Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145537.roa
File: AS145537.roa (raw, json)
Hash identifier: lUUHbwyaahFYl7dNLyuHEGPffCWgq02wqWJ/+JfYKD8=
Subject key identifier: 2E:9A:4C:A9:BA:37:4A:2D:EA:CC:72:85:F3:B9:11:95:1D:18:87:E7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 47771209CA6753DB7E9A5F80422BB4EC6E18F58A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145537.roa
Signing time: Fri 22 May 2026 06:58:50 +0000
ROA not before: Fri 22 May 2026 06:53:50 +0000
ROA not after: Fri 21 May 2027 06:58:50 +0000
asID: 145537
IP address blocks: 240a:ab47::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:77:12:09:ca:67:53:db:7e:9a:5f:80:42:2b:b4:ec:6e:18:f5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:50 2026 GMT
Not After : May 21 06:58:50 2027 GMT
Subject: CN=2E9A4CA9BA374A2DEACC7285F3B911951D1887E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9e:cd:18:9d:02:ad:86:6e:aa:0b:50:19:de:
c1:82:4b:52:b1:24:16:be:5a:33:82:f7:83:59:9a:
e2:ae:a8:6a:14:e3:2e:fa:33:b9:30:d8:9d:85:c0:
d6:57:c6:9e:43:e8:5b:2b:55:1f:a1:d3:51:e8:6a:
b5:23:85:c0:0d:40:8d:75:ee:e9:8f:2a:a9:8a:b1:
c0:6c:b0:eb:47:db:46:93:51:7e:58:49:41:38:24:
54:10:c2:4f:4b:29:a3:4b:da:0e:3f:a9:a2:aa:e2:
ec:54:2b:32:2b:90:19:7d:d5:ee:08:bb:88:56:fb:
37:e7:b4:df:3c:3d:be:3d:a1:c4:f4:86:7a:46:c2:
ee:72:77:28:50:c8:51:0e:62:1c:56:ec:e9:48:72:
6a:ad:e1:91:0a:b0:85:67:b1:1f:95:1a:c1:30:ce:
91:21:6c:80:7a:4f:20:65:7f:9c:fd:56:30:82:5c:
a8:41:cb:38:5b:1c:96:cb:cb:9a:9c:db:00:b6:ab:
5d:aa:22:04:ff:d9:30:41:e9:2c:52:4f:6e:df:e5:
df:40:3d:84:ec:21:62:2f:07:6a:9d:05:38:45:e6:
4b:3a:7a:43:38:38:b7:07:32:19:c5:92:2a:a9:c4:
ed:f1:79:4c:ec:d0:ca:3e:40:db:67:99:07:48:c2:
50:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9A:4C:A9:BA:37:4A:2D:EA:CC:72:85:F3:B9:11:95:1D:18:87:E7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab47::/32
Signature Algorithm: sha256WithRSAEncryption
8b:2f:7d:26:7e:68:7b:b9:eb:90:24:b6:a8:4c:04:76:ea:bd:
19:e3:d3:5f:99:d4:03:05:b6:6a:b3:0b:e9:93:43:4c:3e:25:
12:9a:fd:34:5e:68:07:05:d4:65:62:5a:85:a1:68:a1:2c:0e:
63:1a:1b:2b:dd:94:37:2d:46:e2:80:2a:c3:f5:8e:0c:55:e8:
d1:ff:8f:f8:45:e8:b4:1d:bf:e0:e2:84:4a:87:0e:26:d0:cf:
63:73:48:eb:7f:57:20:1d:44:08:03:62:67:39:0d:a9:72:53:
3b:6c:31:38:69:d1:af:c2:a9:71:6d:22:96:ea:0e:16:4a:1c:
4f:c7:ca:24:c7:e3:1e:8f:4c:a6:99:1f:b9:1a:76:e0:70:56:
97:4e:91:4c:8e:6c:93:f0:1d:1a:ef:42:f9:c6:bd:8a:c0:ae:
b5:14:37:3f:a9:55:b7:d9:75:47:73:33:17:44:b3:08:c2:9e:
be:1f:ba:dc:3c:c6:8d:c6:a3:96:3f:e6:e5:18:9e:67:11:3e:
a2:82:61:94:25:c5:84:4e:46:ad:52:a8:45:9e:f9:47:c1:2f:
ab:07:e9:9b:f3:0c:c1:e1:c6:22:34:80:6a:c7:62:fe:86:60:
64:39:13:1c:2f:52:ad:bd:30:7b:d0:bd:6e:66:bb:39:79:2c:
72:1c:10:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:14 2026 by rpki-client