Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145754.roa
File: AS145754.roa (raw, json)
Hash identifier: gTcKMZiAdnaWmfGEIlMwUA+KDjKdLkWxOK7o9kCjxvo=
Subject key identifier: 7F:72:EB:18:3B:51:69:15:B6:1D:37:03:A0:6E:25:8C:5E:21:EE:77
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1E23729EB41414F4FBB57DAC32A4F1949FFD912D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145754.roa
Signing time: Mon 25 May 2026 01:20:21 +0000
ROA not before: Mon 25 May 2026 01:15:21 +0000
ROA not after: Mon 24 May 2027 01:20:21 +0000
asID: 145754
IP address blocks: 240a:ac20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:23:72:9e:b4:14:14:f4:fb:b5:7d:ac:32:a4:f1:94:9f:fd:91:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:21 2026 GMT
Not After : May 24 01:20:21 2027 GMT
Subject: CN=7F72EB183B516915B61D3703A06E258C5E21EE77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:04:2a:b8:71:12:8a:e8:e3:e3:89:3c:0a:8d:
17:fb:3b:6e:c9:74:b2:30:38:f6:ca:c3:27:a0:5e:
6f:e2:82:6c:0c:75:a5:95:0e:78:e6:6f:d1:85:db:
f8:6f:80:1f:cd:93:4c:c5:a6:87:d3:f0:0b:5a:65:
0a:64:8a:a6:66:15:0d:1f:a7:a1:24:47:0f:f8:14:
fb:34:d0:da:02:9c:3e:eb:98:e4:d6:3d:b4:40:61:
93:09:ac:03:28:bc:d4:26:8d:f3:31:b0:9c:3e:84:
19:ef:c8:55:2c:f9:a8:26:7c:8f:c2:0a:fe:80:61:
30:99:03:68:65:a9:e6:7c:a4:43:44:02:92:b9:8c:
0b:ba:48:0e:b1:ed:1a:2f:31:75:57:7d:c9:e5:2a:
d9:bf:16:8a:99:c6:fb:eb:6d:42:13:32:6b:db:29:
e3:cc:98:5c:49:ce:3d:50:43:30:ab:89:09:5d:4a:
18:c3:ca:a2:af:bc:bb:b2:10:9c:a9:fb:7b:20:03:
da:04:d5:c5:18:ed:6b:4a:a6:eb:50:1a:0e:80:d6:
a0:b9:3e:a0:21:af:89:6d:e9:76:3b:9a:e1:c2:95:
7d:eb:47:6d:6b:44:d4:ed:64:c3:cf:30:9f:24:90:
52:0c:b3:a8:3b:a2:7c:48:0c:a8:d8:de:99:a9:df:
91:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:72:EB:18:3B:51:69:15:B6:1D:37:03:A0:6E:25:8C:5E:21:EE:77
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145754.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac20::/32
Signature Algorithm: sha256WithRSAEncryption
75:1a:ee:16:47:0f:ac:16:68:37:81:08:aa:05:5b:17:fe:84:
64:98:b0:c4:06:7a:cb:96:bb:0e:69:b3:d6:cd:ae:62:d6:f4:
1c:c9:19:5f:eb:11:87:48:97:d3:f2:aa:ea:77:29:e7:94:40:
52:39:2a:1b:66:19:31:fe:15:4f:16:65:8c:78:b1:3d:0a:31:
72:e9:26:f0:c4:61:ff:18:78:5d:df:60:ef:dc:98:0e:e7:62:
32:4d:ee:8e:32:09:b0:15:c9:5f:1c:53:3c:24:56:9c:09:7a:
d0:11:7b:a4:38:54:fd:b7:24:b2:21:05:98:b8:f8:37:2d:c4:
f5:49:f4:c1:49:e6:61:d6:7d:50:3d:83:b2:9e:c4:a9:08:4e:
33:f0:83:f4:04:66:6f:0f:43:8b:55:85:4c:f0:32:3c:40:1e:
16:24:1f:f5:85:48:02:b7:f5:ee:b9:55:dd:d2:fd:af:4b:3f:
10:65:a5:3a:44:a2:db:d5:d0:0f:e0:d8:8b:ae:0a:fe:23:20:
a0:60:5a:b4:c3:52:e5:2c:ce:54:97:a7:8f:a5:45:ed:c7:54:
49:3a:7c:6e:d4:05:27:a6:eb:36:4c:c5:a7:71:0e:87:b3:8c:
41:27:55:96:c0:71:6b:c1:62:e2:11:a6:ba:25:22:99:c7:36:
6e:c2:ff:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:48 2026 by rpki-client