sha256WithRSAEncryption
8b:47:2c:15:66:98:09:c2:39:48:19:07:7e:7b:42:18:21:b9:
15:55:05:57:3e:78:20:be:ee:ee:f3:fd:16:d4:0c:10:6f:25:
eb:84:2f:55:3a:92:fc:08:7d:57:1e:3e:ab:aa:5e:ba:15:e7:
a4:8f:07:18:1f:8f:b5:1a:27:97:ba:ce:88:fe:8e:db:4a:3b:
ff:19:51:37:28:99:f8:07:85:11:45:42:72:2c:32:29:2e:f5:
97:06:51:ab:2f:d1:35:f3:4d:6f:53:d6:06:da:88:a8:25:4b:
59:44:1d:34:eb:3c:50:73:9d:94:0a:1a:f9:6c:39:b6:92:77:
d3:9e:d6:09:57:9c:83:54:ee:12:8f:cf:8c:72:db:de:a1:00:
52:16:23:6f:8f:68:1d:df:c5:ae:64:13:d9:4f:7c:ad:0d:3d:
7c:37:d3:ec:00:a0:48:53:69:2b:a1:79:30:9c:17:81:2b:ff:
ae:28:93:b2:be:98:29:bf:53:07:46:f4:9d:58:38:e3:0d:9b:
5f:83:ad:c8:91:9c:5e:28:c1:da:6c:0d:f7:b3:e2:ab:71:e3:
e1:7a:75:22:1a:79:a2:9d:20:d9:55:ea:a0:4b:92:db:e7:cf:
be:49:c3:74:02:43:a2:79:46:2b:38:21:f5:7a:46:ae:c9:a8:
bd:cc:6f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:02 2026 by rpki-client