Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145392.roa
File: AS145392.roa (raw, json)
Hash identifier: s61ujtoyCNszT/1jUemY2K9NOG4eCKsKgOn3zxIIR70=
Subject key identifier: 7A:AA:21:FF:E9:AA:88:AE:BD:BE:A6:88:20:41:59:31:F7:EC:7E:18
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 385E9B04BF13B62A6144B7BEF26D8367559F4655
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145392.roa
Signing time: Fri 22 May 2026 07:32:07 +0000
ROA not before: Fri 22 May 2026 07:27:07 +0000
ROA not after: Fri 21 May 2027 07:32:07 +0000
asID: 145392
IP address blocks: 240a:aab6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:5e:9b:04:bf:13:b6:2a:61:44:b7:be:f2:6d:83:67:55:9f:46:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:07 2026 GMT
Not After : May 21 07:32:07 2027 GMT
Subject: CN=7AAA21FFE9AA88AEBDBEA68820415931F7EC7E18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3d:26:0e:17:97:15:b1:0e:5d:7c:42:49:74:
5e:46:d1:77:6c:1f:79:1e:98:36:e9:56:52:26:57:
06:f7:36:4c:40:08:2c:f7:d9:e1:e8:a0:e9:0a:d5:
7e:84:bc:32:f1:0e:ba:7f:19:2e:ec:9c:a6:00:6d:
0a:ea:a4:10:c3:33:c4:43:08:eb:b4:d8:f4:5e:63:
11:3e:62:4c:ff:58:21:b8:a5:99:81:ed:fa:f7:82:
44:80:aa:bc:28:26:23:cf:e4:ae:a0:66:51:cd:c7:
9c:24:24:4a:48:03:dd:79:8d:d7:62:cc:b2:1f:b7:
34:31:b7:1f:03:78:c1:e3:8e:ce:1b:5c:92:4d:1a:
c2:cc:cd:d9:ac:77:6e:92:d7:48:f6:89:95:6c:a9:
1b:8f:61:dc:7d:c1:a7:3e:58:b7:49:d1:3d:5e:34:
47:15:74:36:b3:fb:e9:f8:d4:a2:7b:1a:7a:fe:a7:
04:7e:42:73:6d:1d:d7:1a:0d:d9:dd:59:9a:c6:fb:
ad:24:a5:d8:ca:78:e0:68:87:d7:04:5a:db:24:2f:
ab:69:97:d3:87:46:ae:8f:db:f6:41:b5:dd:79:f7:
df:81:26:7d:16:6b:82:ba:f2:08:78:56:7a:1d:a8:
6a:9d:a4:91:15:36:d1:b8:10:4e:c6:a7:99:3a:38:
65:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AA:21:FF:E9:AA:88:AE:BD:BE:A6:88:20:41:59:31:F7:EC:7E:18
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145392.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aab6::/32
Signature Algorithm: sha256WithRSAEncryption
77:b5:12:31:ce:2e:b0:b2:87:b2:22:54:50:bb:02:66:1f:6e:
71:59:a1:b0:c8:a6:07:66:bb:6c:64:e6:c2:06:be:8c:8c:be:
ba:b4:fc:30:e0:47:2b:57:3d:e6:14:e9:d0:53:3e:06:e5:0c:
9e:c2:fd:4b:00:d2:97:7e:af:96:d1:ff:3a:24:62:00:15:ad:
76:60:fd:6d:f3:58:7e:a0:b7:8b:51:da:43:1e:df:4b:f2:c2:
99:37:c9:ba:ef:f3:a7:1f:9e:62:51:ca:06:15:36:58:18:e7:
db:cd:b7:c9:56:9d:4a:cd:f8:3e:d0:7d:ed:ef:85:76:b8:74:
c7:a6:a8:a6:46:11:e9:c2:52:da:79:69:72:33:d0:bd:70:88:
5e:47:7d:95:4e:f5:f4:58:16:6f:35:e5:a2:de:f4:0a:17:61:
5a:7c:7f:a5:b4:f0:03:44:69:f6:4f:2b:26:60:d1:3c:40:01:
27:37:d3:83:1d:04:d6:ee:fe:75:12:a5:de:74:bd:76:a5:26:
56:6f:5a:78:38:5e:40:7f:0e:60:a9:34:5f:ca:8e:e5:09:4e:
3f:a5:ca:27:aa:57:c4:91:a3:10:4c:bc:7e:80:dc:c4:fe:7b:
01:32:b5:78:67:97:8b:45:b2:13:5a:a0:25:e5:b8:18:18:fe:
95:09:8a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:55 2026 by rpki-client