Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145858.roa
File: AS145858.roa (raw, json)
Hash identifier: /2M7TywrHQJZSs0R/aPYC3xO5SdgTY4SDl0ocxc3xK4=
Subject key identifier: 36:57:39:DC:4F:4E:0D:D5:FF:CF:61:D1:EC:7D:EB:63:D9:B7:ED:7B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3AE8D1DA09E06B6B02AF5EC61EDF9F302D3C172F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145858.roa
Signing time: Fri 22 May 2026 04:26:42 +0000
ROA not before: Fri 22 May 2026 04:21:42 +0000
ROA not after: Fri 21 May 2027 04:26:42 +0000
asID: 145858
IP address blocks: 240a:ac88::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e8:d1:da:09:e0:6b:6b:02:af:5e:c6:1e:df:9f:30:2d:3c:17:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:42 2026 GMT
Not After : May 21 04:26:42 2027 GMT
Subject: CN=365739DC4F4E0DD5FFCF61D1EC7DEB63D9B7ED7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:71:2c:cd:eb:af:45:b1:89:73:97:3c:18:ae:
21:5e:d2:4e:ea:19:39:31:22:74:f7:0f:43:5f:1f:
3a:66:98:f4:3b:67:39:94:0d:66:23:55:56:c8:36:
a0:41:1f:32:bc:c8:49:46:16:d9:25:4c:88:79:00:
bb:56:40:07:99:64:53:38:b5:23:88:61:83:66:99:
2f:09:1d:72:16:33:86:af:75:42:88:7a:ff:d1:f3:
0c:a8:73:b6:40:18:2e:d2:5a:57:a4:a3:39:41:92:
b0:a4:20:2c:1c:3f:57:f2:d3:e9:4d:10:02:13:5d:
c5:af:cd:d0:86:b7:3f:f6:b9:e7:bf:af:ab:aa:64:
c6:8b:d4:11:ea:43:9b:17:33:33:4e:fb:88:80:8e:
49:e3:1a:c8:2e:5f:40:10:d4:7e:48:fa:f9:d6:87:
20:55:16:65:40:50:cd:79:52:74:f0:62:4a:11:be:
00:ac:62:6d:2d:d4:6e:25:10:6a:58:0b:d1:cc:a5:
88:51:57:2a:64:6a:7d:c2:77:3e:74:e6:9a:7b:3e:
cb:95:4a:a5:ee:13:37:6e:9e:b6:99:5d:96:ed:cc:
18:33:76:3d:cf:4c:e3:a0:71:1e:2d:28:b6:09:ae:
e1:05:fd:03:d7:e9:57:8b:e9:12:3c:10:9c:9b:15:
a5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:57:39:DC:4F:4E:0D:D5:FF:CF:61:D1:EC:7D:EB:63:D9:B7:ED:7B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145858.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac88::/32
Signature Algorithm: sha256WithRSAEncryption
0e:8b:ee:4e:78:42:7f:bf:ed:5f:3f:99:9d:2f:31:32:c2:de:
89:da:44:8f:d9:14:fe:6f:06:38:72:01:f3:fa:75:5e:ef:30:
83:19:f8:8c:33:b0:ba:7d:b3:57:c2:fc:a5:99:b6:c4:3a:c0:
09:54:63:cf:fd:52:d3:67:e2:f8:d3:b3:df:36:55:19:12:c7:
85:2b:fa:09:55:b5:9e:de:d2:d1:28:8f:06:a5:88:eb:de:e1:
85:17:29:7e:78:9c:26:45:51:1e:42:8e:11:6b:68:17:7b:3e:
18:c0:02:76:1f:b0:12:5b:0c:43:01:ef:61:a4:53:08:c1:02:
7a:b5:2a:1a:07:5a:73:da:ff:2d:b7:c3:a8:f3:22:26:63:ae:
f5:73:9f:3b:64:d7:35:fa:b3:fa:c8:9c:05:de:15:8c:74:64:
57:7d:26:d4:c8:0c:db:2b:a2:d1:81:03:55:c5:0d:4c:ab:78:
30:2b:ad:2e:86:f2:0b:61:a7:27:37:98:8b:25:d5:f8:22:b2:
af:6d:55:95:e2:dd:b9:95:82:a2:90:02:9b:c4:91:6c:05:98:
13:13:62:8c:16:e4:8c:7e:2f:38:f8:f1:b5:b7:f3:3b:bf:f2:
10:4c:0b:65:7b:54:78:08:6e:bc:27:72:18:d0:eb:61:39:71:
78:83:f9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:42:44 2026 by rpki-client