Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145899.roa
File: AS145899.roa (raw, json)
Hash identifier: fFMKtI/394hET/1n1FbRQj3bpLL6jKnuhLHsAPW3Hyw=
Subject key identifier: 72:40:B2:AA:20:F1:EE:7C:28:A6:81:22:BF:CD:33:E0:00:AA:64:71
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3CD05C1ED3EAD76010B44D80DE8C05E17ACD77D3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145899.roa
Signing time: Fri 22 May 2026 07:41:15 +0000
ROA not before: Fri 22 May 2026 07:36:15 +0000
ROA not after: Fri 21 May 2027 07:41:15 +0000
asID: 145899
IP address blocks: 240a:acb1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:d0:5c:1e:d3:ea:d7:60:10:b4:4d:80:de:8c:05:e1:7a:cd:77:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:15 2026 GMT
Not After : May 21 07:41:15 2027 GMT
Subject: CN=7240B2AA20F1EE7C28A68122BFCD33E000AA6471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a2:ab:a7:75:da:99:b1:f3:15:c0:25:59:63:
e5:fc:bd:dd:cc:3e:3c:75:18:af:af:2d:03:f3:44:
7e:4a:df:1a:07:a0:de:16:23:ee:5d:88:a9:a4:0b:
c2:a6:18:4e:15:de:bd:e2:9a:6a:ce:1a:53:9d:42:
cd:cd:17:7f:ab:aa:ad:2a:55:b3:2e:6e:49:72:24:
28:a2:13:8d:65:e4:32:f0:28:37:24:98:06:f4:52:
ba:ff:ca:f7:f3:2e:4f:4e:45:c9:7b:79:b8:d3:e3:
23:cf:8e:f8:0f:17:5f:0b:1b:ab:ab:e7:64:aa:cf:
a8:89:d4:25:e5:21:a1:3f:01:45:57:ce:4d:be:67:
e9:16:4b:53:9e:c5:44:37:0e:75:a8:50:b3:8c:2e:
d2:fd:43:35:24:d6:09:17:cc:04:34:3c:ec:b7:1c:
65:ee:82:f8:63:b8:64:34:8a:20:30:b9:6b:ae:e0:
8e:8b:a3:a7:ce:e1:d1:57:8a:70:a8:11:90:1e:33:
5f:31:a1:c3:01:3d:ee:a2:da:6c:58:77:29:62:d1:
05:65:02:cf:49:e6:88:27:06:c6:1f:02:80:e4:53:
21:21:49:01:49:c9:c4:1b:e2:6a:4c:88:94:46:28:
e7:87:b0:62:78:8f:3c:3d:67:1c:04:a1:55:09:6f:
3b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:40:B2:AA:20:F1:EE:7C:28:A6:81:22:BF:CD:33:E0:00:AA:64:71
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145899.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acb1::/32
Signature Algorithm: sha256WithRSAEncryption
3f:2d:45:95:9e:e3:d0:ac:45:15:92:69:07:37:02:89:c6:ad:
0e:51:56:1a:11:47:1e:34:76:96:46:97:50:14:cc:e7:11:5a:
9f:16:b2:4f:df:ae:55:db:e1:2f:60:31:4d:9e:f8:da:8a:b1:
ea:44:7b:18:25:a2:4e:79:8d:71:e4:df:fb:e7:80:3b:c7:72:
e1:12:b1:c8:fd:2e:da:b3:56:79:33:da:78:bd:a3:fa:f1:21:
2f:23:35:18:dc:d5:a0:ca:bc:42:f6:0f:73:86:1e:e3:39:f7:
5c:07:c4:45:1e:5d:45:9e:3d:8f:96:b2:c2:b0:f3:80:b5:88:
3b:0a:6e:3a:3d:5f:ff:b8:a7:19:d5:10:98:9b:c3:36:1c:ec:
2f:7b:e1:e9:15:0c:41:8d:1c:ee:07:0b:52:cf:ea:e6:b4:1c:
bd:85:fc:cd:da:93:76:18:17:83:7a:f4:a2:21:ac:58:02:93:
29:10:9a:0f:b9:59:a3:c2:d8:8a:5b:3c:9e:5c:ba:7b:aa:4f:
61:7d:ad:32:73:47:e3:09:09:90:f9:38:de:4e:73:73:6e:9a:
0d:a4:5c:90:eb:1f:2b:ba:bd:11:b6:4c:56:d4:3f:3e:d3:ee:
34:c8:7d:4c:9a:f9:be:87:94:7e:4f:23:39:00:ec:39:8a:23:
6d:f3:7a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:19 2026 by rpki-client