Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145901.roa
File: AS145901.roa (raw, json)
Hash identifier: ylrE038D7YN4v4euXmv8Rih89Er83cqA81gw5tJBcAI=
Subject key identifier: F0:41:26:52:CA:D5:9B:95:67:9D:33:2C:C0:E4:6D:35:9F:0F:63:B1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3FB7B12E15571A92CB8DAD865AF001BBEEACF5C3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145901.roa
Signing time: Mon 25 May 2026 01:38:22 +0000
ROA not before: Mon 25 May 2026 01:33:22 +0000
ROA not after: Mon 24 May 2027 01:38:22 +0000
asID: 145901
IP address blocks: 240a:acb3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:b7:b1:2e:15:57:1a:92:cb:8d:ad:86:5a:f0:01:bb:ee:ac:f5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:22 2026 GMT
Not After : May 24 01:38:22 2027 GMT
Subject: CN=F0412652CAD59B95679D332CC0E46D359F0F63B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:13:30:d2:74:0c:95:41:09:62:90:f0:46:14:
f3:30:39:1a:9c:17:b4:3e:94:5b:d5:fb:69:d6:bb:
59:cc:db:cc:1b:98:0a:79:e3:e9:88:ca:88:87:59:
2e:ef:10:42:d1:af:b1:dd:fa:3c:83:c2:8e:e6:1b:
d4:43:09:c7:8f:56:5c:8c:dd:b1:7b:cb:c0:8b:46:
e8:83:54:99:ee:27:63:f2:cf:dc:46:3b:a9:65:8e:
ba:2a:64:c1:71:e6:2d:b2:9c:2e:77:fc:dd:aa:42:
7d:64:89:e7:61:d8:bb:a8:6a:b3:33:0c:85:15:34:
c2:e9:59:ef:72:70:ba:bd:96:d8:f1:ca:7b:96:dc:
43:95:44:ba:11:07:60:e5:54:b0:3d:9c:fc:9c:d3:
74:30:02:6d:0f:1d:04:1f:52:0c:67:34:30:2e:a6:
5e:4e:49:da:27:34:51:77:2a:a5:a6:4c:2f:b7:2a:
d7:8c:80:bf:b7:8a:7f:b8:07:d6:d4:6a:64:f5:f6:
9c:46:c9:3a:d1:3e:90:e9:92:a8:c7:81:dd:8e:94:
9c:bc:31:19:af:18:f5:32:ab:c6:c6:a3:58:68:07:
ee:74:8f:91:ba:24:2f:03:97:f2:78:2e:33:83:09:
79:2c:b5:0e:d0:e3:bc:59:c3:8b:01:d2:51:67:a5:
ea:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:41:26:52:CA:D5:9B:95:67:9D:33:2C:C0:E4:6D:35:9F:0F:63:B1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145901.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acb3::/32
Signature Algorithm: sha256WithRSAEncryption
5c:94:d5:43:60:e9:ab:58:e1:70:75:49:6b:bf:8e:3a:31:e9:
b8:ca:ff:ad:8d:a0:ce:e7:35:e0:10:15:28:9d:ae:80:97:57:
6d:9b:0f:ea:53:50:7f:ec:d1:d3:26:83:5f:a6:13:43:10:bd:
6f:5a:8a:e3:c2:74:42:20:4e:e9:00:74:7a:c3:3b:95:64:43:
bd:0b:b5:ff:eb:1d:3e:3e:2a:d1:e8:63:b6:4e:fd:7b:95:0b:
76:d1:8b:5e:7e:89:fa:12:ba:dc:59:b6:d1:bf:7b:95:f6:a8:
88:44:4e:79:1c:95:43:f2:4f:02:21:64:67:98:74:c9:16:c1:
0a:b4:2e:9b:6a:98:0e:9f:7b:5c:83:44:95:17:ac:ba:f7:59:
8b:ea:04:3a:9e:0d:94:7a:7c:8d:01:19:b4:e0:57:7e:ba:d2:
25:45:50:d8:af:e0:44:a8:e4:85:fc:39:23:4c:f2:28:4f:e4:
23:2f:9e:76:fc:09:56:2a:a4:96:3f:ea:c9:0a:38:2a:38:e3:
80:12:3c:a4:20:e8:de:58:f6:03:d5:39:2e:2a:de:8c:1c:38:
89:c4:a9:57:c8:f2:81:61:8d:24:d4:63:18:49:17:97:54:59:
2e:0d:92:65:a2:92:1e:58:8f:d0:e6:c7:6a:f6:e8:0b:38:46:
b9:0d:a7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:49 2026 by rpki-client