Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145728.roa
File: AS145728.roa (raw, json)
Hash identifier: aUUzB4G48vpJXDMReX/UJSIt5F1+FbLHRqOC3Z8oWHg=
Subject key identifier: CF:3C:7E:96:6F:B0:4F:2A:57:38:B8:38:FD:A2:B9:36:F7:AB:FD:33
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4F875DD4A87CC3BF0FC96EB03CA2AF38798B43F2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145728.roa
Signing time: Fri 22 May 2026 02:48:01 +0000
ROA not before: Fri 22 May 2026 02:43:01 +0000
ROA not after: Fri 21 May 2027 02:48:01 +0000
asID: 145728
IP address blocks: 240a:ac06::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:87:5d:d4:a8:7c:c3:bf:0f:c9:6e:b0:3c:a2:af:38:79:8b:43:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:43:01 2026 GMT
Not After : May 21 02:48:01 2027 GMT
Subject: CN=CF3C7E966FB04F2A5738B838FDA2B936F7ABFD33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d2:a5:98:ba:1c:71:7e:25:0d:8f:3e:cc:c5:
1c:0d:37:d2:6c:20:a8:18:b5:1b:71:1d:69:c5:94:
35:f8:60:79:d8:76:8e:f7:7d:63:c9:3e:55:37:6d:
19:8d:94:11:ef:2b:7c:c2:21:3c:eb:1b:8f:a9:f0:
62:d6:78:b7:f3:99:7c:f4:f6:e9:f0:3e:47:1c:a7:
9a:86:42:2d:2c:89:1d:e6:6b:8c:a8:c6:f9:c8:e4:
02:39:d8:c7:0c:00:73:a7:0c:0b:45:f0:ff:f5:d6:
ac:64:f6:63:a9:20:d8:41:5c:9a:2a:5c:6e:81:c5:
be:6c:0e:3d:51:17:b4:5e:8a:f8:1c:66:55:fe:79:
e6:60:e8:ca:26:af:ad:d7:7b:b0:bd:22:b4:04:b5:
7f:83:75:59:a9:99:93:cc:5d:25:5f:82:76:a7:00:
94:94:aa:e5:76:3b:c8:97:11:f7:92:d7:d3:90:ac:
d6:81:5c:8b:5f:ff:ed:09:aa:d9:93:a1:42:9b:21:
d2:98:34:d8:25:8d:64:31:d7:14:29:73:34:2e:8b:
84:6f:6c:10:b2:da:1b:53:ec:19:25:56:1d:e2:b8:
43:7a:58:f5:df:e2:29:72:4e:c3:d3:81:f4:62:1b:
96:94:a1:fc:7c:bc:2a:f0:20:47:00:94:bc:8d:c3:
92:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3C:7E:96:6F:B0:4F:2A:57:38:B8:38:FD:A2:B9:36:F7:AB:FD:33
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145728.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac06::/32
Signature Algorithm: sha256WithRSAEncryption
61:eb:4f:66:ff:11:eb:15:2d:33:70:6a:88:07:54:dc:63:99:
ab:82:84:f5:b2:a7:d4:39:96:5f:d7:8d:77:3f:ec:e8:e8:ef:
a6:ac:df:c2:16:1e:3d:68:50:53:0d:f8:8f:dc:0f:90:51:9d:
79:59:db:8c:91:2c:33:24:55:27:5d:1f:e2:54:cd:55:34:3e:
0c:0c:71:00:87:97:0d:c0:2a:47:bd:92:ad:28:03:70:79:05:
9c:ee:ea:a7:03:96:b2:9b:6e:c6:f5:4e:99:f9:24:7d:74:4b:
f6:b4:55:71:a9:84:bd:9b:ca:66:3a:bb:6d:ea:61:a1:44:b2:
e4:fb:48:a8:d2:e3:68:9d:30:e5:b6:a2:a1:ec:b0:f4:ed:b6:
bb:9f:ed:86:95:3d:1f:e6:4d:4a:4a:af:47:6b:98:2d:bf:c2:
c9:d2:45:cb:14:30:b5:7e:06:6b:1f:75:a0:09:2b:fa:11:10:
ef:8d:7d:76:a5:b9:a3:fe:7a:df:ac:07:43:f5:c4:07:e2:9f:
84:ca:b5:b3:60:66:91:df:51:b4:a6:dc:4e:86:bf:1c:8f:a2:
02:01:73:14:31:9e:cb:c4:ee:dd:b4:08:8f:02:5c:e7:88:e6:
10:8d:2c:54:89:97:d5:d4:94:49:ac:d1:bc:dc:c1:f5:88:70:
97:81:a5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:49 2026 by rpki-client