Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145837.roa
File: AS145837.roa (raw, json)
Hash identifier: 9JY3ITgbqLQs90H5A2Ne8dJZxSP8vhjP3HbI8TPa+uw=
Subject key identifier: 0F:AB:3A:88:66:D6:22:FB:86:87:10:A2:AB:25:30:26:52:68:09:6E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3271282B759F133A0391C5FE3DFC76E967B4C2B7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145837.roa
Signing time: Fri 22 May 2026 02:47:48 +0000
ROA not before: Fri 22 May 2026 02:42:48 +0000
ROA not after: Fri 21 May 2027 02:47:48 +0000
asID: 145837
IP address blocks: 240a:ac73::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:71:28:2b:75:9f:13:3a:03:91:c5:fe:3d:fc:76:e9:67:b4:c2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:48 2026 GMT
Not After : May 21 02:47:48 2027 GMT
Subject: CN=0FAB3A8866D622FB868710A2AB2530265268096E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:8c:ca:e5:51:2c:c6:b4:96:3c:80:9c:6f:
5e:43:39:f4:c7:ff:74:36:75:65:2c:bb:aa:ae:02:
1a:c3:a8:cd:31:af:63:5f:45:fe:01:54:6f:0f:f9:
20:8e:da:b9:e7:5a:c8:eb:ad:4e:0a:ee:8b:76:4c:
c5:88:41:6b:4f:ed:44:de:5e:dd:46:52:a3:1f:dc:
97:6f:2e:a9:94:cf:25:8e:84:9e:39:75:e1:7a:57:
9c:b8:cb:9b:33:f2:c7:01:b4:70:a0:ac:f7:df:78:
50:34:29:c7:2b:88:6a:2b:40:57:36:cf:eb:47:bc:
3c:d9:fa:9d:54:e8:24:cc:6f:1c:90:99:2f:e6:40:
0f:f2:3f:97:fd:13:54:c8:b7:e8:95:d8:b6:3d:39:
3f:3c:b6:c4:96:ba:6b:d9:52:f0:20:8a:1b:e2:d4:
95:6b:47:7b:69:83:ff:9e:86:ff:c4:f9:f4:1d:2d:
16:ef:7e:8a:92:3d:0b:86:f7:29:7d:5f:50:41:b8:
f0:f6:dc:7f:f3:ff:a9:3e:84:fd:72:ca:7b:67:7d:
49:d5:60:0a:5b:6f:66:1c:65:6d:35:6b:3e:60:4b:
a6:59:2f:ca:7b:65:1f:c7:22:af:b0:91:92:1b:b0:
c0:d2:7c:c7:48:ac:1f:b8:9c:87:be:d2:15:46:cd:
0a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AB:3A:88:66:D6:22:FB:86:87:10:A2:AB:25:30:26:52:68:09:6E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac73::/32
Signature Algorithm: sha256WithRSAEncryption
38:bb:fc:d7:b6:43:d2:56:65:68:39:1e:fb:04:ac:f7:f9:5c:
2c:38:8b:b7:29:28:6c:ba:8a:fb:0f:6a:d0:03:d0:89:18:33:
ee:18:20:ec:1d:fe:ab:70:66:99:97:5e:db:7c:3a:e1:ec:51:
87:d3:f7:51:a5:cb:d8:71:60:cc:3a:cd:c2:41:38:f5:82:0b:
d4:84:28:6c:b0:6f:83:6a:df:9d:a2:a3:54:b0:6c:f3:4d:9a:
d6:e9:92:67:26:33:57:6e:2b:81:4c:53:99:7e:a3:ac:70:38:
5e:d3:33:58:ef:26:2f:35:bb:21:ce:94:80:d0:56:f8:09:6e:
c2:f4:a1:44:d0:7b:6d:ba:2a:81:76:f2:c0:7d:eb:da:2c:b8:
00:a5:4d:ed:1f:ac:25:4e:a3:11:e9:dc:9a:a5:b2:5b:04:e4:
1a:e3:1d:d8:d5:05:53:5d:f6:22:b3:b8:d8:ba:a9:f8:ce:44:
e9:2b:81:a4:ee:4d:79:07:43:be:4a:32:99:80:5c:94:69:09:
4b:96:92:58:10:60:1d:a3:2e:d8:13:64:89:02:f4:ba:09:dc:
36:cf:0b:a5:e6:ae:e7:56:68:94:3a:54:c9:18:de:c8:9e:2d:
12:fe:b4:bf:d7:b5:b0:96:00:65:e3:5f:5a:07:d3:38:0b:3c:
3a:bd:75:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:17 2026 by rpki-client