Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145795.roa
File: AS145795.roa (raw, json)
Hash identifier: WhRw+kJk9meSHZXZ2m0Py/3wLURTlXSa22wpuakRU+E=
Subject key identifier: 2E:C1:76:4A:24:01:74:06:EA:DE:BE:68:AD:83:F9:C2:A6:FA:9A:20
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 66D5BD2535AB16A67B129138C445E0E2F8733C26
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145795.roa
Signing time: Fri 22 May 2026 06:46:03 +0000
ROA not before: Fri 22 May 2026 06:41:03 +0000
ROA not after: Fri 21 May 2027 06:46:03 +0000
asID: 145795
IP address blocks: 240a:ac49::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:d5:bd:25:35:ab:16:a6:7b:12:91:38:c4:45:e0:e2:f8:73:3c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:03 2026 GMT
Not After : May 21 06:46:03 2027 GMT
Subject: CN=2EC1764A24017406EADEBE68AD83F9C2A6FA9A20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:a3:30:fe:99:68:a9:8c:1b:69:96:7b:38:
3e:23:69:32:48:e5:ef:0d:c6:9f:82:f4:3a:44:de:
ce:2e:db:85:de:c6:49:85:2b:74:22:1d:bd:c8:b8:
fe:f9:d2:7e:a3:28:51:0e:40:26:7d:20:43:b9:99:
ca:5e:df:26:66:ef:e8:79:dd:b0:1f:aa:aa:51:cf:
41:63:20:8c:38:8c:e5:e8:83:79:5f:6e:ac:e3:cf:
32:2d:e2:d4:c3:49:14:0d:ce:32:16:7e:38:03:2d:
77:6e:93:d9:39:7a:c0:33:3b:9f:46:64:0c:1c:be:
ca:fb:64:f6:43:10:db:25:97:60:20:c7:cd:43:c0:
9a:ef:a1:42:4d:7b:c7:5d:d1:92:43:3d:3d:8d:f0:
90:8c:11:6a:b0:cd:de:f8:73:21:ab:c8:00:9e:2f:
61:ce:35:8e:ec:2d:60:e3:ee:ad:20:e2:63:86:98:
bc:9f:09:e4:6f:60:71:88:fd:ea:90:99:1f:00:09:
df:22:c5:7b:e5:4e:2b:24:dc:7b:eb:7e:dc:a7:2d:
19:df:0e:19:d0:c4:15:07:0f:dd:9c:a5:77:be:8d:
1d:71:6c:c9:ed:73:8f:f5:9b:ef:c7:93:4e:3e:22:
1e:c8:a8:dd:16:f2:75:ba:f2:cf:e4:24:48:fb:c1:
ed:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C1:76:4A:24:01:74:06:EA:DE:BE:68:AD:83:F9:C2:A6:FA:9A:20
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145795.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac49::/32
Signature Algorithm: sha256WithRSAEncryption
8a:7d:1e:bc:ae:00:c4:3d:39:99:ad:ec:43:de:40:16:a4:f8:
9f:de:03:11:0c:bd:68:f5:60:5a:75:f5:cb:da:5a:7b:38:3f:
a1:82:55:c2:2d:ab:59:7e:fa:71:06:54:71:4c:15:20:6d:94:
f3:a2:72:14:a9:1f:0d:4d:68:7f:19:e7:1f:9c:5b:d5:34:d5:
77:03:13:5a:ad:29:e2:08:e6:a7:1d:50:d8:d5:28:91:20:54:
54:ff:b1:e1:a7:28:e4:b2:49:b0:37:3c:a3:3c:45:31:9d:16:
3c:5d:e2:f3:c8:09:b8:5f:ce:44:fa:e1:97:c7:95:22:0c:d1:
e2:c5:ac:41:2f:97:30:09:44:0b:55:02:e2:56:2a:73:27:db:
40:66:cd:b0:87:ea:75:68:e3:d5:b7:33:df:19:ba:87:17:8d:
44:93:30:de:73:a4:9a:ed:6a:80:1f:7f:b5:d5:55:09:1e:e9:
97:28:f8:b3:07:29:ce:5b:56:15:74:f6:51:32:66:cc:08:54:
12:8f:5e:f8:6c:61:07:e5:4e:40:c5:f4:9d:ad:7f:81:53:48:
10:dc:4c:7e:d7:89:53:05:39:5e:d6:78:ac:18:05:79:da:23:
ea:91:03:45:5e:29:a0:72:6c:b2:15:0a:33:bc:bd:85:d0:c3:
98:d7:6b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:01 2026 by rpki-client