Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145791.roa
File: AS145791.roa (raw, json)
Hash identifier: MVP7VEyGjOllpq0Pj5QwaHjWThM1SoYNHL8PKHqxOAc=
Subject key identifier: AD:DC:8D:AE:3B:31:BF:8E:7B:DD:4B:4A:D3:D6:50:36:A7:28:D1:E9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 77F2C56773EC1126BE56B63ED089B2C3970A5436
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145791.roa
Signing time: Tue 26 May 2026 06:12:39 +0000
ROA not before: Tue 26 May 2026 06:07:39 +0000
ROA not after: Tue 25 May 2027 06:12:39 +0000
asID: 145791
IP address blocks: 240a:ac45::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:f2:c5:67:73:ec:11:26:be:56:b6:3e:d0:89:b2:c3:97:0a:54:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:39 2026 GMT
Not After : May 25 06:12:39 2027 GMT
Subject: CN=ADDC8DAE3B31BF8E7BDD4B4AD3D65036A728D1E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:40:bc:f6:f8:f4:8d:9e:20:8d:5a:1c:73:
c1:d6:7e:eb:d6:13:d6:90:28:72:e5:ee:e9:27:82:
96:62:c2:f2:1e:e7:6f:80:29:7b:3c:3a:05:09:69:
5c:32:bd:be:6c:90:51:87:b8:74:71:73:45:8a:cb:
68:c4:d6:7c:41:ec:7c:49:2d:54:fe:98:dd:5a:c7:
3d:b6:ce:c6:02:af:f1:36:9d:d8:a7:a0:d1:3c:d3:
6a:ef:7d:cc:05:a5:fa:f9:1a:99:e2:6b:dd:fa:cf:
ca:83:1c:60:f3:2b:4d:a3:3c:4d:96:81:7b:d5:8a:
e1:d9:cf:de:4f:92:04:10:a7:43:24:f7:90:16:cc:
e2:88:a6:32:75:b6:7e:98:6a:29:be:b7:9e:79:0b:
10:68:a3:aa:9d:a0:72:39:5f:06:d7:c7:dd:e3:a8:
e6:e0:95:51:5a:d4:59:18:84:77:b1:6e:d1:28:f8:
ff:fe:15:ca:c0:fd:c7:1f:fe:72:f6:17:a8:34:b4:
b4:bc:fd:d6:d8:09:9c:e0:d6:78:ae:cf:9e:fb:d0:
09:5e:84:05:c2:42:d7:c7:fb:a8:c2:8b:71:b0:6d:
f2:ef:9f:a6:a5:a6:c6:d0:c8:4d:5d:17:94:1c:e0:
f6:78:31:50:20:05:ce:df:5a:dd:7b:94:a3:e0:2c:
fd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DC:8D:AE:3B:31:BF:8E:7B:DD:4B:4A:D3:D6:50:36:A7:28:D1:E9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145791.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac45::/32
Signature Algorithm: sha256WithRSAEncryption
07:65:46:ac:1d:0f:ea:c9:c9:69:92:13:13:31:1f:97:8f:43:
28:79:6e:28:98:23:94:8a:55:84:25:bb:d3:f7:28:5f:96:c0:
1d:93:b9:c5:8b:0c:8f:f0:b4:49:44:08:26:c1:c5:6d:ea:28:
69:83:e5:dc:86:9a:26:ad:e7:3d:0e:45:b0:45:f7:86:94:91:
2d:cc:a3:9b:aa:52:6e:b8:57:1b:a7:0c:e2:27:1e:29:31:12:
01:1c:4f:e5:99:eb:bd:6c:8f:fb:b8:7e:f6:50:5b:3e:e0:7a:
27:06:48:ad:05:e7:b4:4b:bd:e8:ed:f6:90:7f:b6:bf:b0:0d:
0f:d8:a1:e9:58:55:92:bd:0a:a8:74:f1:cd:8e:92:72:eb:e3:
97:7c:d6:3b:09:c6:31:d4:d2:0b:b3:55:69:d9:c0:f0:f7:4f:
13:f9:92:69:7b:c4:a4:94:bb:10:9b:58:d2:8b:7e:53:a1:a3:
7f:fc:ad:4f:6f:6a:a3:36:5d:0d:49:c2:65:79:dc:c5:b8:92:
28:e1:d6:1d:5b:34:82:e6:e5:3a:2d:1b:9c:bd:d3:45:18:9f:
e7:4e:88:94:b9:33:88:2c:01:59:52:d0:fb:8c:8f:7d:27:c7:
62:62:4e:18:ef:6b:5a:d9:60:cb:84:43:a8:df:d8:32:0f:e1:
e9:b9:af:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:56 2026 by rpki-client