Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145385.roa
File: AS145385.roa (raw, json)
Hash identifier: ejFUkjXEo6BhNU87kdHN0T83Mf79KLPtAakhmGk9S1A=
Subject key identifier: 31:BD:11:E4:37:5B:22:EE:C2:7F:51:A2:1C:83:05:1C:E3:1C:5E:83
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5E1CF95E3DE0761635B4C1821784533C1D4FC179
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145385.roa
Signing time: Fri 22 May 2026 07:24:53 +0000
ROA not before: Fri 22 May 2026 07:19:53 +0000
ROA not after: Fri 21 May 2027 07:24:53 +0000
asID: 145385
IP address blocks: 240a:aaaf::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:1c:f9:5e:3d:e0:76:16:35:b4:c1:82:17:84:53:3c:1d:4f:c1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:53 2026 GMT
Not After : May 21 07:24:53 2027 GMT
Subject: CN=31BD11E4375B22EEC27F51A21C83051CE31C5E83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8f:7a:c4:38:5a:7c:45:3b:02:07:36:5c:1e:
39:28:df:12:bb:55:24:0f:e6:28:75:cc:eb:ad:9b:
6f:f1:59:e9:26:b2:7c:55:77:f7:02:64:c2:a5:cd:
67:39:bf:bf:fa:59:85:03:d2:65:f8:d2:5f:fc:79:
ef:e4:30:99:51:27:3a:e8:4f:8f:88:be:5d:4f:a3:
a6:9b:c7:33:80:56:d0:9f:9b:73:60:ec:e3:db:43:
75:e0:5e:b9:c4:8c:2d:85:c0:f8:32:ab:4e:df:d5:
68:ac:56:73:eb:ca:02:18:86:b9:34:34:a1:61:fe:
a1:3c:3e:ad:c6:70:e4:74:0c:05:14:77:9c:0f:61:
d4:54:53:35:d0:ba:a3:73:bb:19:ef:88:3a:4e:a9:
f9:f6:8e:d4:f3:da:ec:76:c9:a6:df:f0:d5:26:93:
79:da:95:f9:e7:21:95:9b:0e:ab:5d:df:09:ca:77:
b3:e7:dd:cc:f6:05:df:69:a4:3d:1b:2b:ab:e1:62:
2d:7a:d2:4c:df:e9:73:39:82:4d:77:d2:c0:da:b5:
15:c4:42:90:b5:30:0b:14:96:a9:fd:62:6d:fa:dc:
89:ce:af:fa:55:f1:30:e9:5f:1e:bd:74:21:a5:52:
2a:6c:cd:a3:32:a6:5d:06:e0:5d:9b:8a:11:4d:34:
1b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BD:11:E4:37:5B:22:EE:C2:7F:51:A2:1C:83:05:1C:E3:1C:5E:83
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145385.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aaaf::/32
Signature Algorithm: sha256WithRSAEncryption
1a:30:69:2d:bf:7e:cb:8d:65:02:6a:2f:b7:05:d3:d8:7f:35:
37:ac:36:2e:aa:63:1d:af:74:38:f0:e9:28:b5:1e:dd:39:0c:
ca:53:6e:b4:8a:fa:a5:b9:44:a7:7e:9a:c6:3b:c9:67:bf:55:
9b:cf:63:00:24:89:5d:64:3a:37:88:51:63:35:3e:61:be:c6:
96:5e:7c:38:70:01:28:0c:6e:eb:28:d2:55:c8:18:6a:7b:62:
8b:c4:6a:0e:1a:cc:1a:c0:5c:33:1b:db:4a:ac:7d:2f:3e:87:
aa:a5:81:0d:94:5f:23:ad:29:74:52:c3:74:83:8a:21:d2:8d:
a9:86:bc:c2:d8:bd:13:4d:ed:10:86:0a:59:7e:dc:ea:04:70:
12:1b:ed:31:07:24:09:63:90:18:1d:69:0e:03:25:1e:94:20:
05:54:b9:61:7c:36:1b:7a:c1:45:40:a5:78:a1:1d:37:7a:75:
af:7a:b0:94:ec:6e:44:69:3e:05:08:ed:02:60:b7:40:5e:b7:
a7:c9:0b:27:8d:e2:ac:ab:25:92:43:fe:f2:b4:ca:69:d7:eb:
b4:00:01:af:03:d9:8a:e5:bf:65:3a:4d:58:81:d0:0d:2b:ea:
54:c0:5c:20:0e:ea:e8:7f:58:43:8e:ba:f4:8b:d0:ee:12:0a:
25:89:1e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:05 2026 by rpki-client