Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145384.roa
File: AS145384.roa (raw, json)
Hash identifier: HxvGlTyGNkj2HwK89Qh1Kc57IJxNJWQOXmA/qpm791M=
Subject key identifier: 23:3F:40:BC:5F:86:D5:17:03:00:9A:80:D5:FF:07:63:6C:80:7B:9F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7AE4E1BB3725C786C67FC940C51EFADB34A192C7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145384.roa
Signing time: Mon 25 May 2026 01:51:10 +0000
ROA not before: Mon 25 May 2026 01:46:10 +0000
ROA not after: Mon 24 May 2027 01:51:10 +0000
asID: 145384
IP address blocks: 240a:aaae::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:e4:e1:bb:37:25:c7:86:c6:7f:c9:40:c5:1e:fa:db:34:a1:92:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:10 2026 GMT
Not After : May 24 01:51:10 2027 GMT
Subject: CN=233F40BC5F86D51703009A80D5FF07636C807B9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:7c:33:42:24:4e:49:ea:f7:2b:6d:8b:3b:
77:02:55:eb:ad:e9:2e:c1:d1:2e:40:77:30:9e:6b:
f6:4e:da:90:de:9c:b5:07:ac:6e:c1:1d:bf:63:3c:
82:90:38:4e:15:89:3f:26:c2:85:18:42:6a:6f:ac:
ec:5d:a5:a6:3a:ca:d4:e8:3f:ba:8f:78:58:b3:46:
6f:20:e3:62:25:d7:68:3b:7a:28:c4:31:6c:f6:1a:
81:36:ca:a3:af:bf:bc:23:7f:73:89:5a:12:05:1a:
53:65:26:11:57:2a:03:f4:e7:84:bc:fc:89:eb:f2:
8e:45:55:69:0c:c6:2a:10:92:3a:86:62:74:23:48:
51:a3:90:ab:9e:b2:1e:69:71:b3:f1:10:00:26:6f:
c9:b6:83:4e:8a:04:e5:f3:88:a9:e2:d0:15:8e:eb:
13:e5:4d:40:23:0e:88:26:4b:a4:60:b8:b3:b6:d6:
bd:d5:ca:d4:d9:a1:93:12:0a:5b:b5:f1:4d:40:81:
a4:52:2f:f9:ab:48:7c:10:0c:27:e1:4e:51:30:62:
1e:f7:96:14:67:06:da:ec:b7:c8:be:4a:1a:42:40:
e9:03:2a:e5:54:60:fd:38:ad:13:64:99:bf:af:fe:
e2:22:71:00:e4:12:1c:f6:f8:a6:47:a6:1c:34:ab:
f6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3F:40:BC:5F:86:D5:17:03:00:9A:80:D5:FF:07:63:6C:80:7B:9F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145384.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aaae::/32
Signature Algorithm: sha256WithRSAEncryption
bd:fd:c8:fa:c0:cc:bd:5c:89:d8:59:38:93:35:b1:b1:4c:17:
6d:82:41:30:94:21:4f:50:05:6c:9c:97:63:3d:c0:a5:dc:84:
dc:5a:86:b0:61:a6:69:03:a7:c8:f9:9a:5c:87:8b:5f:49:76:
7f:de:40:a9:94:bf:b2:01:4c:ed:5a:ec:34:70:46:ea:dc:bd:
0e:33:ca:63:ff:69:b1:0d:4a:0a:25:6e:b2:ef:fa:54:8a:0e:
76:a6:f2:18:85:d0:c5:29:6a:58:86:e8:93:a8:27:1c:52:49:
cb:29:63:7a:15:bf:31:11:ce:1b:3d:00:44:b8:07:12:4e:aa:
f1:09:a1:4e:db:aa:f8:02:ca:46:58:cc:f4:66:3c:2f:02:cc:
90:34:2d:79:09:54:bc:e5:f8:80:9f:8f:97:91:60:a8:df:17:
98:36:04:49:67:30:76:f5:8a:61:dc:c1:ef:af:8f:f2:56:c4:
4b:96:c5:80:b9:1e:9a:cf:6d:dc:cf:f9:58:97:f0:98:21:b3:
e0:f2:2a:e7:5d:59:8b:87:04:b8:d3:4b:82:61:b5:ff:f1:5d:
a6:9d:d2:82:34:16:f7:8f:b3:8a:0a:34:b9:44:a5:f5:65:da:
42:d8:16:64:fe:b7:4b:13:1f:b8:b1:58:0e:ec:2e:97:69:11:
af:2a:8c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:17 2026 by rpki-client