Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145457.roa
File: AS145457.roa (raw, json)
Hash identifier: 9JLVQHm3I3RylYo+45RETyfLjvLBGdKoGHmWcUSt84c=
Subject key identifier: 64:A4:F0:89:68:E9:28:8F:F8:E5:36:28:DA:6B:EB:15:26:B8:9D:DC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7D6B1ACF3D682336D5880AEC78AC14868E069918
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145457.roa
Signing time: Fri 22 May 2026 04:08:26 +0000
ROA not before: Fri 22 May 2026 04:03:26 +0000
ROA not after: Fri 21 May 2027 04:08:26 +0000
asID: 145457
IP address blocks: 240a:aaf7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:6b:1a:cf:3d:68:23:36:d5:88:0a:ec:78:ac:14:86:8e:06:99:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:26 2026 GMT
Not After : May 21 04:08:26 2027 GMT
Subject: CN=64A4F08968E9288FF8E53628DA6BEB1526B89DDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:a1:58:2b:8c:87:fa:9f:92:e9:f5:6f:e3:
10:72:e2:3a:1b:0d:49:cb:db:bb:99:f9:49:36:bd:
c8:42:d4:5f:63:2a:0d:41:c8:50:30:79:47:00:25:
be:68:12:e6:f5:da:ac:6e:a5:ce:56:65:bb:ac:79:
95:74:e3:50:59:2c:23:34:6b:e7:7a:c3:66:63:92:
af:fd:9e:d6:e4:0c:49:35:c6:c9:b9:2e:d6:8d:e0:
b3:f0:e2:13:95:df:66:fe:06:bd:e0:a0:99:f2:9c:
5c:ec:15:db:ed:82:20:76:3c:5a:4b:76:c6:16:b0:
f5:43:ee:67:ea:cf:33:b4:aa:48:db:4b:9d:c2:a5:
9e:8d:fd:9f:43:d7:d6:d8:9f:73:80:be:ab:b2:9b:
1f:e4:0e:3c:45:03:dc:03:6a:e3:be:c9:5a:e0:5d:
62:37:8d:83:6b:c3:82:d9:06:ff:9e:60:e5:a7:0d:
9e:1e:da:39:ff:81:4e:a3:19:f8:91:05:ba:bd:4b:
e6:7d:72:6b:6a:d7:3f:a4:0d:f7:85:17:fe:91:df:
6d:fb:ff:ab:84:4d:df:d1:bf:63:f9:1d:8b:fa:21:
30:6b:93:d7:bf:20:c0:2c:2b:72:0b:aa:18:3e:dd:
fe:41:d0:4d:9e:b2:e0:68:62:85:05:90:91:35:71:
c3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A4:F0:89:68:E9:28:8F:F8:E5:36:28:DA:6B:EB:15:26:B8:9D:DC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145457.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aaf7::/32
Signature Algorithm: sha256WithRSAEncryption
4d:5a:c3:49:b2:a0:e0:65:ef:55:99:c6:02:04:be:e3:d2:95:
e5:bc:d5:77:35:39:73:17:9d:d3:79:b8:c2:90:d4:5a:7f:2c:
c5:21:c2:b5:f3:9d:55:4b:f4:30:19:11:0d:4a:47:98:e6:ed:
53:f3:77:c4:82:35:35:e7:a8:93:9f:e6:9d:5b:4d:64:d9:db:
60:d0:d3:b9:ab:24:41:e9:d1:c1:20:c9:c6:45:01:f5:63:90:
ae:a0:d3:e2:e9:37:a5:7e:e4:ab:49:38:1e:db:a5:c4:ee:60:
87:f3:e6:e8:17:af:44:4b:e1:d1:78:ce:3c:83:2b:ae:ed:02:
bb:e1:21:61:1e:79:6b:9e:53:95:2a:95:2c:32:ca:6d:5b:79:
2e:d3:20:db:4e:29:65:b1:35:5f:bd:ac:49:38:25:29:e9:76:
e8:7b:ef:6b:2e:4a:b9:e1:9d:ca:17:57:bc:4b:f7:70:27:07:
4a:aa:4b:d3:f8:2b:2e:e1:9e:90:aa:53:29:0c:d7:c1:d3:2f:
f9:d7:77:59:fb:a0:94:67:a0:4c:e7:1a:a8:f2:3d:33:81:f7:
24:44:d9:85:5e:9f:84:ff:56:8c:61:5e:03:ae:ae:08:f9:de:
e1:bc:78:2c:05:73:93:1e:91:40:e4:e4:c8:f0:13:21:cb:17:
fd:c0:61:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:01 2026 by rpki-client