Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145458.roa
File: AS145458.roa (raw, json)
Hash identifier: tusCKvcpF+4mX72Zr5yYMGo5StLvI90TiNaphz/vZ9o=
Subject key identifier: 9F:3F:76:8A:2F:F1:10:83:88:D8:07:26:F3:D5:60:89:5A:54:18:4B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 66DD35C8CC06F7E2EEA63AE965C1D94686840050
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145458.roa
Signing time: Tue 26 May 2026 06:30:36 +0000
ROA not before: Tue 26 May 2026 06:25:36 +0000
ROA not after: Tue 25 May 2027 06:30:36 +0000
asID: 145458
IP address blocks: 240a:aaf8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:dd:35:c8:cc:06:f7:e2:ee:a6:3a:e9:65:c1:d9:46:86:84:00:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:36 2026 GMT
Not After : May 25 06:30:36 2027 GMT
Subject: CN=9F3F768A2FF1108388D80726F3D560895A54184B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:be:87:13:bf:77:9a:12:19:2e:fb:e0:38:10:
ab:f8:c9:a4:7b:dc:0e:72:64:f8:b7:47:1e:12:4a:
40:f5:e7:b0:27:58:a9:3c:2c:4f:1d:fd:56:18:15:
fb:24:9d:14:53:2a:6a:46:69:88:4f:d2:64:a1:11:
54:e8:31:19:f6:96:36:ce:92:e4:86:5f:4c:cc:3e:
9b:a9:95:23:96:cf:bb:a9:5a:ae:24:8e:5a:c3:a0:
8e:0c:57:f0:fd:9a:50:2a:44:c0:de:0c:22:3e:10:
55:7f:68:3d:3a:e7:57:94:23:b4:ff:91:1a:e8:bf:
bc:28:33:23:ba:43:79:e1:ee:f6:c7:1f:e5:0b:b3:
8a:35:c3:b6:69:3a:c5:05:5c:cb:0e:cb:83:b2:35:
44:b5:be:cd:35:ca:a9:19:98:3a:e0:a2:15:1f:a1:
0e:31:6c:e0:b3:a9:bb:6a:3b:e1:bb:34:ab:06:5e:
7e:24:55:a9:f8:e2:bc:95:19:96:75:6c:8c:b9:b1:
13:d8:f6:42:7d:19:5d:12:f2:07:b6:36:87:f6:9b:
2a:74:eb:9f:37:85:52:a2:30:e5:51:24:73:1d:30:
15:7c:5e:fe:02:00:25:a4:df:aa:25:1a:6d:2c:7a:
fc:6a:0f:e0:e1:ff:22:82:43:8b:ac:76:7b:22:41:
05:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3F:76:8A:2F:F1:10:83:88:D8:07:26:F3:D5:60:89:5A:54:18:4B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145458.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aaf8::/32
Signature Algorithm: sha256WithRSAEncryption
38:ca:70:ee:cd:dd:91:02:f6:d5:27:35:b6:eb:d3:9d:c2:a5:
15:ad:e5:43:0b:74:f3:b6:9d:d6:c7:42:8c:15:87:27:d5:8a:
f0:7a:18:9c:b8:83:fa:88:2a:bb:5d:05:a6:36:54:bf:69:e5:
1a:39:89:cd:2c:60:26:4a:5e:39:23:db:66:2b:32:aa:51:6b:
84:48:d7:0f:74:e7:73:a2:c3:d7:f2:cd:0f:b0:b7:7f:7e:37:
01:df:1b:04:4b:55:03:a2:ac:39:fc:73:93:a2:22:be:63:da:
70:c8:9a:25:d9:71:19:18:89:6e:ab:cb:3c:de:e5:68:19:22:
ea:25:88:49:44:49:19:57:53:5e:23:f7:fa:27:a7:26:0c:cd:
a7:35:55:84:fb:ae:cf:34:91:11:32:da:39:91:19:36:aa:8c:
c4:c7:a0:e5:d2:cd:6a:99:74:8e:fa:17:b7:4c:46:6e:87:c3:
e0:e9:ed:00:3c:34:46:e6:0a:a3:7b:84:98:3d:c2:7d:45:67:
f0:2f:35:ca:00:a5:2d:40:54:a0:fc:8e:59:a3:e8:9a:8f:d1:
7c:43:38:24:03:cc:10:00:fd:a5:02:8f:96:a2:ee:73:f1:4f:
e2:b9:e7:8f:51:c2:81:15:41:a9:a3:ea:c8:a2:28:69:03:77:
6e:34:fe:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:17 2026 by rpki-client