Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145937.roa
File: AS145937.roa (raw, json)
Hash identifier: rcoUhoRhxLIPaYSMxwkoMqe75zNjpbO4wV2DRD8iuF8=
Subject key identifier: 86:BC:11:AE:84:43:0D:21:20:1E:16:9F:4C:59:2C:F8:BB:9F:69:8B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 135A17362ADDB60D8261A8735F045E7FA94A27CE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145937.roa
Signing time: Mon 25 May 2026 06:48:58 +0000
ROA not before: Mon 25 May 2026 06:43:58 +0000
ROA not after: Mon 24 May 2027 06:48:58 +0000
asID: 145937
IP address blocks: 240a:acd7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:5a:17:36:2a:dd:b6:0d:82:61:a8:73:5f:04:5e:7f:a9:4a:27:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:58 2026 GMT
Not After : May 24 06:48:58 2027 GMT
Subject: CN=86BC11AE84430D21201E169F4C592CF8BB9F698B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:cd:a7:5a:ff:d0:ec:cf:45:dc:98:fe:dd:
26:f1:45:54:e2:6a:86:36:ba:21:c1:83:db:fc:9f:
38:bf:6c:50:77:a0:46:09:d0:dc:a7:6e:39:88:12:
5d:78:00:f2:3c:74:7a:2f:ea:04:fe:5d:4c:b1:ed:
81:72:51:e3:30:ec:c5:16:0f:28:d5:56:98:7f:ac:
70:1f:71:f1:8a:24:14:71:0c:7c:68:1a:88:f9:e6:
d0:a2:25:70:b3:9b:82:0f:f2:25:95:ec:91:72:53:
69:5e:25:98:3e:da:46:00:84:fc:20:68:bb:d5:f4:
b6:e7:7c:17:8f:30:79:7f:8d:7d:8b:bc:fd:c8:f0:
6c:3d:90:3b:69:92:bd:59:91:70:21:3a:33:9b:6e:
eb:8a:a1:2d:f8:d8:9d:7c:87:45:25:6d:58:1e:19:
12:83:b5:79:78:7d:70:e1:b1:fe:ad:b8:57:be:2b:
f7:a3:12:01:86:3e:a7:8e:da:1b:e5:9a:2b:e0:03:
5e:ac:22:67:96:8f:fc:c6:56:75:e0:fc:88:98:4a:
c6:be:79:d6:78:2d:8e:5c:5c:87:7e:f9:9a:ac:51:
2a:cb:98:31:9f:c8:db:26:2b:e9:21:dc:88:ce:c3:
52:b9:0a:94:e8:da:d9:90:fe:e8:ef:65:21:a1:ae:
ee:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BC:11:AE:84:43:0D:21:20:1E:16:9F:4C:59:2C:F8:BB:9F:69:8B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acd7::/32
Signature Algorithm: sha256WithRSAEncryption
ab:e2:ab:9d:a0:f7:9b:5d:ac:6e:1e:2a:c6:2a:90:2c:2e:4f:
e3:96:66:58:dc:00:4b:02:49:49:ab:7b:79:7c:ad:89:52:4b:
bd:79:ef:f9:f7:5a:34:e1:3d:f4:c6:12:9a:af:b2:c4:39:54:
65:18:50:75:3b:72:71:8d:8c:c3:2e:59:c8:18:b0:e3:d2:f7:
33:ec:db:fd:1c:7a:5f:95:6e:6f:5d:92:4c:ae:e5:eb:f3:22:
86:ff:5c:f4:2a:15:5d:18:80:87:8d:8d:a3:c1:35:8f:86:ed:
8d:aa:e4:4a:cc:2e:c0:ab:3e:93:4c:8b:aa:69:96:e0:61:a2:
53:55:ce:70:cd:d3:4a:d3:f6:57:cd:44:a7:3e:3b:aa:bd:e6:
f2:f3:32:0b:4e:8f:59:91:e6:41:e0:60:2a:37:03:98:5b:fe:
83:0f:94:c7:b3:68:8c:90:ce:ae:93:e4:a5:30:60:d8:ac:11:
a3:d1:15:6c:f1:ab:b4:d9:a6:82:2b:7e:a3:c1:b4:df:fa:b6:
8f:50:51:50:60:02:15:2f:52:0c:db:65:65:29:af:27:24:ee:
ac:ed:b6:0e:f2:45:9a:22:41:cb:51:ac:17:2e:b1:3a:37:e6:
cf:47:63:01:b5:85:a9:c9:2a:c4:32:16:21:1e:ec:9c:d6:c6:
7b:f4:84:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:01 2026 by rpki-client