Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145448.roa
File: AS145448.roa (raw, json)
Hash identifier: q2rMJEurmranLNnOj+A7pYXf9YPkO3bVZ6QIFd3DjDc=
Subject key identifier: ED:24:30:F6:0F:84:F3:C4:8F:81:CE:56:AE:21:07:A3:4B:04:FA:FE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0F78FB235753AA94BB9E5DD328B1F60E3E88D13E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145448.roa
Signing time: Mon 25 May 2026 06:28:39 +0000
ROA not before: Mon 25 May 2026 06:23:39 +0000
ROA not after: Mon 24 May 2027 06:28:39 +0000
asID: 145448
IP address blocks: 240a:aaee::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:78:fb:23:57:53:aa:94:bb:9e:5d:d3:28:b1:f6:0e:3e:88:d1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:39 2026 GMT
Not After : May 24 06:28:39 2027 GMT
Subject: CN=ED2430F60F84F3C48F81CE56AE2107A34B04FAFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:63:06:d7:f4:9e:d6:ac:a5:3b:eb:18:04:ed:
aa:0c:3e:f4:a3:7a:2e:ce:8d:89:a6:b2:5a:3d:cc:
67:32:f5:6f:43:11:6c:d2:b8:62:d9:73:7b:51:87:
c8:40:a2:6d:f3:0d:a3:7f:d1:28:b2:b9:24:1f:22:
24:90:b3:2b:88:61:c4:8e:e7:a0:c4:74:ac:e8:88:
67:52:e1:c1:22:00:5b:14:78:e5:72:66:ed:0a:9a:
99:b6:5b:91:fa:f6:cc:29:b3:6f:be:c6:04:b8:92:
e7:f8:40:dd:47:80:ce:f5:35:0e:91:9e:ec:3c:0a:
41:99:42:c3:d4:4d:25:7d:32:3c:6a:06:b8:6d:f5:
7d:a5:89:82:26:92:02:9d:6f:74:e3:5a:1d:db:5e:
23:02:99:5c:65:57:45:ea:85:46:cd:c1:cb:de:8a:
ff:34:c2:e5:ad:62:93:72:f6:56:fb:73:0c:de:1b:
1a:af:87:70:eb:37:9c:80:03:28:f1:0e:5b:93:e7:
16:4d:a2:31:e4:b6:7f:a0:3d:1e:fb:de:44:50:b3:
0b:86:93:a5:43:f8:c0:34:6a:2d:02:8e:47:d4:3f:
45:f7:d8:99:7a:f9:ca:73:13:2d:48:21:72:56:98:
a4:fc:05:16:cc:f8:3a:12:90:c8:84:87:da:b0:b2:
45:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:24:30:F6:0F:84:F3:C4:8F:81:CE:56:AE:21:07:A3:4B:04:FA:FE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145448.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aaee::/32
Signature Algorithm: sha256WithRSAEncryption
4f:a9:8a:44:a1:a3:e2:9c:4d:a2:77:71:ff:3b:cf:dc:b5:cc:
74:21:ab:8b:59:d7:9a:2a:89:70:90:3e:94:9b:04:7c:5f:22:
dd:03:1b:81:c6:ca:4e:ce:8d:8d:18:a9:f7:a1:d6:7f:95:b5:
d1:04:ab:58:a3:49:08:0f:a1:ea:e2:57:cc:f5:45:5a:92:45:
44:e2:9f:6d:ad:39:ad:3c:e3:80:0b:89:a1:a4:16:8f:b2:da:
5b:59:81:6f:ed:a3:87:46:07:8b:d8:b5:4a:7e:db:b9:58:e5:
81:c2:18:28:29:a9:26:38:f9:19:7b:77:4d:51:89:54:65:8e:
cd:dd:a3:8a:79:51:cd:b5:14:d8:e1:9b:5d:ae:b1:a3:d6:47:
70:2d:82:88:b6:e0:83:42:b8:08:bf:cb:56:a9:d5:8c:74:28:
ad:15:68:50:92:dc:9c:24:c3:12:c2:3b:f3:76:a6:38:e2:de:
84:86:bf:2e:c0:cd:33:80:30:6f:98:41:d3:ad:6b:87:04:05:
6a:96:c6:37:e9:83:6e:9b:ab:18:b4:8e:d8:e0:ff:6c:c9:5e:
a1:0a:07:79:49:bc:b0:e7:1a:d4:a5:37:08:74:69:da:7b:b2:
7b:b5:8c:62:fc:f1:b9:fa:15:80:3d:72:65:f9:7e:e6:83:32:
7d:f0:45:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:16 2026 by rpki-client