Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145783.roa
File: AS145783.roa (raw, json)
Hash identifier: /9X7HFv2zB7r/jhGA0653yzkYKkIVWXFVW3O5DnrmcU=
Subject key identifier: 86:E0:49:63:CF:92:18:BF:F4:F9:6D:5F:4D:5A:70:4B:56:D7:1C:61
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4558464B0A7D9B2F2F7F16FC5B5789B3BA63D1F1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145783.roa
Signing time: Fri 22 May 2026 07:08:58 +0000
ROA not before: Fri 22 May 2026 07:03:58 +0000
ROA not after: Fri 21 May 2027 07:08:58 +0000
asID: 145783
IP address blocks: 240a:ac3d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:58:46:4b:0a:7d:9b:2f:2f:7f:16:fc:5b:57:89:b3:ba:63:d1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:58 2026 GMT
Not After : May 21 07:08:58 2027 GMT
Subject: CN=86E04963CF9218BFF4F96D5F4D5A704B56D71C61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:77:5b:cb:71:fd:5e:16:b5:5b:ab:2a:5a:43:
7e:cb:f1:aa:87:7d:57:63:77:50:7b:54:b6:6e:f2:
0d:c2:22:34:76:1f:a7:de:d6:4d:b3:67:85:6c:10:
bb:5c:f0:56:17:37:82:87:f0:33:86:5f:ad:db:a0:
56:d9:44:5f:28:b2:64:ba:5a:9a:3e:ec:65:78:3a:
6e:46:9d:9b:78:a8:54:17:a6:e5:e8:4b:b9:ca:29:
19:d2:29:2d:c4:40:3c:95:5c:8c:a9:65:ce:b9:33:
2d:67:06:6f:59:20:46:1d:5e:54:09:91:f9:e7:5b:
cf:7b:4b:72:c0:8a:78:4f:3f:de:ac:d5:62:8c:a6:
46:66:d8:f3:4c:ac:0c:b0:23:1c:65:48:b6:29:ee:
e6:ce:9a:f8:6b:9c:2b:f2:e3:3c:1d:8e:03:ba:a9:
79:5c:83:34:d0:ef:0c:04:d0:f1:40:12:df:63:80:
e8:02:9c:9b:4d:ca:8d:8a:c0:44:ce:dd:68:56:13:
b7:64:4f:63:87:d8:cf:86:44:1a:b2:75:26:32:2b:
9d:eb:52:5b:84:7d:f7:ae:8a:bf:5f:53:e0:38:7d:
41:db:03:ed:e1:bb:8d:3a:69:b3:e9:de:6c:18:46:
21:2c:98:15:ac:5a:8e:f1:ce:fa:f1:3d:1d:cd:13:
6f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E0:49:63:CF:92:18:BF:F4:F9:6D:5F:4D:5A:70:4B:56:D7:1C:61
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145783.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac3d::/32
Signature Algorithm: sha256WithRSAEncryption
b6:3d:a1:d0:39:b2:94:dc:a2:19:08:7e:a3:99:37:06:79:6b:
17:a8:9f:2a:65:13:db:77:93:2c:36:f2:a8:4c:fb:1d:35:6b:
4c:46:07:3e:20:47:8a:f7:24:a3:9c:e5:4c:84:d1:da:dd:3f:
d4:15:98:32:57:fa:e1:15:e3:e1:aa:d4:db:b3:b3:20:8d:f3:
9d:e4:5b:33:88:3e:11:f9:77:db:b0:a6:c1:ec:ca:6d:d9:b3:
a1:21:81:d3:be:d4:bf:36:78:75:f7:0a:eb:1e:4c:12:c6:c6:
60:a7:94:c1:44:e6:cc:ce:20:b5:b2:5d:f6:8a:63:22:12:69:
d9:1e:bc:5b:03:be:4c:6f:9c:89:b4:ac:d1:5f:29:ac:15:41:
fc:a2:d8:04:cc:4d:5f:90:ac:72:24:b1:7d:fb:d8:77:24:42:
1b:05:2e:e8:bd:f8:f6:ee:6c:3f:fc:ce:89:a9:8d:5e:ad:e4:
32:24:c0:1b:2c:b5:bb:23:e0:4b:a3:bf:1a:bf:9c:31:69:b2:
bd:80:b6:c1:c2:93:fc:62:7a:ad:7e:27:a5:f6:19:ca:18:79:
7b:97:62:b4:bb:14:e0:c3:ba:56:8f:3d:17:14:33:39:5a:0b:
4f:0c:c4:c5:d0:fd:44:f7:bf:0c:76:3b:08:c1:48:59:f0:54:
d2:3a:cf:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:16 2026 by rpki-client