Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145949.roa
File: AS145949.roa (raw, json)
Hash identifier: X3vQrk+kbEbpHMCXzgR/OK+Kc6mcP8RQYVikPfnx+Tc=
Subject key identifier: AF:4D:C3:CD:D4:70:51:44:BA:5C:A4:C4:5E:EE:6E:05:76:52:37:EB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3F925D86CAC67FB9E078A78153790F4FFF428FF0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145949.roa
Signing time: Fri 22 May 2026 06:27:51 +0000
ROA not before: Fri 22 May 2026 06:22:51 +0000
ROA not after: Fri 21 May 2027 06:27:51 +0000
asID: 145949
IP address blocks: 240a:ace3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:92:5d:86:ca:c6:7f:b9:e0:78:a7:81:53:79:0f:4f:ff:42:8f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:51 2026 GMT
Not After : May 21 06:27:51 2027 GMT
Subject: CN=AF4DC3CDD4705144BA5CA4C45EEE6E05765237EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c7:e0:4b:6a:bf:90:4f:76:00:0b:4e:28:0c:
db:53:05:a0:19:5b:e2:ca:f3:29:06:a3:ab:38:86:
47:e2:0a:38:18:2c:20:f7:25:6c:7d:47:18:fd:09:
df:38:b6:17:bb:7c:e9:15:a2:e6:3d:15:d2:b9:bc:
2d:b8:81:2d:d4:e5:54:eb:90:e4:0c:9b:5c:fc:4d:
c7:26:71:c2:af:d4:bb:a1:50:47:93:0c:6f:d9:29:
d2:ef:7e:d6:85:a7:80:3e:52:03:24:3a:c8:4f:c0:
51:c8:d0:d9:77:2b:08:fc:be:a3:5d:8c:dc:f3:93:
89:cc:2c:33:e2:3c:b0:af:bc:62:6a:68:60:49:6b:
d2:1c:d3:8e:08:b1:8a:24:d6:3b:c3:97:b7:79:0a:
be:11:56:27:26:1a:d0:3a:cc:13:d1:8f:79:e5:0c:
fc:07:95:ef:d7:89:1d:22:2b:6c:6a:7d:22:47:67:
89:7e:ce:aa:56:6d:fa:fe:1f:77:5e:79:40:87:19:
14:e8:e3:4a:4d:cc:0c:49:68:33:e0:a1:88:50:f6:
9e:d5:4e:63:74:e4:a2:a2:18:c8:23:f2:19:f1:30:
63:b4:d4:4a:58:2c:f1:b4:a7:27:3d:39:09:dc:0a:
aa:77:33:37:4c:d8:df:69:79:2d:d1:6b:d9:76:ef:
1d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4D:C3:CD:D4:70:51:44:BA:5C:A4:C4:5E:EE:6E:05:76:52:37:EB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145949.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ace3::/32
Signature Algorithm: sha256WithRSAEncryption
90:0f:3a:e6:cd:be:04:20:47:74:e2:7d:cc:11:fb:5c:6e:c2:
12:3d:24:68:8f:2d:a9:9b:60:c7:eb:7a:55:0b:d6:47:86:7a:
6f:f2:1d:1a:7b:69:f1:dc:16:8a:67:3e:31:7e:47:5d:ea:52:
1a:32:af:13:8b:d6:41:fb:d6:4d:0a:01:62:23:d7:08:d0:3f:
e9:02:cd:20:4c:84:e2:ba:5f:bf:ae:53:f5:d8:21:cb:ec:65:
d3:f6:cb:fa:84:f0:37:b7:3f:c2:23:79:7e:a0:1d:ab:ea:28:
7d:3d:0c:8b:61:3f:95:41:ab:a2:da:4d:29:8b:04:f6:24:d4:
e4:67:a8:3f:3b:f0:1e:71:8f:13:e3:1f:66:79:9b:d2:fa:25:
fc:d0:85:92:53:18:0d:2c:c0:fb:2e:53:8b:6c:e7:6f:d1:b3:
a5:c4:75:16:8a:f2:40:bd:91:c0:96:30:d3:2a:d7:bb:3c:2c:
f1:45:db:de:2b:51:d9:69:29:be:2d:5b:89:f5:6b:64:38:fe:
39:f3:0c:b0:f2:6d:99:8c:32:81:51:43:ee:b6:15:5b:94:a1:
05:00:4d:dc:04:ee:47:0b:49:32:af:ef:c4:fd:3a:a2:20:d1:
25:93:ae:71:7c:ad:f6:91:15:cc:d6:8b:81:d0:14:d9:8f:d5:
59:e9:24:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:24 2026 by rpki-client