Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145880.roa
File: AS145880.roa (raw, json)
Hash identifier: 9ZOxEo0Xkoh7BviINbN1tj6oAXlLuK/lVlWUFXZBrsY=
Subject key identifier: 3A:AC:49:80:C5:A2:F6:48:E8:F2:42:6C:D2:B4:CD:39:66:FA:FD:16
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 56E42DD11A2A0177663F00FDD1BAA4488E991711
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145880.roa
Signing time: Fri 22 May 2026 07:32:25 +0000
ROA not before: Fri 22 May 2026 07:27:25 +0000
ROA not after: Fri 21 May 2027 07:32:25 +0000
asID: 145880
IP address blocks: 240a:ac9e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:e4:2d:d1:1a:2a:01:77:66:3f:00:fd:d1:ba:a4:48:8e:99:17:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:25 2026 GMT
Not After : May 21 07:32:25 2027 GMT
Subject: CN=3AAC4980C5A2F648E8F2426CD2B4CD3966FAFD16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6b:d8:be:4c:06:17:3c:6f:d4:6c:1b:33:d7:
16:84:b1:49:78:cd:65:77:18:64:d4:2c:d8:46:25:
02:a3:5b:e3:74:99:9a:33:60:48:5c:c0:e0:ec:37:
86:2e:36:77:8f:7f:4a:41:20:5c:f3:91:8f:5c:9e:
11:cb:a6:6f:fb:a8:3d:c9:21:81:da:e3:8c:f6:a6:
37:46:db:fa:0d:81:87:33:5f:6e:41:d4:b8:da:07:
7c:6c:ef:ca:41:86:38:74:4d:4b:7c:2e:31:01:52:
b5:82:b8:1d:4a:c2:50:9c:f2:18:df:9a:ed:0e:ba:
b8:33:4d:a1:ba:33:3e:b4:f2:37:6c:78:dd:54:d3:
67:4f:31:04:e5:a1:48:23:08:df:ab:85:63:56:e8:
5d:23:4a:7e:49:f9:4b:8d:a2:33:f4:8e:f3:7f:5d:
c9:dd:e5:d6:57:80:b1:2a:b4:09:c7:1c:e2:4a:7b:
7d:45:bf:4b:0d:50:7b:e7:68:85:67:33:33:6e:15:
86:00:03:5b:a3:52:6b:ca:bf:9f:9e:f7:9a:aa:54:
09:18:17:a4:bc:6c:7b:44:fd:56:b2:8d:21:7d:82:
42:ff:23:eb:74:66:1e:58:89:bb:a0:90:f7:1b:57:
16:d1:85:cb:83:b4:df:c4:ef:69:a7:f6:7a:f5:74:
e9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AC:49:80:C5:A2:F6:48:E8:F2:42:6C:D2:B4:CD:39:66:FA:FD:16
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145880.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac9e::/32
Signature Algorithm: sha256WithRSAEncryption
94:57:fa:8d:00:eb:93:4b:34:c8:05:fc:2a:46:d9:84:5e:5c:
67:44:89:9c:c7:1f:e3:1a:21:b1:44:ac:22:72:4c:a7:26:51:
18:ef:98:e3:59:84:a7:0a:05:dd:9d:7c:ac:8b:be:bb:70:f7:
ba:1e:7f:eb:cf:0a:8d:89:59:84:0e:11:cc:b6:6e:56:af:12:
65:20:1f:d8:13:9d:5e:fe:4d:a7:e4:d1:12:b8:a0:5c:04:79:
dc:51:12:74:53:2c:12:9e:db:8b:10:f6:c3:22:2c:92:ed:69:
a4:4f:bc:e8:3d:14:72:84:14:c9:8e:b4:a5:c6:c4:6d:fc:4f:
e6:59:0a:d4:8e:75:48:8b:64:09:6d:52:20:5a:31:f5:fc:2e:
43:92:1e:e1:4f:d8:08:76:15:49:07:2c:51:2c:19:c4:df:8c:
55:25:96:89:da:1d:41:70:06:42:ce:fc:56:59:81:2b:a3:69:
98:82:3c:00:59:b0:30:f7:b6:1c:ea:a3:95:a1:11:b8:04:8d:
04:2d:d7:98:9d:90:98:16:82:4f:10:ac:29:39:80:f8:15:8f:
4c:09:79:5c:ba:41:45:8f:8b:52:b0:c3:59:fb:60:15:99:08:
64:c5:0d:6b:98:f2:32:f3:bc:b5:41:96:e2:0e:4e:93:cf:af:
28:56:6e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:04 2026 by rpki-client