Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145442.roa
File: AS145442.roa (raw, json)
Hash identifier: 8FcZ841gqboZpgFDMPUV7EFd2nKW57ntQXXffQWEvSc=
Subject key identifier: CE:90:0A:1A:CE:87:C5:54:6C:24:21:A0:55:1C:7C:08:9E:3F:22:A4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6D69BF9791A320448170F05DCF1263EF62B3D5F1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145442.roa
Signing time: Fri 22 May 2026 07:41:06 +0000
ROA not before: Fri 22 May 2026 07:36:06 +0000
ROA not after: Fri 21 May 2027 07:41:06 +0000
asID: 145442
IP address blocks: 240a:aae8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:69:bf:97:91:a3:20:44:81:70:f0:5d:cf:12:63:ef:62:b3:d5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:06 2026 GMT
Not After : May 21 07:41:06 2027 GMT
Subject: CN=CE900A1ACE87C5546C2421A0551C7C089E3F22A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cb:1a:fb:1d:d6:23:03:26:a1:81:46:73:87:
39:6b:43:f1:a5:37:95:2a:2d:2d:ab:a0:af:6a:65:
51:39:0a:9b:43:fb:bd:ee:ea:9d:91:55:21:88:58:
26:b3:8d:1b:f5:be:cc:c0:cf:d7:ac:98:2b:ef:f3:
62:1d:3b:e2:f8:91:69:c4:ad:b3:b2:88:d6:47:69:
0b:4b:7e:6f:1a:de:85:85:c3:4b:b1:9d:63:6f:34:
0a:4f:4f:8e:65:df:2f:ad:96:98:97:c6:0a:6f:87:
d7:24:a1:59:84:6b:34:a9:77:22:30:e0:cb:17:61:
d2:02:05:8d:37:ac:54:28:21:ca:fb:d8:58:c7:25:
2f:e2:59:77:b7:82:2b:0f:2a:cf:44:c8:1c:0e:b4:
3d:20:26:be:3c:d5:20:95:6d:0b:da:87:25:40:1f:
f4:af:cd:34:db:c0:04:9f:84:ba:49:83:8a:72:47:
a8:1b:ca:84:6b:4e:6c:a0:0c:43:06:c2:8e:25:d1:
92:b7:49:4f:e7:22:70:00:c2:d4:dd:75:6e:4c:e5:
3c:0d:df:8b:e8:07:61:54:da:25:97:fb:af:db:02:
f1:73:87:8c:4e:d3:0a:ca:61:c8:5b:43:70:86:ec:
ea:be:f5:65:42:c8:a4:01:48:41:f2:3d:10:53:a8:
f7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:90:0A:1A:CE:87:C5:54:6C:24:21:A0:55:1C:7C:08:9E:3F:22:A4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145442.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aae8::/32
Signature Algorithm: sha256WithRSAEncryption
75:7a:d5:5b:ba:93:35:a5:ca:3d:13:cc:a5:e1:0b:c8:51:9c:
77:e1:53:5d:e5:bf:ab:17:d1:61:02:bc:18:fb:34:cd:86:51:
ad:f1:c4:73:fb:30:72:f6:8e:5a:ce:8c:a5:dc:82:10:81:b5:
e4:40:f8:89:3b:89:5f:4d:0c:16:4c:a1:71:b6:f5:5a:cb:c6:
67:78:47:4d:73:12:2b:0c:d9:d3:a9:58:d8:cb:e4:67:65:bf:
53:61:87:29:f0:eb:b2:b5:e4:09:e5:cc:36:fb:b2:5f:eb:79:
1e:cf:f0:29:ec:b5:e4:83:a6:89:2c:9f:8f:ab:19:05:99:20:
60:dd:8e:08:c3:0b:31:05:ce:f6:ae:2e:e8:1a:5f:f9:af:41:
46:12:01:d7:a4:9c:99:ef:68:ee:19:27:46:14:41:5e:45:f2:
b8:a8:ae:ae:f1:79:b0:a6:bc:66:95:72:4a:6f:92:d9:37:c3:
70:43:a2:2b:3e:70:7d:0d:34:28:6c:bf:50:1b:c0:2a:71:9c:
24:a1:2e:34:64:ad:d1:4b:19:b1:b9:6d:fd:77:7a:ae:e1:86:
bf:e7:75:0e:f5:f4:44:3f:81:be:46:26:79:b8:a4:68:e5:8e:
e7:e2:3e:df:55:81:c0:24:5b:7c:cd:88:9b:6a:34:d5:62:b8:
b3:f4:81:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:35 2026 by rpki-client