Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145884.roa
File: AS145884.roa (raw, json)
Hash identifier: 7AnKwTK9wY62P970gFB2NHH35OX92ueVlnfphOlic1Y=
Subject key identifier: 1B:D3:AF:21:05:8E:FE:2C:C4:A7:8A:F4:5D:C5:75:76:A5:C3:13:41
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 23C84B48BEE251DFC114B2819AAFEC382345C4E4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145884.roa
Signing time: Fri 22 May 2026 04:26:58 +0000
ROA not before: Fri 22 May 2026 04:21:58 +0000
ROA not after: Fri 21 May 2027 04:26:58 +0000
asID: 145884
IP address blocks: 240a:aca2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:c8:4b:48:be:e2:51:df:c1:14:b2:81:9a:af:ec:38:23:45:c4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:58 2026 GMT
Not After : May 21 04:26:58 2027 GMT
Subject: CN=1BD3AF21058EFE2CC4A78AF45DC57576A5C31341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:ac:b6:e9:a3:83:ac:c6:47:58:57:22:10:
65:37:de:9c:3a:ec:9c:e3:4f:89:a7:6c:b9:15:90:
46:45:0a:57:60:52:d9:ba:41:11:ca:fc:b1:00:64:
34:2c:5e:1e:0b:f7:58:2f:16:2b:77:c9:fc:17:d7:
82:7d:66:fc:d1:73:82:61:3a:77:fe:bd:8e:6d:50:
60:0e:02:e5:26:6c:c1:5f:76:4d:2d:e5:dc:2e:9b:
f8:ec:6d:90:7f:16:41:27:6d:6b:c7:07:ec:b5:a5:
40:f0:91:cb:e3:c3:06:07:49:89:46:b4:12:68:de:
81:20:bc:21:86:f3:4e:66:a4:03:8b:7f:6f:19:19:
13:1c:10:a4:9f:3f:f0:e2:a7:8f:e1:09:0a:ff:3c:
fd:6a:74:c1:40:e9:f1:7a:e1:4b:ae:a8:55:b1:fc:
45:cd:f4:b2:a6:9e:51:87:e8:fb:30:65:66:d0:82:
3a:5b:36:07:22:f0:10:e2:ff:b8:94:99:32:28:ce:
aa:36:5a:00:67:b3:dc:6c:5a:b0:ff:f7:3b:ca:5e:
41:56:9a:21:79:4b:fd:69:e3:79:73:09:63:e8:1a:
0e:24:5b:60:b2:9a:e0:63:19:eb:ac:c0:72:d3:99:
08:bc:a4:3a:92:28:0e:72:1a:7d:d6:10:e1:40:3a:
ed:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D3:AF:21:05:8E:FE:2C:C4:A7:8A:F4:5D:C5:75:76:A5:C3:13:41
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145884.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aca2::/32
Signature Algorithm: sha256WithRSAEncryption
01:2c:11:02:52:4b:f8:78:e3:0c:c6:02:92:f3:c8:b8:64:dd:
dc:df:02:47:ff:24:7b:88:c7:94:3f:1f:df:e4:2f:10:e6:ac:
71:a6:06:52:40:b8:bd:35:cf:48:1b:45:0a:73:52:b6:b0:7e:
97:2c:64:2a:2a:a3:79:71:e2:c2:26:e0:3b:27:a9:ac:4c:eb:
b1:de:80:df:60:fb:65:d1:c7:23:2f:4b:2b:a2:cd:28:0a:6a:
aa:37:94:5a:55:40:6a:b9:ae:68:11:fd:ce:b7:1a:12:e7:1a:
a7:70:8e:8f:92:3c:81:90:ee:c3:38:ca:1c:95:14:2d:86:b4:
60:24:05:93:b3:db:13:13:2b:35:62:4b:3d:fb:db:f4:7b:b2:
15:e4:61:c4:fa:21:25:6f:f8:fa:04:1b:72:7e:b6:ab:82:4d:
30:40:36:33:34:f8:2b:58:43:20:58:b5:62:7d:3c:a1:7d:45:
07:ab:dd:b1:df:aa:78:b0:87:83:d0:e4:df:71:81:df:2e:17:
b9:ed:e7:cb:9d:21:e9:8c:ed:79:0c:c0:26:2a:ad:2c:77:d7:
20:8d:2e:b0:80:7e:57:6c:95:10:ed:a3:39:25:f2:be:ea:84:
0b:0f:72:e4:d9:6e:be:74:71:f6:8d:88:91:2b:be:0c:e8:69:
38:19:39:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:52 2026 by rpki-client