Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145727.roa
File: AS145727.roa (raw, json)
Hash identifier: UMDnpVht9gvwqJFThnZmjdm0IC+RMu3RP1F2TNdTbz0=
Subject key identifier: 39:70:DA:DC:6C:EF:3C:F1:6E:20:96:01:AE:1E:AC:D8:54:0F:A7:C0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: CB1188681E4DB494B604F35DF3588329A0D988
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145727.roa
Signing time: Mon 25 May 2026 03:19:39 +0000
ROA not before: Mon 25 May 2026 03:14:39 +0000
ROA not after: Mon 24 May 2027 03:19:39 +0000
asID: 145727
IP address blocks: 240a:ac05::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
cb:11:88:68:1e:4d:b4:94:b6:04:f3:5d:f3:58:83:29:a0:d9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:39 2026 GMT
Not After : May 24 03:19:39 2027 GMT
Subject: CN=3970DADC6CEF3CF16E209601AE1EACD8540FA7C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cd:99:75:41:16:03:f6:a1:2e:37:46:8a:d4:
30:e8:86:60:16:f3:82:2a:17:41:b8:9f:d8:e3:16:
71:85:be:3c:0f:a8:d2:7d:e0:38:fd:4d:08:f9:fe:
5a:e5:b0:51:16:5f:fd:9f:3b:8e:18:09:54:f6:56:
97:42:0e:06:eb:1c:53:45:ef:dc:44:92:89:31:cc:
c5:fd:f4:01:06:c5:48:02:ac:f4:c0:62:f2:1c:19:
dc:3b:9c:94:52:6b:5e:4a:55:d1:54:71:e9:7e:ad:
7c:d2:f7:7d:31:f4:f0:73:84:17:cd:5c:4a:3f:36:
c8:54:34:a8:5c:fc:e0:2b:e9:e1:80:76:f9:34:4d:
ea:93:86:98:98:f7:9a:1a:4a:88:6b:b8:f0:a1:15:
e9:4e:70:ad:d6:69:16:8c:98:7e:62:21:32:ed:b4:
db:fa:f8:0f:92:8d:ac:03:e9:bc:8c:e7:c8:91:99:
fe:8a:e2:78:af:21:80:ac:98:8f:2f:40:2d:86:cd:
44:03:c0:b6:dd:b6:a9:b7:ad:20:45:c9:fe:11:be:
f3:d0:bc:e9:9e:bd:cf:a3:15:3b:0c:55:49:e3:b0:
c0:a9:86:14:e1:0a:78:64:16:2f:1b:d2:0f:03:e4:
05:f1:36:0e:60:3f:48:9c:67:8a:80:7e:a4:58:a4:
83:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:70:DA:DC:6C:EF:3C:F1:6E:20:96:01:AE:1E:AC:D8:54:0F:A7:C0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145727.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac05::/32
Signature Algorithm: sha256WithRSAEncryption
8d:fd:a7:72:09:a9:b8:14:32:b8:e5:87:df:81:dd:12:3c:0e:
18:14:78:70:10:92:b1:54:4a:40:ba:ef:30:ae:bd:d6:fb:96:
1a:3c:3e:8a:a5:84:9d:d5:8d:0e:7f:c7:da:cf:62:8e:d4:9a:
4c:23:94:a6:2f:ba:84:6f:c2:a7:ba:10:34:06:e0:6d:be:51:
6b:63:49:25:4b:3d:45:a1:32:e4:fd:3c:f4:66:11:52:84:f6:
d3:be:c5:8f:cb:16:e0:50:08:f3:92:e9:15:58:26:f2:7c:aa:
87:7a:95:86:aa:39:70:a8:b5:31:dc:f1:09:23:b8:fe:05:e5:
0e:29:49:79:c7:d7:e3:ec:61:fe:fd:a7:bc:f6:be:f6:84:d3:
3a:06:86:53:07:81:f8:b2:9c:da:7e:b1:23:bd:83:d5:23:08:
f2:67:ae:f1:db:b2:89:88:dc:81:f6:47:e8:08:1b:12:89:1a:
52:f6:d3:12:38:98:dc:a2:2a:c5:33:10:35:34:46:f0:f0:cc:
2e:14:df:d7:fa:03:f9:ee:5a:3e:fd:6e:5f:8e:0a:30:b6:f4:
80:be:53:ed:4d:e4:6d:fd:a5:34:44:97:41:37:63:e9:42:7d:
9e:68:29:30:38:0f:10:a7:17:5f:1c:0c:c1:13:40:d4:7a:ae:
73:25:df:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:22 2026 by rpki-client