Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145847.roa
File: AS145847.roa (raw, json)
Hash identifier: OkfY1MOQ+YZzAY7v0NdwL9t2jdtUoLUGvTrYuf3kUdk=
Subject key identifier: 72:6F:AF:1C:FB:69:03:DE:D7:61:36:C9:D9:C3:CC:21:3E:7A:C8:DD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1AF5E1DEC76D70D29459534977C18F468E7603E3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145847.roa
Signing time: Mon 25 May 2026 03:19:34 +0000
ROA not before: Mon 25 May 2026 03:14:34 +0000
ROA not after: Mon 24 May 2027 03:19:34 +0000
asID: 145847
IP address blocks: 240a:ac7d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:f5:e1:de:c7:6d:70:d2:94:59:53:49:77:c1:8f:46:8e:76:03:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:34 2026 GMT
Not After : May 24 03:19:34 2027 GMT
Subject: CN=726FAF1CFB6903DED76136C9D9C3CC213E7AC8DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:cb:7b:39:f3:cb:6d:3e:38:1d:18:49:fc:65:
b6:73:d4:92:cf:bc:00:ff:da:11:4d:8c:42:35:96:
24:c7:24:04:0c:d5:0d:fd:e0:e3:af:67:b7:c5:8b:
eb:d6:d7:68:01:6b:e1:20:31:04:51:6a:cd:55:d7:
bd:a3:7e:0c:9f:f8:2d:8f:26:64:90:4b:f1:7d:ae:
ad:16:83:c9:bb:c4:71:39:50:4d:af:eb:38:87:5c:
b8:8d:f8:44:74:80:f9:c7:17:ae:8c:75:0d:37:1f:
e2:4d:bb:21:02:a9:d3:6f:18:02:9b:44:50:a2:b7:
b5:17:d1:64:7b:3c:b3:48:14:36:47:a8:dc:d4:58:
11:c3:7f:b0:35:d4:d9:5e:03:29:47:4f:0a:e2:3d:
5f:14:85:a4:90:6c:28:15:1c:f9:52:bb:b0:ec:15:
6b:87:ec:e0:d8:f8:c2:4b:4d:fd:98:e1:c9:0a:7d:
76:37:9d:13:71:30:ce:55:f5:7f:3d:c0:dc:15:22:
3b:2d:1c:b6:7e:a8:e1:62:13:83:57:5f:2d:6f:b0:
8b:10:3e:10:1d:c7:f6:b2:62:fe:a1:e2:1f:18:e8:
8e:eb:5a:74:55:69:88:3c:73:8d:18:6a:d1:3b:06:
cd:5f:10:71:90:33:a6:fa:87:6e:24:57:eb:4d:02:
4e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6F:AF:1C:FB:69:03:DE:D7:61:36:C9:D9:C3:CC:21:3E:7A:C8:DD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145847.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac7d::/32
Signature Algorithm: sha256WithRSAEncryption
08:20:97:cc:70:8e:e6:f1:2d:85:62:9b:8a:59:c6:c7:bc:bc:
ce:9c:57:b5:85:ff:30:16:74:5e:d4:27:de:51:b8:a3:fc:37:
fe:c7:58:1c:f6:29:ad:f1:db:23:a6:5a:81:c0:96:39:87:b8:
88:ed:12:bd:50:d1:b2:6f:9b:39:1b:d5:77:a1:bf:fa:e4:fd:
d0:7f:80:4a:83:a6:51:0f:49:83:66:2c:18:9d:d4:02:1c:97:
35:41:93:bd:d2:06:dc:63:92:ea:64:91:5e:b7:1f:e8:e2:a3:
f2:e0:85:3f:2d:a2:6e:73:95:bf:3f:d5:98:80:cb:5f:e9:ed:
b8:5b:99:4c:88:bc:4e:b3:14:22:b3:b3:76:8c:4e:a0:53:3a:
54:54:8a:c1:57:dd:0c:ea:38:22:14:08:19:06:f3:35:da:63:
1f:16:5c:6e:3c:bb:78:23:a5:ce:b7:e7:98:7d:98:66:1f:5b:
30:4b:2c:b6:5b:25:df:76:08:ba:b5:8f:5f:f0:79:d7:4e:2a:
c1:7f:c8:b9:06:18:d7:4b:e3:b5:0a:92:f4:33:4e:6a:fa:c3:
6d:76:69:6e:de:c8:f9:37:26:25:fd:c7:a3:c1:bf:95:89:c3:
0b:c3:0a:8a:32:bc:c7:89:89:f8:bd:40:2a:33:c7:97:ce:d2:
91:44:75:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:55 2026 by rpki-client