Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145814.roa
File: AS145814.roa (raw, json)
Hash identifier: KP0HTY9MU3lGbPEZx7nt5+W55yxicssrw76AlFSMkvg=
Subject key identifier: 05:94:52:63:F3:54:BF:E2:6A:47:74:94:2D:FC:32:B5:8F:59:FC:02
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 32D31402D13866391FA9D811371A66A52E93625F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145814.roa
Signing time: Mon 25 May 2026 03:19:37 +0000
ROA not before: Mon 25 May 2026 03:14:37 +0000
ROA not after: Mon 24 May 2027 03:19:37 +0000
asID: 145814
IP address blocks: 240a:ac5c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:d3:14:02:d1:38:66:39:1f:a9:d8:11:37:1a:66:a5:2e:93:62:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:37 2026 GMT
Not After : May 24 03:19:37 2027 GMT
Subject: CN=05945263F354BFE26A4774942DFC32B58F59FC02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:25:5e:44:4e:72:61:24:48:46:c8:23:3f:36:
5f:e0:36:41:8d:b5:d6:98:ab:ff:f4:03:3a:84:39:
75:e9:f0:91:0f:ac:f9:20:3a:73:a3:91:bf:f4:f0:
26:f7:a1:ff:38:32:65:71:b5:38:d5:5d:80:15:94:
ae:fb:ed:51:db:42:94:8e:8c:72:77:3a:2c:23:d5:
fa:d4:7a:18:ed:b0:08:43:9d:86:6e:d7:ec:aa:e0:
9d:b6:99:92:63:1b:a4:81:17:e7:a2:a2:99:b3:b2:
6f:5c:6b:03:10:39:c8:1e:5c:ce:91:f6:3e:22:fb:
b0:5b:1f:3b:5e:5d:3e:d6:c8:0b:04:ec:1f:66:eb:
81:fa:49:c5:26:f1:ea:9e:88:0e:f3:b8:fa:69:b4:
9a:f0:63:cf:b5:4b:0d:57:e1:8b:1c:9c:73:16:d7:
dd:f4:ad:19:fe:f1:10:68:df:f8:44:f8:32:7d:a9:
d7:fd:7d:c7:c5:40:d9:4b:b2:23:e3:4d:12:6a:1d:
a1:da:8f:37:6f:2a:26:73:5e:9b:72:63:f4:ac:dd:
ef:ad:a2:89:f9:39:ca:d5:b0:7b:1e:09:9b:87:0a:
92:fa:02:3c:a1:0b:db:27:73:03:2e:3a:b5:e2:8b:
98:f7:8e:d4:ff:10:ec:df:16:aa:52:65:7d:95:62:
64:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:94:52:63:F3:54:BF:E2:6A:47:74:94:2D:FC:32:B5:8F:59:FC:02
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145814.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac5c::/32
Signature Algorithm: sha256WithRSAEncryption
79:00:a2:92:80:8a:a8:f1:c2:cc:47:3d:5e:ea:fe:3e:3b:5a:
6f:fc:55:ec:4d:4b:9f:40:d6:58:83:ad:f2:76:f1:51:4c:bb:
55:b2:c8:38:56:64:02:d5:50:08:8a:e4:7b:65:dd:5e:32:03:
e4:07:bc:76:f0:fc:95:85:b1:d6:92:73:45:09:d3:ce:3a:9b:
3c:6d:30:5d:a0:11:ff:e7:f3:4d:dc:8b:14:b6:ed:ee:bf:f6:
d8:65:c6:50:1a:7a:ea:00:0c:22:0d:ba:3e:54:4d:b9:95:35:
6b:02:a8:9b:3b:9a:48:f5:74:94:a4:b3:80:e8:5f:1e:a0:4d:
6d:10:86:5e:36:b0:8d:9c:ec:80:3b:69:28:dc:09:e1:7e:d1:
c1:e8:65:9e:e0:0f:58:57:86:3f:ce:4a:46:b7:f9:7d:ad:10:
d9:21:d4:0b:6c:9c:a6:a3:84:d7:f5:c5:c2:50:a6:0f:47:1f:
0e:b7:d7:7b:f5:c3:17:f1:6f:21:36:43:f2:f6:d4:99:3b:2a:
59:b9:2b:0f:ea:c2:40:f0:f6:3b:df:2e:32:08:33:e0:41:b2:
ef:76:6e:8f:e7:fc:0b:40:6a:ff:c9:ba:a1:f8:99:ca:0a:ac:
20:30:90:9e:f4:1c:bc:1a:e8:32:6c:c4:3b:9a:ba:bb:5d:0d:
81:02:ef:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:08 2026 by rpki-client