Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145893.roa
File: AS145893.roa (raw, json)
Hash identifier: xBGNvhPwRMpbMVOH3hpKbof9do97GWOrNi5C9MObfsI=
Subject key identifier: AE:04:53:EB:F1:91:DE:1A:69:E8:2C:E9:A0:27:0C:CF:C9:57:85:DA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 750A52AE4D9353B8619E58AF2739EED20D6E79ED
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145893.roa
Signing time: Fri 22 May 2026 07:32:09 +0000
ROA not before: Fri 22 May 2026 07:27:09 +0000
ROA not after: Fri 21 May 2027 07:32:09 +0000
asID: 145893
IP address blocks: 240a:acab::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:0a:52:ae:4d:93:53:b8:61:9e:58:af:27:39:ee:d2:0d:6e:79:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:09 2026 GMT
Not After : May 21 07:32:09 2027 GMT
Subject: CN=AE0453EBF191DE1A69E82CE9A0270CCFC95785DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:06:61:49:ee:85:51:c7:97:59:0a:ce:db:a2:
4a:40:d8:7d:0b:cd:91:bf:97:78:51:d8:c6:17:12:
a3:6d:7f:55:56:61:a3:aa:ec:02:65:07:b0:66:ae:
af:1a:6d:6d:8a:c9:d3:71:43:2c:72:6b:e0:86:b2:
f1:06:e8:09:6a:bf:bd:f4:0b:a6:7a:2e:88:83:86:
bb:cd:c2:1c:50:e7:6f:ab:71:1f:0a:48:89:29:a5:
3e:9d:48:16:4f:20:77:d5:44:e7:f2:d8:4f:38:ee:
d7:e2:e0:6a:c3:70:ec:bf:c5:5f:1b:4b:9b:7f:05:
86:89:f1:ff:9d:b7:e5:55:56:c8:30:2f:e4:e4:e5:
5e:ac:29:93:88:df:56:78:71:b3:f5:22:ad:14:c5:
4a:0e:34:49:bd:5c:49:f7:19:91:b3:a1:d3:d5:6d:
7c:d7:88:4a:a8:67:d2:d1:1b:30:2c:39:52:a9:05:
dc:3b:c1:05:00:4e:e4:45:5b:cf:59:68:03:b4:c1:
e7:77:00:b5:21:d8:31:77:81:c8:78:3d:66:0d:a1:
c0:2d:6c:ba:e4:92:0f:3b:a0:44:58:a0:6f:a8:35:
8a:78:ba:29:ce:0b:27:ec:5c:ca:81:65:f6:52:89:
2e:71:31:4d:88:68:6a:3f:73:a8:b0:0c:7f:c3:ec:
33:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:04:53:EB:F1:91:DE:1A:69:E8:2C:E9:A0:27:0C:CF:C9:57:85:DA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145893.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acab::/32
Signature Algorithm: sha256WithRSAEncryption
1f:d3:a4:a0:18:7c:22:69:16:68:0a:6d:bb:b7:b8:f3:90:ea:
46:b9:b4:67:14:1f:db:0f:f6:6a:9e:d7:16:dc:e8:8b:a3:4e:
c5:88:25:37:f2:4f:74:39:f0:bb:23:73:ca:59:fe:98:0d:1d:
16:e9:e3:8c:87:15:41:11:de:de:7e:cd:a4:f1:fd:82:ae:8e:
7e:68:8a:82:a2:40:c5:e3:4a:7e:ef:17:17:29:64:f5:b7:6e:
46:18:42:57:e8:0f:c3:62:79:aa:c8:22:5c:32:0c:a7:bd:b8:
35:51:8c:51:31:9f:74:8d:60:53:9c:96:62:41:34:f8:89:76:
00:a4:8c:34:e0:cf:91:96:99:51:58:00:ad:59:27:74:1f:f3:
e0:76:56:79:ea:34:86:52:09:10:2b:9d:51:e8:ce:5a:fb:26:
ff:ac:7c:7a:c5:82:95:d8:3f:6b:c1:c1:5c:99:4a:26:2a:c8:
50:a2:c3:2d:d3:6f:9b:f8:d1:4e:0c:3f:4a:5c:cb:d4:ed:9a:
c1:c7:67:d1:58:a2:31:a7:76:1c:f5:92:bc:2b:d0:ea:a6:fc:
05:15:51:6c:b1:e5:a6:ac:db:e4:04:2c:6f:40:cf:65:3a:d6:
02:1a:0d:75:3f:96:e8:b7:51:0d:1a:8b:c5:08:61:b0:db:29:
a2:21:f5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:37 2026 by rpki-client