Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145444.roa
File: AS145444.roa (raw, json)
Hash identifier: eJlCCbpFui6Nt8/qeZKKZejx6bRxKhRzfQ4QZ3/2P1Y=
Subject key identifier: 65:69:90:36:AB:6A:1F:F4:75:6C:BC:FF:5F:A8:98:73:7E:E2:91:85
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 052546E60B0451A030A84ADB1207CF7E287F7DDA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145444.roa
Signing time: Fri 22 May 2026 07:24:30 +0000
ROA not before: Fri 22 May 2026 07:19:30 +0000
ROA not after: Fri 21 May 2027 07:24:30 +0000
asID: 145444
IP address blocks: 240a:aaea::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:25:46:e6:0b:04:51:a0:30:a8:4a:db:12:07:cf:7e:28:7f:7d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:30 2026 GMT
Not After : May 21 07:24:30 2027 GMT
Subject: CN=65699036AB6A1FF4756CBCFF5FA898737EE29185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ca:21:f0:d0:db:9c:85:2b:99:cd:6e:31:84:
9d:be:93:8f:80:ad:d5:c8:5d:47:54:a7:1d:41:b4:
51:7f:0f:a8:c2:f6:ca:36:62:7f:16:1c:ca:91:a0:
08:ac:9d:36:83:01:59:99:f9:dc:b9:76:3a:33:8d:
e6:05:f1:72:8c:62:f4:79:f2:e8:e1:c7:6c:80:50:
55:2f:e1:16:1a:d5:7c:68:1e:50:61:16:73:e2:f2:
6f:a4:17:c0:19:7a:66:73:49:0f:80:11:06:da:59:
c8:74:51:32:46:17:6b:26:1f:de:50:58:6c:17:d0:
66:57:e4:2c:27:ef:73:8c:c8:02:d5:e7:7e:44:2d:
d8:87:65:85:a2:52:4e:46:a9:48:73:9f:97:1f:d6:
69:94:ed:1a:4e:22:a0:b0:f1:c7:74:e4:1a:77:6a:
47:26:88:74:05:cb:7d:fb:2c:a8:e7:e1:8e:2f:37:
09:29:34:67:88:5c:eb:1f:1d:e5:ff:f7:cd:2b:54:
17:54:84:2f:24:cb:4f:67:39:54:c0:fd:fb:cb:7d:
87:da:e2:33:96:3e:ed:be:6e:d3:72:9b:df:05:0c:
8f:b8:fb:ac:6d:f3:88:e7:fc:a9:ba:28:94:8f:7c:
83:45:f7:b1:21:6f:b9:5c:71:61:a9:c8:26:f7:5e:
b4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:69:90:36:AB:6A:1F:F4:75:6C:BC:FF:5F:A8:98:73:7E:E2:91:85
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145444.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aaea::/32
Signature Algorithm: sha256WithRSAEncryption
57:92:4a:88:5f:e0:2f:b5:5e:f8:a2:9d:71:a3:0a:6b:eb:1c:
a9:a0:3f:93:d9:f4:42:b6:1d:80:2f:82:57:f3:30:5e:92:4e:
ed:90:bd:80:1f:69:2f:eb:4f:50:cc:3b:53:11:c7:ce:7b:65:
b3:11:f1:d7:89:ce:cd:71:38:ff:19:5b:4b:a9:e9:45:9b:f4:
a9:b7:e7:c3:a0:31:2d:2b:78:bb:f4:f2:1e:ad:0d:3c:fe:3b:
61:77:2b:da:44:86:2d:90:c0:a7:94:c8:97:b7:30:21:c7:1f:
44:1e:58:dd:3c:7e:11:99:5d:6d:dd:0f:46:1a:f1:22:55:8d:
5d:71:f6:2a:db:76:38:47:d0:7b:fc:48:39:34:43:5a:eb:2b:
e4:5b:d6:93:6d:b4:54:6c:33:4b:21:c3:18:fd:0f:01:ec:4a:
2f:18:8d:6c:25:dc:cb:59:ad:94:f3:8b:86:57:93:7c:54:be:
de:20:39:9c:5f:e8:db:b7:eb:f8:37:0a:6d:60:eb:94:dd:05:
19:a1:89:89:37:83:71:40:3b:6a:3c:33:5a:94:11:1b:0d:05:
65:42:32:b7:01:1b:d4:9d:37:74:93:64:df:73:90:f9:3b:a1:
a5:ef:a7:93:6d:22:d9:d9:69:2e:86:09:ad:b2:09:32:1e:b1:
f5:bc:6f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:55 2026 by rpki-client