Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145862.roa
File: AS145862.roa (raw, json)
Hash identifier: jwBCq8SKnOloMD20+DlTmeSpvh2khtlvIT/JhQRm9iE=
Subject key identifier: 85:B7:21:D4:A3:FF:40:07:2C:15:1C:D1:43:00:2B:19:36:A8:1F:83
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3317C4DE9378EEDA8575BA7C1F64039B8901196C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145862.roa
Signing time: Tue 26 May 2026 06:30:24 +0000
ROA not before: Tue 26 May 2026 06:25:24 +0000
ROA not after: Tue 25 May 2027 06:30:24 +0000
asID: 145862
IP address blocks: 240a:ac8c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:17:c4:de:93:78:ee:da:85:75:ba:7c:1f:64:03:9b:89:01:19:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:24 2026 GMT
Not After : May 25 06:30:24 2027 GMT
Subject: CN=85B721D4A3FF40072C151CD143002B1936A81F83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:be:8e:75:72:36:86:12:5a:26:98:12:21:
7b:cc:14:87:d3:00:f4:9f:10:73:15:50:5a:37:73:
6e:e1:c6:5d:9d:49:38:a5:90:00:77:8a:c1:77:08:
17:9e:6b:da:7c:7e:99:cc:e9:cb:5a:75:f5:2d:05:
42:b1:4a:10:06:1b:30:a9:89:9e:8e:de:43:5d:7e:
89:cc:72:94:e7:c8:85:e3:6a:f5:c5:ae:43:c0:85:
2d:a1:ac:cd:de:5a:2f:52:12:b5:cb:c6:89:82:4d:
fd:c2:8c:38:29:c3:25:cd:ae:27:6c:84:b1:da:80:
da:dc:34:b9:fc:a0:5b:f8:6b:e3:60:c7:0e:6a:b0:
4c:96:39:e6:66:04:9a:4d:c7:6f:aa:39:63:ab:c2:
42:be:4e:8f:4b:2e:f0:f4:22:77:12:b5:eb:0c:85:
c6:90:ba:f0:c3:c5:b6:0c:c0:ea:f6:9a:8a:4c:59:
d5:5b:fa:fd:6e:08:89:68:50:b0:65:28:a5:33:b6:
8c:0a:d1:de:e2:30:31:23:a9:27:de:22:0e:38:36:
00:7c:6f:86:83:f7:a1:36:03:eb:34:aa:c0:ed:0c:
aa:e5:46:4a:40:7f:dd:75:da:89:3a:e5:34:04:e9:
05:13:43:5c:9c:62:10:08:10:af:4d:99:3a:12:ba:
7e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B7:21:D4:A3:FF:40:07:2C:15:1C:D1:43:00:2B:19:36:A8:1F:83
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145862.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac8c::/32
Signature Algorithm: sha256WithRSAEncryption
64:72:49:73:a3:d4:09:eb:c5:7a:08:7c:56:c5:d7:11:50:1c:
cf:d9:80:df:fe:fe:41:2d:71:84:31:ee:1a:5f:6c:81:fd:d4:
73:da:3b:ed:18:26:0a:48:64:83:51:0e:07:5c:c6:e6:db:3e:
ad:3b:7e:7a:45:f9:ac:13:d9:9f:2f:4b:c3:fa:c2:c8:1e:c6:
aa:bc:01:e6:8f:31:49:fa:89:d8:d7:11:0f:10:4a:96:e4:d0:
51:f4:58:48:05:d6:53:4a:a3:29:d9:f0:15:75:c9:70:1a:c4:
33:c4:22:25:a6:e9:14:c4:04:de:7f:b6:80:0b:4a:87:28:c1:
e7:e0:b8:48:c7:84:a4:d8:be:d6:ef:3a:6e:b5:f7:a1:e0:eb:
e7:bc:df:40:ba:0e:40:03:80:e8:6e:d9:48:2a:71:c3:f1:b2:
42:c0:7d:92:54:a4:77:cb:a6:ac:6d:0c:72:10:d6:84:5f:19:
1d:44:b8:be:37:d1:8b:cb:e5:ae:1b:7a:2d:81:79:e2:03:3a:
97:89:b8:61:b3:5a:4a:8c:b3:14:d0:8f:93:8a:e0:83:bb:ba:
ec:36:2c:7c:06:b2:fd:6c:cf:64:97:d5:01:6d:12:e6:87:54:
c0:80:2f:54:f0:3b:99:e4:40:cc:90:1c:7c:c1:09:07:6c:1a:
14:83:c1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:50:02 2026 by rpki-client