Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145508.roa
File: AS145508.roa (raw, json)
Hash identifier: 211V1MP/gOET9nrgdlFDNwGjmFHoXsEo9vwFebHgWak=
Subject key identifier: 95:43:F1:0E:04:25:24:7A:BE:44:E4:7F:24:69:E2:FD:50:0D:48:F2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 486F9BAEC8E48612BC4E3E76473A2FFF180F21D0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145508.roa
Signing time: Mon 25 May 2026 06:48:43 +0000
ROA not before: Mon 25 May 2026 06:43:43 +0000
ROA not after: Mon 24 May 2027 06:48:43 +0000
asID: 145508
IP address blocks: 240a:ab2a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:6f:9b:ae:c8:e4:86:12:bc:4e:3e:76:47:3a:2f:ff:18:0f:21:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:43 2026 GMT
Not After : May 24 06:48:43 2027 GMT
Subject: CN=9543F10E0425247ABE44E47F2469E2FD500D48F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:f1:8b:c0:3d:20:d7:0f:ed:59:48:82:6f:
b0:a5:35:30:28:65:67:0f:f0:ff:0e:e9:5b:8d:41:
1d:7f:a0:77:7e:b0:6d:cd:a5:d7:72:8f:a2:21:ac:
f4:f7:00:17:7f:ca:f6:4d:71:63:f2:32:91:3c:53:
5b:7f:ce:42:12:db:4d:15:fc:d9:07:65:8c:e9:1a:
f3:91:6d:7d:71:e6:c9:89:11:2c:1f:bf:ef:e1:b0:
85:e0:b5:28:ef:4d:3f:22:01:4c:ac:a5:03:11:4a:
c0:6f:e9:b9:74:b2:a2:c5:91:40:10:98:c5:11:64:
57:d2:43:b3:bb:ea:4c:7b:41:9a:2b:32:fc:04:b2:
ab:bb:38:31:3b:3a:3c:df:ec:a3:0e:f1:9e:6e:83:
0b:6d:2d:e3:ff:dc:55:7d:00:4d:4b:f0:e1:9e:3e:
6f:e0:e8:07:01:fc:9d:18:07:f3:ac:0e:23:7b:a2:
8c:ed:00:b9:c5:85:22:d6:e1:6b:41:ca:37:1d:04:
44:58:20:5c:47:d1:53:4e:6a:a4:10:e0:9d:fc:2d:
f0:6a:47:e9:bb:6f:be:09:d7:f5:17:3e:cd:5f:2d:
a4:e3:ca:51:bc:9e:e6:19:14:b1:9a:31:92:32:c4:
88:2f:44:cc:f3:1e:b4:b6:c4:51:72:1f:43:97:91:
a8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:43:F1:0E:04:25:24:7A:BE:44:E4:7F:24:69:E2:FD:50:0D:48:F2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145508.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab2a::/32
Signature Algorithm: sha256WithRSAEncryption
10:83:a7:c6:43:76:66:09:fc:5c:d0:1e:e2:19:bf:43:e1:6b:
a5:25:b8:3f:e3:7b:2e:ff:1a:f6:12:04:06:47:74:66:9c:3e:
b1:51:d9:f5:57:34:5c:5c:4e:72:2a:eb:bd:4d:34:82:71:e4:
50:7c:30:9e:6e:7d:5d:07:4a:37:55:bc:81:eb:3f:a5:1c:8d:
25:a9:7f:9b:ec:62:2b:03:d8:0a:fc:7b:80:cb:6e:89:30:31:
18:e9:43:14:6d:34:a5:6a:ef:05:20:ba:4e:f9:b0:0d:12:85:
9b:c6:dc:1c:65:7e:68:db:c1:f7:b1:6f:95:20:54:cd:51:7e:
0d:b9:d9:04:bc:12:7a:8f:49:d7:ee:29:47:18:d4:79:15:c0:
b5:8f:00:cb:e3:63:58:b1:4b:34:70:c8:39:41:f9:c0:62:35:
1d:6b:29:64:27:0e:e9:4a:7b:95:e5:02:fd:10:91:dd:c9:27:
72:d2:08:b4:82:5f:82:c1:f9:e7:22:7c:66:8c:ee:2a:a1:26:
8e:38:eb:0e:27:1e:60:49:98:df:07:d5:5c:cf:0d:b4:8d:3d:
9a:f5:b7:d7:e7:40:d6:69:32:08:17:5b:0e:7a:af:f7:aa:e3:
43:72:8f:7b:d1:8e:53:2b:20:f1:e6:73:66:34:bb:a2:af:ae:
bc:0b:17:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:21 2026 by rpki-client