Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145409.roa
File: AS145409.roa (raw, json)
Hash identifier: QNmZvZSLopc2SjedmZwXAATtxkd55KBcHKGQSpow8Uo=
Subject key identifier: 7C:9E:18:57:97:21:49:8A:84:90:06:E6:79:A6:2D:38:73:8E:87:FC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7560B5C4995DB1DFD1522D7FBA6B1F9344BC0403
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145409.roa
Signing time: Fri 22 May 2026 04:08:31 +0000
ROA not before: Fri 22 May 2026 04:03:31 +0000
ROA not after: Fri 21 May 2027 04:08:31 +0000
asID: 145409
IP address blocks: 240a:aac7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:60:b5:c4:99:5d:b1:df:d1:52:2d:7f:ba:6b:1f:93:44:bc:04:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:31 2026 GMT
Not After : May 21 04:08:31 2027 GMT
Subject: CN=7C9E18579721498A849006E679A62D38738E87FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c6:7e:1f:9e:cf:5e:e7:52:2c:2c:22:50:8d:
98:31:3b:91:10:fb:aa:a4:fc:5e:43:85:b4:06:2f:
da:8e:23:0d:94:d0:c2:e8:35:d0:88:5e:c0:5b:16:
3e:48:00:b9:20:43:94:e5:a9:f2:80:89:dc:c9:18:
23:f3:a5:a4:3a:b0:be:66:f9:99:98:3c:2b:63:db:
3f:08:61:c8:2c:8f:e4:29:19:f0:b0:8a:51:74:50:
f9:c6:70:47:f8:10:13:a8:73:17:93:a8:f1:da:73:
97:0d:68:46:ce:14:e6:74:4c:92:08:4f:10:98:56:
4d:e3:c9:57:5f:9a:a4:89:04:3a:f9:10:b8:01:43:
d8:cf:67:d3:a9:0a:f6:30:9c:3f:47:35:40:e6:84:
be:e2:7e:ac:40:22:9f:fe:be:c2:56:bf:47:1e:24:
47:78:96:30:b1:df:23:46:ef:91:54:ed:af:d9:d3:
3e:00:5d:fc:cd:57:4d:5a:51:36:fa:34:b4:81:ca:
dc:5a:7f:c4:3e:d9:2d:4c:ad:5a:ea:3f:9e:2f:7f:
8e:08:f5:87:b8:e6:f5:05:e0:e4:fc:6d:b3:f1:d8:
60:f7:b5:3c:bf:a6:d2:15:c3:84:6b:3a:e9:cc:95:
98:4a:9f:86:9a:c2:93:e7:26:24:42:4c:dc:d1:ae:
b7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9E:18:57:97:21:49:8A:84:90:06:E6:79:A6:2D:38:73:8E:87:FC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aac7::/32
Signature Algorithm: sha256WithRSAEncryption
ac:6c:f3:e6:22:0f:47:03:11:09:87:95:d6:34:c3:f4:78:d6:
95:56:ff:ed:86:a4:18:15:22:ab:59:84:72:1b:0b:23:4b:16:
92:6e:2f:cb:27:b2:e6:01:25:78:7f:8b:8c:09:c9:73:24:0c:
a7:fe:a7:4c:9a:43:b4:58:3e:12:af:77:b8:c4:3a:6b:5d:79:
57:1f:44:bb:77:a1:89:71:a1:48:41:e9:62:1f:50:59:67:12:
8c:07:a8:fe:8c:2f:f0:db:17:67:7e:b4:da:31:f5:8f:4d:31:
de:b5:9d:52:b7:82:f8:14:b2:1a:40:d5:a2:a0:d8:f7:d8:ef:
8a:b4:be:70:95:ee:a7:0f:f3:ed:b7:c9:2f:03:17:bd:cc:be:
d2:00:b6:09:35:4f:a1:d9:f6:82:e5:df:3f:dc:d3:dc:f0:02:
89:7c:46:5c:8e:88:81:d5:ff:b9:a7:83:8a:bb:84:b6:b8:56:
45:d3:ee:6e:d6:8b:6d:d2:f2:ca:f3:4c:67:5f:ee:a6:a3:12:
c1:5a:6e:9e:0a:4d:dd:6a:61:6f:35:f9:ec:ce:76:df:df:f5:
e2:03:a5:37:04:f8:98:53:78:dd:35:c0:b5:06:7c:d0:0b:f2:
24:f5:b8:57:b8:53:ed:44:2e:9b:f1:1c:ad:b3:fe:75:2f:dc:
9f:04:47:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:54 2026 by rpki-client