Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145740.roa
File: AS145740.roa (raw, json)
Hash identifier: Kd5vAxwbA5PA7a4V6yvCIUtB5ugEHocsWuwLk8Ho/Sg=
Subject key identifier: 81:75:9C:2F:53:16:CE:22:4E:51:54:64:73:92:A6:62:C1:0B:F6:64
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4B7D73E0317CE2A385AE47E13F455B02A056B150
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145740.roa
Signing time: Tue 26 May 2026 06:30:36 +0000
ROA not before: Tue 26 May 2026 06:25:36 +0000
ROA not after: Tue 25 May 2027 06:30:36 +0000
asID: 145740
IP address blocks: 240a:ac12::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:7d:73:e0:31:7c:e2:a3:85:ae:47:e1:3f:45:5b:02:a0:56:b1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:36 2026 GMT
Not After : May 25 06:30:36 2027 GMT
Subject: CN=81759C2F5316CE224E5154647392A662C10BF664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:df:dc:d6:01:7e:7a:31:5e:40:0a:66:cc:7c:
de:87:50:71:15:b7:55:46:e7:04:81:7b:7c:ce:e8:
8f:24:5f:df:f9:73:49:80:c7:f6:db:ee:77:09:fe:
1b:f9:7e:5b:a2:81:b6:e2:2f:19:9b:9c:07:1b:39:
b4:c1:9c:b2:8a:62:ad:59:9a:de:13:34:31:7d:48:
58:fd:50:a5:3d:be:05:b9:48:6d:00:98:40:48:d8:
33:c2:b7:5e:11:77:31:20:cd:e2:08:98:8a:c7:ac:
11:9e:ed:ba:f0:88:ee:78:69:c2:77:50:2d:cb:ba:
84:2a:78:17:41:64:37:2f:34:38:b6:99:55:b6:14:
35:0d:95:f7:5b:91:e9:ba:3b:74:fd:ac:b3:fa:33:
ce:53:f9:62:bd:03:1e:b8:be:cf:ad:3b:0b:57:4f:
d0:78:71:61:35:64:4a:35:c7:7a:83:22:c0:f5:c9:
9e:88:4f:96:ce:33:58:b7:7f:39:e5:e5:64:b9:0b:
4f:fc:8a:ff:00:80:da:c1:aa:3a:f2:be:6e:96:13:
58:3a:bb:72:00:fc:15:ee:c8:aa:e3:8a:42:3c:71:
84:1c:c3:8e:88:df:57:86:50:14:ee:53:43:48:69:
ad:17:c1:51:cc:a1:d9:6b:a1:41:65:29:71:7a:93:
89:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:75:9C:2F:53:16:CE:22:4E:51:54:64:73:92:A6:62:C1:0B:F6:64
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145740.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac12::/32
Signature Algorithm: sha256WithRSAEncryption
33:10:84:93:f9:f9:55:9f:f2:95:df:10:82:e6:7e:9a:2f:83:
fa:ef:e8:39:a1:b2:b2:ef:08:7f:f8:5a:71:a2:47:88:69:01:
08:79:a8:4b:73:c3:63:7a:c2:f3:94:10:af:13:5a:79:4b:e3:
a8:72:97:7d:03:f7:19:1b:99:82:60:2e:3a:37:0d:f8:46:a6:
dc:b1:33:f9:0c:9d:a4:3a:a8:55:94:4a:fe:68:08:a6:4e:8e:
06:6b:49:17:17:4e:18:c8:9e:d4:45:d0:d2:b0:2d:95:7a:fd:
0d:bc:8b:9f:9d:d3:48:56:b3:f7:4b:18:b9:05:fb:74:cc:a3:
bc:29:55:44:9d:85:f4:f4:bd:3c:16:0a:ef:1a:0f:0a:89:09:
a9:6f:ec:97:39:07:f1:db:88:a0:6f:45:03:67:49:dc:7a:68:
57:5a:db:91:63:65:77:02:33:55:db:8c:e9:f4:23:18:30:de:
29:51:68:4e:3d:80:4b:44:d1:ac:80:69:05:82:e0:2d:a9:75:
c9:00:02:fd:f0:7b:b3:d1:ca:1d:89:e7:f7:c1:28:6b:71:d6:
37:d3:d9:be:d0:ad:82:0b:6b:35:95:2f:5c:6d:77:41:0c:02:
e7:54:f2:d6:df:f7:14:34:cc:6b:1e:12:85:85:d7:d8:4b:2f:
17:bf:a5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:43 2026 by rpki-client