Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145939.roa
File: AS145939.roa (raw, json)
Hash identifier: SbVNxio86gKoKZ5YzlwGzsHxsppzZorjQTtpNh54Nz8=
Subject key identifier: D2:D2:E6:39:D8:13:E8:D3:A6:0F:B0:01:55:EE:7C:B7:01:31:C7:09
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6557EECEF07D778A9BC650E1DDC61FDF4299AD16
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145939.roa
Signing time: Mon 25 May 2026 06:28:29 +0000
ROA not before: Mon 25 May 2026 06:23:29 +0000
ROA not after: Mon 24 May 2027 06:28:29 +0000
asID: 145939
IP address blocks: 240a:acd9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:57:ee:ce:f0:7d:77:8a:9b:c6:50:e1:dd:c6:1f:df:42:99:ad:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:29 2026 GMT
Not After : May 24 06:28:29 2027 GMT
Subject: CN=D2D2E639D813E8D3A60FB00155EE7CB70131C709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1d:c2:2d:e6:ad:58:b5:1d:0d:23:e8:18:02:
3a:7d:a5:36:7a:7b:b3:70:52:35:77:35:09:75:4d:
d0:88:a8:bd:28:67:3f:3e:d4:cf:d7:49:c6:42:17:
61:40:fc:ab:51:18:61:08:26:0d:26:09:fe:43:18:
c7:46:13:7c:f8:1a:41:41:e0:7c:02:34:88:86:25:
ba:d7:99:29:b1:67:8e:1b:36:a0:fc:ec:78:eb:29:
61:45:1c:5f:78:6e:8e:13:74:09:fb:e7:78:54:da:
71:d4:a4:be:13:ac:94:88:f0:ad:b6:02:4e:e6:df:
c5:a1:16:fc:dc:ed:4e:15:fe:7d:42:48:a9:98:26:
a3:8a:6e:09:38:b9:e1:a9:26:d8:9a:c2:5a:68:57:
96:43:0c:30:5c:c4:2b:af:3f:e4:35:aa:99:ee:4b:
20:fa:ba:61:59:ad:05:ca:cf:b9:f7:06:a6:bc:8c:
ff:8a:a1:84:56:6a:45:c4:0e:90:9d:c8:5b:00:33:
4c:1e:4b:9e:53:f9:8a:b1:e5:8f:cd:04:9d:92:06:
1a:b8:4d:aa:f3:a6:d4:d1:ba:d1:7d:e1:9f:17:93:
d5:c8:a6:fd:80:86:2a:1b:b3:d8:16:3f:77:9c:d5:
f3:9d:4e:be:93:8c:2c:de:02:90:05:53:02:37:a9:
98:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D2:E6:39:D8:13:E8:D3:A6:0F:B0:01:55:EE:7C:B7:01:31:C7:09
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acd9::/32
Signature Algorithm: sha256WithRSAEncryption
3c:f9:8e:48:17:71:10:ec:23:a8:c9:9b:00:09:f7:04:cd:f1:
d4:e3:7c:22:01:86:bd:56:e5:95:72:54:f3:de:2c:c6:c5:a6:
fd:24:b8:5c:de:cc:fc:63:78:93:ad:54:a5:8c:bf:8f:51:61:
91:89:3e:df:fb:5b:cb:2c:52:2c:e4:4b:02:76:aa:3a:60:1c:
1b:9f:00:69:de:9f:9b:2b:d5:91:e3:3c:3b:60:83:d9:3a:eb:
ee:e3:15:50:3d:e3:67:a5:40:26:72:33:84:fa:ae:44:2e:7f:
57:da:05:07:6f:ea:a7:54:d1:c2:e8:10:11:b8:49:0d:c8:7a:
9e:87:a4:52:71:09:c1:5a:68:df:48:fb:bf:2d:0d:5c:28:75:
e8:3c:e6:ce:52:ce:b4:e9:99:eb:2a:20:fd:5e:de:6c:87:ef:
59:23:d9:ee:4b:ba:ce:cf:f9:2c:92:a8:18:ed:11:a7:fb:a0:
d0:c3:e8:af:5e:5f:37:85:4f:78:6f:94:6b:44:d7:29:a4:e1:
a9:0d:1d:9d:7d:a9:b8:59:4d:75:a3:69:69:67:ea:eb:83:a7:
70:48:94:a8:69:0f:d3:2d:4d:98:62:56:f5:b1:16:93:f0:25:
6d:ac:41:81:f9:d5:29:c2:ab:92:b2:6c:cd:66:9e:b7:b1:f0:
6b:be:02:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:39:28 2026 by rpki-client