Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145771.roa
File: AS145771.roa (raw, json)
Hash identifier: WyCaqEBAQ5CppiKWXc95hoGi74XQhO9p7B/NU6pcndo=
Subject key identifier: 47:F9:01:22:A2:F0:8C:3A:F4:3A:4D:37:BE:64:C0:0E:70:0C:CD:CF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 266133D44837AC7E0E61EDEBF6C640F0D13CB1CD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145771.roa
Signing time: Fri 22 May 2026 02:47:48 +0000
ROA not before: Fri 22 May 2026 02:42:48 +0000
ROA not after: Fri 21 May 2027 02:47:48 +0000
asID: 145771
IP address blocks: 240a:ac31::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:61:33:d4:48:37:ac:7e:0e:61:ed:eb:f6:c6:40:f0:d1:3c:b1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:48 2026 GMT
Not After : May 21 02:47:48 2027 GMT
Subject: CN=47F90122A2F08C3AF43A4D37BE64C00E700CCDCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:15:96:f6:4c:4d:8d:9f:d5:22:2d:f4:b0:07:
be:bf:b4:b2:c0:01:f4:6f:c9:d3:fb:20:fd:b3:85:
32:5b:53:28:5b:5c:e5:25:b1:36:78:de:19:7f:b9:
73:22:f6:be:5b:3a:0b:84:a1:57:a0:d8:8f:43:22:
46:79:f1:09:39:b8:ec:26:4e:47:63:f7:db:54:5e:
25:a1:33:18:22:02:d9:38:eb:35:94:1e:90:e4:c4:
a5:5b:ae:e4:f4:b6:06:de:84:2e:1b:d6:b0:f7:a0:
8b:45:5e:5e:ae:2e:f6:ff:9e:d8:a9:76:cd:d0:4e:
15:c4:28:78:71:20:c8:8f:7f:02:e6:42:f6:b8:af:
a0:94:1f:b9:2b:49:b7:a2:18:a7:af:e4:52:7e:ec:
0c:76:ab:26:12:dc:d0:64:22:a1:88:07:73:05:bc:
fc:7b:75:1f:11:7b:fc:61:4c:a0:f5:ee:b0:5f:87:
5f:c5:60:25:46:a5:63:65:56:85:12:85:41:56:3c:
5e:c3:ce:ab:fa:74:f0:7e:59:5f:2f:d6:f7:da:88:
99:c1:bf:14:6c:3c:dd:50:02:0d:6d:f3:d2:ae:5d:
ac:1c:8a:ff:8c:2e:2b:e7:0c:3b:b2:a6:eb:ae:ac:
dc:1b:50:f8:7f:63:8a:3f:aa:9e:9d:8a:78:87:86:
b0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F9:01:22:A2:F0:8C:3A:F4:3A:4D:37:BE:64:C0:0E:70:0C:CD:CF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145771.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac31::/32
Signature Algorithm: sha256WithRSAEncryption
4b:dc:d7:ca:76:37:2b:a3:37:24:0c:90:68:85:45:3e:de:1e:
ea:b2:1d:24:00:59:67:58:78:c9:cc:1d:72:13:8a:bd:23:86:
bf:0f:c5:76:a9:3a:f4:8b:71:e4:20:ac:16:da:d2:9c:5e:a5:
55:48:03:bb:51:81:28:87:b2:75:0b:41:e9:4b:a8:0d:ad:53:
4d:4d:00:35:a8:72:58:23:53:76:e6:78:e2:4f:9b:7b:de:5a:
0b:e7:0f:9f:f2:e7:1a:37:5c:a7:bd:96:b7:6f:a7:70:eb:3d:
85:01:64:2b:15:86:98:5a:2f:c6:37:ea:d6:c9:8c:5e:72:f3:
82:bf:dd:d3:3f:93:fb:f2:23:f6:92:06:c8:05:c6:09:33:f9:
77:bc:10:f9:9d:75:46:a8:d7:7a:e3:91:5d:dd:1c:9d:b0:28:
5e:9e:f4:9e:f5:d3:31:de:26:23:c6:e0:34:6d:a7:6d:0c:da:
52:71:23:9e:95:88:83:2e:c3:87:a5:9e:b8:87:73:db:d2:00:
9d:bd:1c:a0:f6:cd:8d:cb:7e:c5:fe:db:05:b2:57:f2:3d:7e:
4a:57:06:08:51:65:f6:40:a7:95:48:0f:2e:69:87:12:09:64:
f6:bf:1b:ce:78:f4:71:f0:3e:60:78:6f:93:c8:d5:06:06:b3:
4a:33:be:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:50 2026 by rpki-client