Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145395.roa
File: AS145395.roa (raw, json)
Hash identifier: WUNFTAI1cunDXDRQdHwGbvq1KxNYuUCtQJ53nhC0cVU=
Subject key identifier: 28:91:96:67:A7:1B:38:9A:C0:E9:14:C5:5E:DA:E4:E0:97:B3:F6:29
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7347D1DBE2366F7A461E9D19784DF3C31CC63778
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145395.roa
Signing time: Tue 26 May 2026 03:17:15 +0000
ROA not before: Tue 26 May 2026 03:12:15 +0000
ROA not after: Tue 25 May 2027 03:17:15 +0000
asID: 145395
IP address blocks: 240a:aab9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:47:d1:db:e2:36:6f:7a:46:1e:9d:19:78:4d:f3:c3:1c:c6:37:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:15 2026 GMT
Not After : May 25 03:17:15 2027 GMT
Subject: CN=28919667A71B389AC0E914C55EDAE4E097B3F629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fb:cb:dc:d2:e5:75:69:4d:9a:48:3d:8c:36:
56:7a:6d:f5:93:13:0d:50:e7:a5:bf:c2:a4:9d:8e:
16:fa:c4:83:53:b5:c7:a4:15:fa:46:66:da:95:6d:
47:43:ab:01:02:ee:b8:75:1d:6a:ab:da:91:9f:23:
77:52:0e:3b:7a:3f:d1:0b:26:c9:89:da:af:e0:ea:
30:58:5c:f6:19:79:ab:4b:5e:99:46:88:44:c6:0f:
98:fe:82:6b:24:ab:a8:6d:28:95:ec:be:ce:b5:49:
ea:65:d9:78:6f:84:9c:ae:8a:e5:21:f2:85:c4:ac:
26:01:8c:52:25:62:9f:a5:1b:80:f4:a3:f4:85:9e:
92:2a:18:b9:1a:02:a4:7b:06:5f:1a:f8:94:6a:8d:
ae:0d:36:59:e9:af:fc:69:2f:20:39:74:5f:1d:a5:
9b:b9:a1:69:6e:af:ff:4a:1e:90:10:3c:fb:21:0a:
cf:ca:fc:b6:a5:2e:ed:5b:07:fe:96:44:85:f2:3d:
ba:7f:15:3e:35:ad:3e:d9:2a:c6:4f:ec:1b:2d:d3:
53:1e:43:23:89:30:de:b7:8f:d7:4f:4d:ea:02:f6:
48:e8:ac:77:67:e8:ed:2b:9a:52:4e:68:aa:03:f2:
3c:d6:8c:0a:52:0e:62:1f:e7:1f:75:b4:f8:2f:fd:
e7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:91:96:67:A7:1B:38:9A:C0:E9:14:C5:5E:DA:E4:E0:97:B3:F6:29
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145395.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aab9::/32
Signature Algorithm: sha256WithRSAEncryption
00:71:35:9e:7f:00:d2:ad:1d:59:c9:b4:2f:f5:7a:f4:11:82:
b7:0e:45:48:e2:91:93:2a:ae:1c:e5:e0:e9:cc:45:09:4b:84:
60:4e:4b:1e:ac:cd:e5:e5:35:b9:07:22:c8:78:35:00:6d:f9:
b8:d1:e4:37:d5:db:cd:f3:6b:d3:b2:1e:e8:5a:f5:00:5e:ce:
0f:e2:7d:b6:f1:0e:ac:5e:18:8a:0e:d9:3f:45:0a:5c:4c:ad:
29:91:b7:eb:ef:d2:1a:51:f1:8e:e6:d9:99:e7:12:f2:54:0a:
06:32:3c:d9:63:05:cd:19:14:ee:de:b1:a8:f7:eb:15:1f:50:
77:c9:c7:9f:e7:af:98:e5:50:ca:0d:1a:4b:07:77:67:54:4b:
fe:22:49:1e:b3:ab:1a:0a:77:e9:98:e1:46:91:7d:25:82:17:
4a:1b:1c:92:f5:c7:68:91:a8:51:23:6f:5a:c4:6e:3e:8b:e4:
3c:be:4c:37:77:c4:79:3b:a5:35:70:ff:16:99:81:07:45:0d:
59:48:09:9e:82:25:7a:bb:dd:02:18:23:af:0d:c5:a8:c8:1f:
c9:f7:d0:f2:47:71:d9:c3:98:3d:11:31:19:3f:5e:1c:ad:2f:
7c:d9:85:e8:d1:9a:4c:c1:50:00:9f:ea:f2:08:f7:b4:a4:e7:
70:12:2a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:35 2026 by rpki-client