Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145821.roa
File: AS145821.roa (raw, json)
Hash identifier: EvpJUoW/Cd8UWWQYgknEgAHGqCjsoZiJR8/7KgtxdwU=
Subject key identifier: F1:F1:00:02:27:F0:C7:66:ED:8C:6F:AA:BC:B3:A5:EA:8F:C4:31:B0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 05AEAADEA493235EC2C13E6E764D1121384F5023
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145821.roa
Signing time: Fri 22 May 2026 07:40:41 +0000
ROA not before: Fri 22 May 2026 07:35:41 +0000
ROA not after: Fri 21 May 2027 07:40:41 +0000
asID: 145821
IP address blocks: 240a:ac63::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:ae:aa:de:a4:93:23:5e:c2:c1:3e:6e:76:4d:11:21:38:4f:50:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:41 2026 GMT
Not After : May 21 07:40:41 2027 GMT
Subject: CN=F1F1000227F0C766ED8C6FAABCB3A5EA8FC431B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:81:63:82:1b:6c:cf:1f:42:0b:78:01:84:
41:f5:25:72:c0:d9:51:0d:da:ac:e9:ff:26:c5:dd:
d8:e1:3f:69:58:bc:b1:53:d8:b5:55:a1:0d:4b:7f:
07:3f:d1:bb:98:0e:39:18:6a:e8:c7:a5:97:45:44:
60:6d:20:d5:b4:f8:44:60:7a:8f:f9:53:e4:cf:2e:
c1:fd:a0:5c:b3:ca:5d:b4:78:36:57:51:4a:08:65:
ca:e9:74:f4:f4:6a:aa:0a:14:c7:fb:4f:8f:9e:a2:
a0:41:76:a9:8d:04:16:9e:12:99:3e:bf:89:09:f1:
f0:41:0e:cd:82:3a:d5:6c:1c:1d:14:ff:50:78:a5:
36:20:21:b3:ee:cd:2e:a7:5b:d4:6a:1a:6d:43:94:
ca:c1:ec:93:28:80:36:06:87:b5:b2:0e:14:dd:05:
70:51:bc:fe:53:28:65:25:9c:62:0a:36:ca:e0:d8:
47:01:71:1c:fe:2a:72:7e:c1:c4:b9:dd:8e:0f:8f:
f6:e6:09:0a:4a:43:19:9e:f5:41:d2:d3:2c:d2:28:
e5:cf:c2:81:68:f1:e8:37:23:2c:3b:65:e0:2f:f8:
cf:77:b8:a6:8d:9b:5d:a2:c4:78:2b:48:55:55:72:
c2:fe:f5:03:f5:66:ce:6b:8e:66:2a:bf:dc:c3:ed:
54:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F1:00:02:27:F0:C7:66:ED:8C:6F:AA:BC:B3:A5:EA:8F:C4:31:B0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145821.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac63::/32
Signature Algorithm: sha256WithRSAEncryption
91:08:4a:49:20:05:88:09:51:8f:7e:35:4c:fa:7d:2c:58:b2:
24:2e:44:55:a0:80:a4:7b:be:32:e4:5f:66:e9:0f:33:f3:f5:
79:4c:70:4f:6e:56:aa:09:cf:fe:a4:cf:f9:7f:57:08:c2:fc:
ab:28:51:6d:ad:77:50:51:e4:82:37:39:69:c6:02:57:a8:f0:
62:2a:03:88:d2:c7:33:ee:28:82:4f:d7:e2:2e:44:72:ad:da:
97:40:42:e9:fa:2b:45:76:a0:d1:31:8d:d5:e3:93:02:9c:85:
6b:9f:6b:3f:61:77:75:3c:98:41:fe:52:27:f6:91:4e:d9:8e:
d6:5c:41:7a:72:bf:c1:43:45:a8:de:81:1c:d5:b7:ae:a1:37:
42:30:1e:3c:d1:9e:ec:6c:06:6a:30:f6:4d:8c:51:4f:66:49:
c1:e4:4b:40:67:ce:7f:54:76:b2:7e:75:23:f9:6a:a7:c5:1f:
cc:4c:5b:32:9a:6d:74:7e:1d:e6:b8:ba:45:c8:46:78:b7:4a:
75:57:14:b2:a3:ed:59:87:d2:d7:94:33:58:22:25:7a:33:75:
49:fb:94:14:3f:69:58:e7:82:5a:6d:f2:50:cd:21:70:18:69:
9d:5a:cc:ff:af:34:ca:3f:83:a2:f2:45:5e:e1:ca:ed:c4:4f:
59:2d:51:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:55 2026 by rpki-client