Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145451.roa
File: AS145451.roa (raw, json)
Hash identifier: w9B1VKP6sGxezpiMCDpDYh7s2XMgvUZbbsb5P8yB6FU=
Subject key identifier: 62:B1:E7:86:46:20:29:D3:6E:FC:E1:D9:8D:6F:B8:03:71:82:0F:79
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 23BA885B57FDAB7A6F1A1500B6CFC7D6AE087964
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145451.roa
Signing time: Fri 22 May 2026 04:26:43 +0000
ROA not before: Fri 22 May 2026 04:21:43 +0000
ROA not after: Fri 21 May 2027 04:26:43 +0000
asID: 145451
IP address blocks: 240a:aaf1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ba:88:5b:57:fd:ab:7a:6f:1a:15:00:b6:cf:c7:d6:ae:08:79:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:43 2026 GMT
Not After : May 21 04:26:43 2027 GMT
Subject: CN=62B1E786462029D36EFCE1D98D6FB80371820F79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:27:70:76:f1:7f:ea:34:84:e3:64:e9:51:fc:
98:5b:3c:c0:34:91:62:16:d0:db:8e:c9:dc:93:ed:
53:93:57:2f:00:b9:39:bb:b7:2a:18:c5:c5:38:79:
4b:27:11:23:5b:29:0b:1f:eb:be:4a:51:f9:9d:2a:
bc:da:2d:83:73:d9:b6:0c:44:12:1c:ca:c3:de:71:
62:4f:81:19:ba:6b:23:fb:c4:04:2f:84:1a:f5:c9:
13:33:94:36:ab:6f:a5:3c:73:fd:88:46:80:11:4f:
61:a3:5c:30:4f:01:20:d7:c2:88:05:9f:3b:3a:cc:
b9:20:f9:4c:79:d3:84:78:8c:e9:ff:3f:c1:c7:46:
96:d3:ac:81:79:74:01:99:80:13:a9:23:e3:c5:b4:
0c:c5:cf:77:a5:63:03:8c:30:d3:66:88:80:6d:40:
6f:0d:23:51:72:a7:2d:63:fb:49:2e:20:dc:93:48:
ea:69:7c:02:de:58:c8:0e:be:46:2a:11:22:90:18:
67:66:0d:83:fb:04:39:8e:af:ac:83:a7:91:07:66:
53:3b:9a:77:a6:de:a7:58:58:5b:4e:4e:fb:da:11:
b6:b5:bf:e1:03:c5:d2:3f:43:1a:c3:53:2d:3f:2e:
c7:8b:db:b0:f8:cc:48:8d:81:69:1d:9f:d4:7c:5f:
75:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B1:E7:86:46:20:29:D3:6E:FC:E1:D9:8D:6F:B8:03:71:82:0F:79
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145451.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aaf1::/32
Signature Algorithm: sha256WithRSAEncryption
6f:41:8f:0c:7d:b8:a4:c2:32:68:34:60:a9:8d:f9:1f:ca:a1:
0e:0b:aa:85:4e:aa:55:07:a6:53:6d:7f:34:58:a8:be:9d:60:
79:cd:8b:3a:82:21:bd:d2:ec:29:e6:99:b6:0a:5e:ce:7f:d1:
4b:2f:11:5f:e1:58:4c:62:dd:eb:d2:90:de:61:ed:ec:94:9d:
61:dc:3c:a3:7d:35:6d:68:78:52:1e:e1:7c:52:2d:0d:06:35:
11:64:55:a3:80:36:f6:cb:ec:8c:4d:f6:09:21:fd:fe:f8:11:
70:ae:13:0c:17:23:b0:19:35:86:0c:62:40:74:08:b7:47:c5:
59:dd:88:b8:64:d2:de:9b:9b:05:22:ce:4f:ba:81:f2:e1:bb:
2f:fa:97:7f:c0:d0:99:b3:88:a6:43:b6:dc:17:b4:4a:40:e4:
d0:4c:63:75:07:6b:ca:51:a7:fe:6b:4b:67:45:5b:f0:71:23:
1b:40:62:ff:3d:9c:c6:31:9e:d1:33:83:99:be:34:88:2a:47:
5a:12:e4:82:d1:a2:b1:ee:dd:c9:cc:5f:10:c1:a5:ad:62:39:
a6:9e:3e:01:6a:10:31:57:8e:20:45:86:8f:f7:d8:97:ee:b0:
20:b5:e8:75:17:b5:ce:f8:ff:79:85:36:c4:49:ca:d2:74:95:
38:cf:67:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:50 2026 by rpki-client