Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145739.roa
File: AS145739.roa (raw, json)
Hash identifier: TQNY7WxmbXwF1Cxo5F5vkNQFQOgDQC48l5CPc8DSpxY=
Subject key identifier: 98:02:AC:CF:93:90:F5:5E:F4:AE:97:0A:8F:05:30:09:C7:95:35:5C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4C0E33E78D82E3094DA63CDA69534A78A61B24CF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145739.roa
Signing time: Fri 22 May 2026 04:27:10 +0000
ROA not before: Fri 22 May 2026 04:22:10 +0000
ROA not after: Fri 21 May 2027 04:27:10 +0000
asID: 145739
IP address blocks: 240a:ac11::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:0e:33:e7:8d:82:e3:09:4d:a6:3c:da:69:53:4a:78:a6:1b:24:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:10 2026 GMT
Not After : May 21 04:27:10 2027 GMT
Subject: CN=9802ACCF9390F55EF4AE970A8F053009C795355C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:d0:3f:2e:9c:b3:28:cb:1b:68:70:63:15:
ff:d7:26:91:f5:5b:92:94:c0:06:e0:6a:62:95:ea:
30:c1:1c:f7:1a:67:07:7d:f0:9b:96:44:d7:66:f2:
17:10:f3:39:b2:0c:84:c2:ff:84:15:3e:ed:11:ed:
e0:67:b5:d4:29:a9:93:e7:67:b7:7e:53:fa:1d:5c:
64:fe:6b:14:d5:4e:ce:f5:76:f2:43:40:fe:05:2e:
8c:6e:af:ef:eb:ad:a4:4c:de:7a:e6:46:08:bf:94:
4c:d3:e5:20:f2:89:24:fe:bd:35:5b:70:07:d1:34:
16:9a:43:b1:38:44:45:01:14:91:78:ee:ff:2c:5b:
0f:ff:9b:6e:0f:a1:0a:e7:37:43:96:dd:90:42:e0:
47:9d:df:19:30:c6:eb:54:aa:72:54:9f:12:01:aa:
75:df:9f:0e:16:ed:ae:b5:f0:98:54:f8:44:eb:f3:
42:71:b6:32:7c:6f:03:16:47:3f:97:b4:46:19:4b:
c7:c3:56:d9:a9:29:90:e5:4d:0c:ac:6b:2d:5b:13:
c0:fa:76:50:94:79:d4:50:55:b2:60:b3:dc:26:b0:
8c:e6:ed:75:23:57:ee:4a:35:a8:31:e4:ab:52:9d:
0a:d0:9e:69:85:81:3a:f2:ae:84:f5:4c:72:45:63:
06:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:02:AC:CF:93:90:F5:5E:F4:AE:97:0A:8F:05:30:09:C7:95:35:5C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac11::/32
Signature Algorithm: sha256WithRSAEncryption
a2:a6:68:e0:a1:c3:b5:b7:27:eb:7f:f4:df:79:5f:6e:65:4a:
f7:8c:fc:bc:7a:24:6e:e8:06:d7:35:41:49:e2:35:b7:24:74:
69:0b:f1:fb:65:e0:5c:ef:0d:e5:d9:32:fc:a5:ce:47:06:03:
61:78:7c:75:72:bb:b0:46:e7:14:f5:db:90:ca:6b:64:dd:f8:
2a:cd:c5:17:2b:7e:70:81:9d:a4:d7:a0:9b:66:2e:35:f5:c0:
17:59:75:72:62:c3:53:86:8f:e7:30:a0:62:fe:82:4d:7c:d4:
e5:96:18:f6:43:6c:e8:ec:0c:79:21:9d:68:9e:fc:b5:f4:26:
0b:eb:8d:25:b6:6e:da:33:25:9b:41:b4:7f:ee:ac:ba:3e:68:
90:5a:5d:6e:dc:a7:bf:0f:dc:ab:f2:fc:85:f0:33:9c:bc:5a:
73:9f:66:91:31:cc:17:a4:b0:46:1c:74:10:7f:94:92:01:f1:
d4:85:a2:1f:71:04:0f:33:28:f0:61:c2:a8:bd:9c:e7:3b:d8:
0a:6b:99:7b:e1:00:06:e7:5e:04:fd:20:5d:5f:71:0a:b1:af:
4b:c7:8f:ac:d3:18:16:45:f6:19:ba:90:bd:88:69:e8:44:dc:
91:7a:31:ca:d3:e8:61:b6:9f:9a:dc:46:53:d2:ce:4d:4f:6b:
f6:7e:dc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:30:10 2026 by rpki-client