Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145405.roa
File: AS145405.roa (raw, json)
Hash identifier: Xr0VIdeYxKmpZxaOy/cETk19dar+EkNylmgovKaDBC0=
Subject key identifier: 8E:62:76:77:6D:35:2B:38:3C:88:EA:47:44:C2:7A:6E:2E:1A:4F:8E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5391F7AF6D5409AC4B23E6F8349B94318F6EE57E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145405.roa
Signing time: Mon 25 May 2026 01:51:12 +0000
ROA not before: Mon 25 May 2026 01:46:12 +0000
ROA not after: Mon 24 May 2027 01:51:12 +0000
asID: 145405
IP address blocks: 240a:aac3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:91:f7:af:6d:54:09:ac:4b:23:e6:f8:34:9b:94:31:8f:6e:e5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:12 2026 GMT
Not After : May 24 01:51:12 2027 GMT
Subject: CN=8E6276776D352B383C88EA4744C27A6E2E1A4F8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:80:b0:3b:66:ce:66:1c:15:00:fd:8e:33:17:
7a:f8:72:c3:9a:d0:0b:8a:01:9b:ab:79:70:37:17:
80:f4:f3:67:6d:53:30:b6:02:e4:7f:5e:5f:90:fa:
71:60:79:f4:1d:7c:06:48:d1:54:09:a4:24:a3:5d:
9a:78:30:08:10:40:55:81:02:ea:8a:86:4b:dc:d4:
d9:63:8b:86:6b:50:61:51:77:76:fb:64:70:62:46:
94:51:27:8a:13:1a:b5:af:4b:0a:83:e4:b8:d0:38:
a7:0d:77:ec:b1:b6:a3:2a:14:88:19:bd:dd:c5:55:
0a:63:57:36:05:39:ac:48:9c:80:52:45:a5:d6:9e:
69:a2:1b:0e:ca:ea:a3:bb:5f:8a:8c:b1:6d:30:36:
76:58:af:bb:ce:21:9a:6a:f7:5d:29:d9:fc:53:fa:
6f:23:15:d8:5a:fe:85:ff:c8:16:7d:9a:f7:e4:db:
b4:18:67:ef:ff:f4:a3:b2:68:0b:fd:a2:bf:19:28:
79:d5:6f:84:85:e6:9e:5d:a0:18:7b:5f:d6:63:4a:
ea:52:23:cb:8b:8b:57:5b:02:c3:17:c2:3f:0f:b7:
94:69:e7:07:21:d8:c8:e6:c8:91:7e:57:be:9c:12:
c8:13:84:9f:84:b9:32:a5:e5:4a:53:72:ef:e1:6d:
50:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:62:76:77:6D:35:2B:38:3C:88:EA:47:44:C2:7A:6E:2E:1A:4F:8E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145405.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aac3::/32
Signature Algorithm: sha256WithRSAEncryption
94:a6:9a:a0:9e:05:53:f1:bf:26:a4:01:0e:cf:6f:45:34:bf:
aa:23:fb:95:dc:8c:c5:db:33:37:f0:f2:1d:2d:66:a6:8b:46:
06:7a:f3:31:1b:2c:d5:ef:98:ad:31:d2:23:a4:a6:43:72:50:
87:88:39:08:e6:4f:f1:18:5c:ec:3d:e9:94:28:83:f1:ce:f5:
9c:c5:ff:91:79:40:0d:d7:3d:a5:6b:79:5a:2e:63:72:e1:2c:
7f:26:ab:da:9a:7e:24:39:44:1c:f4:fb:d9:30:fb:aa:8b:e3:
d9:61:80:0a:15:75:bc:15:06:73:37:c2:11:29:bf:d3:42:ca:
2e:d7:26:3d:44:ec:fe:39:aa:c4:dd:0e:b0:f3:74:a7:9d:7b:
0b:d8:ee:9c:22:1a:d7:e1:4a:b5:39:8f:70:95:d7:47:6f:4f:
77:a4:4c:8c:1c:f4:54:8c:66:9a:6c:e8:77:57:63:8a:6f:60:
3c:45:bd:12:04:26:4d:19:c5:fb:bc:c8:97:2d:61:84:27:7a:
20:fb:22:e0:f1:36:1d:91:ee:e3:f3:4b:b0:13:4d:e3:e4:42:
6b:ab:92:66:6d:53:9e:23:57:cc:5e:91:46:22:58:3e:3e:75:
7e:c6:f0:49:43:03:9b:91:23:41:46:5a:cf:66:eb:9b:bc:95:
9e:2b:84:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:43 2026 by rpki-client