Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145445.roa
File: AS145445.roa (raw, json)
Hash identifier: N2tjC4Ie645iWoyXFHW5oSwdfsO6jiEOdAA10BGqafg=
Subject key identifier: 4E:3C:7A:8C:FE:D2:31:48:66:DF:25:E8:D1:1A:9E:1B:0E:F3:39:41
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 061DC3877028CA0AD80A0FCC7FCA87FB18284169
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145445.roa
Signing time: Mon 25 May 2026 01:38:33 +0000
ROA not before: Mon 25 May 2026 01:33:33 +0000
ROA not after: Mon 24 May 2027 01:38:33 +0000
asID: 145445
IP address blocks: 240a:aaeb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:1d:c3:87:70:28:ca:0a:d8:0a:0f:cc:7f:ca:87:fb:18:28:41:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:33 2026 GMT
Not After : May 24 01:38:33 2027 GMT
Subject: CN=4E3C7A8CFED2314866DF25E8D11A9E1B0EF33941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:84:95:a1:fa:51:26:12:0b:aa:f6:48:56:
7a:4c:36:5f:f2:cd:3d:75:03:d4:4a:80:28:f0:f7:
51:26:05:7c:bc:d7:37:99:aa:75:ea:c9:03:5e:f7:
33:61:1d:4e:1b:c0:c3:a3:d5:59:9a:ec:6d:ef:87:
28:7e:95:e0:1a:34:c4:e3:f0:72:f8:6a:e5:ae:24:
f7:e3:d4:bc:31:74:a0:e7:cb:49:2c:61:71:10:76:
07:68:17:ed:8e:0d:76:52:16:4e:e8:2b:40:d0:8b:
e7:45:fb:ad:8f:05:6d:ca:bb:11:3b:7c:b3:54:a4:
af:52:76:ab:55:48:d7:b3:8a:49:7b:4a:c0:44:db:
5b:1f:8b:f2:8d:e5:3d:aa:ea:5e:10:dc:92:7a:21:
ba:67:6b:df:3b:54:e4:a6:8a:8e:82:e0:0d:ab:43:
9e:c5:d3:54:78:92:85:f3:a0:1d:a9:8a:23:16:f5:
f8:78:23:5c:a0:87:02:39:3a:3d:74:37:54:ac:b6:
8b:b8:ba:f3:0f:02:b6:bd:11:42:90:b5:ba:26:49:
9f:c0:88:fd:c5:7f:f2:de:7d:60:cd:3f:13:cc:9d:
81:59:1a:5f:c1:a7:44:3b:f8:3f:75:cb:2d:6c:60:
9d:b4:51:64:db:be:a2:28:95:42:61:ab:62:9a:2f:
f3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3C:7A:8C:FE:D2:31:48:66:DF:25:E8:D1:1A:9E:1B:0E:F3:39:41
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145445.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aaeb::/32
Signature Algorithm: sha256WithRSAEncryption
33:3b:7d:da:91:d7:db:04:a4:7a:bd:0c:85:e6:82:4a:8d:5b:
4c:8d:2b:e0:6e:e5:70:58:16:7e:33:81:b2:56:81:70:fa:9c:
68:9c:ca:c4:fd:a1:73:dd:4b:f4:f7:47:77:d2:2c:b4:9d:77:
28:56:1e:cc:e6:78:f1:a0:d9:1a:bd:83:81:27:a5:02:60:09:
da:ce:22:30:ad:9a:02:0f:a2:ee:aa:25:99:2c:eb:e7:68:5d:
f1:80:ad:98:42:c1:28:6e:09:6e:61:24:e4:65:8f:2a:89:6e:
f0:73:fb:61:18:03:59:48:8e:17:68:ca:de:ab:f5:e1:9f:f8:
db:d9:d5:73:7e:03:00:1f:17:48:8b:78:8b:cd:f1:1a:e0:b9:
6a:07:9d:82:5d:14:2b:17:53:0a:7a:58:53:98:b6:35:34:4b:
73:01:d9:9a:31:c4:e0:d9:d7:d1:9e:08:b4:d6:ef:b3:8f:2a:
be:0e:df:23:5a:18:5d:25:5a:33:e2:ee:c0:68:af:f9:00:90:
ac:f9:52:10:8c:98:d5:14:5f:9b:f0:d7:39:45:1e:00:a2:f5:
31:22:a3:05:a2:4b:b2:2c:fa:09:ad:b3:27:bb:02:01:8a:53:
d9:17:dc:37:c3:8c:bc:ac:75:5d:ef:3a:0b:21:33:4c:6c:ce:
9d:60:3a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:39 2026 by rpki-client