Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145911.roa
File: AS145911.roa (raw, json)
Hash identifier: Wg5pAx+qPhhLZ54n63l430t2uUFzzMPiUEQS2L5xH8g=
Subject key identifier: 74:9D:EC:25:68:F7:5C:13:93:E7:6A:D4:E1:0B:25:65:39:B2:2A:29
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 37438125AB1A38EF9CFE6AE2280F42868E8BFE2B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145911.roa
Signing time: Mon 25 May 2026 06:28:51 +0000
ROA not before: Mon 25 May 2026 06:23:51 +0000
ROA not after: Mon 24 May 2027 06:28:51 +0000
asID: 145911
IP address blocks: 240a:acbd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:43:81:25:ab:1a:38:ef:9c:fe:6a:e2:28:0f:42:86:8e:8b:fe:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:51 2026 GMT
Not After : May 24 06:28:51 2027 GMT
Subject: CN=749DEC2568F75C1393E76AD4E10B256539B22A29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:60:f3:f4:7a:cd:f7:92:4b:42:b1:63:4f:
b6:ca:d1:98:02:3e:6d:9a:f7:92:a4:e6:02:d0:03:
15:bd:aa:a6:a9:bb:ba:09:6d:8f:82:fc:d7:e5:c4:
07:d7:a9:e4:f0:86:59:ca:12:c6:40:16:9f:83:04:
5a:61:b9:62:39:8e:f1:45:60:dc:43:e1:c8:75:a0:
14:2a:3f:df:46:35:ad:25:75:04:52:af:71:2f:e2:
24:58:87:55:ad:19:9c:02:60:d8:50:c6:5d:3e:51:
75:ac:c0:ed:2e:18:6b:14:5c:9e:9e:c1:ba:d7:ca:
cb:94:22:62:4a:42:f4:2a:20:43:0f:56:af:0c:84:
a8:56:24:2e:42:3d:13:39:f9:f9:d5:03:de:78:ef:
be:4a:db:2d:2c:94:28:b5:67:53:30:e8:4b:37:a7:
6d:b9:cf:ac:b3:53:98:f5:29:cc:87:6c:e9:93:7f:
03:00:11:fc:d7:43:a5:a1:a8:c5:80:75:88:7f:87:
81:ba:5a:08:b5:a9:c0:a5:50:6d:26:ea:d4:ce:a0:
ef:54:af:48:93:59:b7:24:bf:1f:d4:bc:1b:2e:02:
fc:e6:31:bc:6e:33:be:ad:cc:3e:ea:5e:52:62:07:
50:ed:ca:e7:09:15:fc:79:f4:fb:45:47:12:0a:75:
fb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9D:EC:25:68:F7:5C:13:93:E7:6A:D4:E1:0B:25:65:39:B2:2A:29
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145911.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acbd::/32
Signature Algorithm: sha256WithRSAEncryption
69:c6:1e:1a:89:0b:07:3a:b9:fe:8d:c2:4b:d9:bc:58:96:9e:
80:a4:a0:ae:be:c9:16:a5:0e:8f:37:54:40:d7:81:f4:88:57:
0f:14:3e:44:14:49:ad:1d:75:90:d1:05:59:af:7b:38:2a:93:
ea:f8:2d:ed:58:34:2c:13:0e:ec:b0:ea:52:ff:6c:63:83:a9:
16:fd:4c:4f:a2:7a:9c:ed:ef:58:db:5a:17:74:ab:c6:37:93:
2f:44:99:18:a9:21:24:74:db:3c:0a:f5:08:c2:0d:07:df:77:
ac:e8:ef:99:b5:b0:95:9d:a9:84:18:f2:ad:be:9e:60:ba:af:
b2:26:ac:e8:ac:eb:89:ed:fe:df:a9:07:13:5e:9c:c6:6c:25:
c5:b0:bc:17:a9:66:fa:6c:23:4c:e2:1b:8c:df:8f:55:47:1d:
ca:0b:00:bb:69:2d:2e:51:c6:85:fa:9c:d7:39:cd:4f:31:6c:
bf:5c:44:d4:7f:02:6d:04:1b:7c:b9:c1:a3:f6:88:8b:32:7e:
c1:f3:ae:fd:f2:bf:25:05:9e:b8:ef:61:be:17:49:16:ec:3f:
c1:11:1d:b0:f2:cd:7b:e5:1a:a1:4f:fb:fe:e0:db:2c:c2:f1:
3a:ba:f1:a5:ce:ae:de:60:48:9e:9c:98:3e:af:49:da:92:19:
07:b6:fb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:00 2026 by rpki-client