Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145810.roa
File: AS145810.roa (raw, json)
Hash identifier: JhxzXpgOgNk+YYnzUDjow1/dCanvDQO9sN9py4tfPDw=
Subject key identifier: A9:CE:D8:5D:62:89:78:B7:0C:64:E6:F7:69:97:F2:24:F7:E7:D0:36
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 126F256851757D11124EDFF3B1365E78DAA427F7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145810.roa
Signing time: Mon 25 May 2026 03:19:11 +0000
ROA not before: Mon 25 May 2026 03:14:11 +0000
ROA not after: Mon 24 May 2027 03:19:11 +0000
asID: 145810
IP address blocks: 240a:ac58::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:6f:25:68:51:75:7d:11:12:4e:df:f3:b1:36:5e:78:da:a4:27:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:11 2026 GMT
Not After : May 24 03:19:11 2027 GMT
Subject: CN=A9CED85D628978B70C64E6F76997F224F7E7D036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b7:33:69:f4:7d:2d:33:9e:ed:ef:24:83:e1:
0b:af:df:02:f0:05:54:62:1c:bf:9b:95:a7:2c:0f:
2d:c5:51:3f:64:9a:c6:0e:aa:90:21:d3:e2:03:59:
3f:93:a2:68:98:9f:4f:5f:c2:9b:d6:1d:4a:91:be:
2d:31:5f:69:b1:4c:23:cb:fd:11:c9:dd:f7:41:68:
b5:47:4f:4a:e1:06:83:94:15:fc:70:90:a7:d0:ae:
b0:9a:b3:4e:bf:f3:0c:02:ba:24:93:87:a6:e7:02:
ed:4a:24:b0:e2:10:96:2c:30:32:7d:19:9a:85:53:
39:92:55:36:c4:73:f2:7d:0b:c1:87:ee:3a:2a:9e:
77:98:9b:89:89:0a:6f:e6:7e:71:e9:ec:83:15:95:
03:e2:55:4e:87:57:21:e2:c6:7e:db:29:bb:8f:13:
7f:71:01:18:70:68:0d:a2:32:c2:4e:08:f4:e7:0a:
45:30:64:7b:bd:bc:8a:18:01:f6:8c:1d:47:41:df:
cc:de:42:d9:bc:ce:cc:13:64:97:d7:01:c5:4c:8d:
c8:d5:c0:5c:cb:e9:26:ae:11:5f:72:8d:4c:03:66:
b7:48:f2:0a:ad:7f:70:7d:07:1e:77:57:c9:bd:e7:
a9:47:ae:40:b7:c4:e1:eb:25:ef:dd:81:6d:fa:f5:
76:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CE:D8:5D:62:89:78:B7:0C:64:E6:F7:69:97:F2:24:F7:E7:D0:36
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145810.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac58::/32
Signature Algorithm: sha256WithRSAEncryption
b8:8d:50:90:e5:7d:4e:ea:37:b8:24:bf:7e:ad:be:cd:6d:b5:
ff:41:9e:3a:e8:fb:dd:de:5e:bf:8c:c5:4f:13:8a:d3:a2:d7:
98:4a:6b:ee:dd:07:e9:11:a0:e8:5b:27:8b:6d:b9:d7:e3:f1:
d1:cb:5f:d7:f1:0a:1a:bd:fd:72:77:d0:89:bd:34:71:06:7a:
71:12:79:81:93:c4:05:55:84:8c:3f:5e:40:85:68:07:20:24:
94:95:1e:38:e6:27:22:6e:34:46:86:5f:7a:c7:b1:4a:82:0d:
a5:2a:77:88:bd:83:b7:af:03:00:10:64:22:ca:d2:58:53:53:
45:f8:41:f0:ef:a5:ea:9e:dc:2a:0a:4b:4b:ff:2c:e2:ea:0e:
f6:cd:e4:97:1f:92:b3:df:d1:83:d4:84:31:df:12:11:dc:81:
1a:c3:cf:d7:f6:cd:6f:a5:d9:db:9a:ea:a7:e8:53:0a:bf:e0:
00:92:47:47:79:8c:80:3e:a8:c1:f5:12:8d:54:c8:01:a1:62:
ed:e8:db:0a:e2:e5:0a:11:a9:53:59:e2:51:d1:c2:29:3f:84:
cc:52:51:f8:af:19:9f:08:86:89:97:03:b8:bd:c4:60:c1:21:
a5:ca:0b:4d:c5:2a:6a:67:04:45:6b:92:c1:97:88:9b:e4:01:
27:9d:32:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:02 2026 by rpki-client