Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145848.roa
File: AS145848.roa (raw, json)
Hash identifier: Q9ipuwk6G6eoAcTuZF3bOn1tfF289BUMb6b/QqJq/FA=
Subject key identifier: 80:82:55:25:1B:83:91:EE:92:99:E3:10:7A:81:A8:30:2D:6B:FF:48
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7AD4FD17AF3386F20164265D68DDD211AB9D7050
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145848.roa
Signing time: Fri 22 May 2026 06:45:59 +0000
ROA not before: Fri 22 May 2026 06:40:59 +0000
ROA not after: Fri 21 May 2027 06:45:59 +0000
asID: 145848
IP address blocks: 240a:ac7e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:d4:fd:17:af:33:86:f2:01:64:26:5d:68:dd:d2:11:ab:9d:70:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:40:59 2026 GMT
Not After : May 21 06:45:59 2027 GMT
Subject: CN=808255251B8391EE9299E3107A81A8302D6BFF48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cc:8a:1e:87:17:c2:d5:3d:51:f8:c4:8b:e9:
d6:42:eb:7f:d6:45:30:af:1d:d2:ed:4d:3b:47:99:
cd:58:80:72:89:33:94:cc:d4:14:17:83:04:3b:d0:
c5:d7:bf:f8:ec:fd:ff:c9:45:f9:a8:a9:3d:2c:5c:
f2:3d:6c:0d:35:32:45:49:c4:93:8d:b6:73:89:72:
b2:37:97:69:d8:df:df:56:fa:67:cb:f3:3a:33:83:
35:85:db:95:65:7c:6b:f4:74:56:c3:f3:76:1d:4f:
84:c2:4f:e9:55:30:79:97:a9:e7:41:c0:f5:ac:30:
ca:f2:e9:7e:43:47:51:a4:ed:c8:f4:ca:70:06:af:
28:48:6b:36:f3:9b:24:27:d3:19:2d:72:35:e6:63:
20:09:37:9b:e0:9e:03:cc:1a:5b:83:ac:6d:05:27:
00:ae:df:3e:89:85:e9:b4:a9:55:d4:88:ea:08:29:
1d:8d:56:5d:0b:a3:45:37:51:d3:af:57:6d:4b:32:
e1:e1:5c:ce:96:3f:b3:5d:5f:f3:2b:ce:8a:9a:95:
fe:36:35:25:d2:b7:98:df:93:93:97:79:1b:f5:1a:
9a:37:ff:b2:4b:4a:af:7c:33:09:f9:99:d0:46:d3:
2f:00:b8:cd:14:e2:e3:8d:7e:b7:06:9e:27:3d:85:
ce:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:82:55:25:1B:83:91:EE:92:99:E3:10:7A:81:A8:30:2D:6B:FF:48
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145848.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac7e::/32
Signature Algorithm: sha256WithRSAEncryption
49:79:ea:9f:f1:c2:b2:4a:ce:c0:53:31:73:0b:ca:e6:ec:8f:
52:c8:8c:cc:07:fc:2d:d9:d1:6c:cd:77:15:41:26:10:33:83:
1b:a3:50:07:84:cc:e9:fb:37:75:92:e5:7c:93:91:f3:a3:7d:
13:e3:c7:e2:1d:c0:d0:a3:09:f0:4a:bc:2a:ee:5e:8a:bd:f8:
30:f4:4a:94:2f:30:b8:7f:c2:5c:21:bc:e8:ea:39:3b:b9:20:
0b:c2:eb:12:8c:8f:f0:44:29:af:83:fa:1d:aa:e9:d1:72:e4:
de:f0:bc:59:ea:77:43:10:a4:6a:94:d7:fb:60:fa:ee:60:b3:
17:83:12:b4:1f:8a:37:f9:92:94:ea:b4:e1:dd:87:e7:9c:4b:
03:68:ac:a0:9a:d6:d0:ed:60:cf:7f:f6:6a:d7:3b:9a:63:28:
1c:bf:75:b1:fd:0d:91:d7:91:bd:e0:a7:77:cd:da:19:09:8b:
ed:70:66:14:34:61:9c:13:7f:bd:c3:90:6a:67:52:43:7d:93:
0e:03:7f:e0:b0:f1:92:77:30:59:2b:57:0d:88:af:3c:7e:8d:
96:f8:4c:77:75:07:14:6f:96:88:6c:de:ee:98:e8:50:cc:9a:
03:84:fe:a2:ca:62:e9:43:0f:43:d5:65:27:5a:7f:99:32:c4:
cd:e0:19:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:16 2026 by rpki-client