Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145952.roa
File: AS145952.roa (raw, json)
Hash identifier: IuP4/vTHVHgsJbsxunpD2v6ChtSX/fXMso3Ded9nkYM=
Subject key identifier: D0:AE:1A:2E:6B:BF:95:E6:CF:ED:64:C9:D2:AD:8D:81:6F:BC:A8:24
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 640C339350E9931D5250C1034C2181F6ABC689F4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145952.roa
Signing time: Fri 22 May 2026 06:46:32 +0000
ROA not before: Fri 22 May 2026 06:41:32 +0000
ROA not after: Fri 21 May 2027 06:46:32 +0000
asID: 145952
IP address blocks: 240a:ace6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:0c:33:93:50:e9:93:1d:52:50:c1:03:4c:21:81:f6:ab:c6:89:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:32 2026 GMT
Not After : May 21 06:46:32 2027 GMT
Subject: CN=D0AE1A2E6BBF95E6CFED64C9D2AD8D816FBCA824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3a:aa:8c:8a:0f:cf:13:81:1a:f1:4c:f2:59:
18:04:5f:44:d0:32:d7:0f:c7:71:39:1e:c0:ed:e9:
b0:68:92:ea:aa:a4:ab:26:d8:5f:3b:c5:11:87:64:
d3:22:a1:75:da:c4:8e:53:13:d3:82:cf:7c:d0:fd:
8b:1b:7b:6a:c1:df:9c:8c:f2:82:5c:8a:34:b3:66:
4e:c7:95:05:55:0f:ed:33:05:dc:2e:90:36:22:03:
96:49:43:2a:71:65:08:3c:7a:1a:e4:c6:d6:75:be:
50:1c:12:40:fb:a5:dd:9c:0a:9b:f5:07:59:d5:69:
4d:54:d0:18:97:21:fa:57:fe:00:22:29:a5:8f:d7:
ea:51:3e:f3:b9:4b:44:7a:0d:f2:5c:56:e0:d5:48:
13:28:af:72:28:1c:04:1f:00:a7:82:25:b0:e8:02:
0e:66:59:80:92:6e:70:b4:ee:39:84:b9:de:51:26:
b0:63:ff:c7:0f:91:16:de:e2:3c:2b:24:f3:f9:0d:
21:00:79:24:1c:f6:c6:dd:7d:7b:29:5c:c1:bb:9a:
4b:06:6c:ab:a1:2e:47:7c:b3:c0:db:e5:01:3d:1d:
4b:f1:c6:53:78:69:05:a2:b9:4e:62:55:1e:5c:a3:
7e:1e:d8:4a:3a:f0:81:fa:2b:d6:cc:43:89:4b:c0:
b6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AE:1A:2E:6B:BF:95:E6:CF:ED:64:C9:D2:AD:8D:81:6F:BC:A8:24
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145952.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ace6::/32
Signature Algorithm: sha256WithRSAEncryption
02:3e:07:04:f8:20:44:14:da:4b:3d:6a:59:1c:f0:ba:a5:ac:
88:c2:0a:34:e8:48:6c:cb:90:4d:33:c9:71:8f:24:82:f0:5d:
6f:a7:fe:63:98:f7:47:99:dc:93:41:f5:b6:4d:66:15:19:3f:
7e:ae:15:67:1e:97:4c:51:cf:a6:5b:92:bf:0f:34:23:43:c8:
31:cd:00:11:ee:5a:f7:9c:db:aa:99:e9:de:51:8e:80:05:69:
5a:b4:47:3f:64:fd:18:ae:c2:ab:96:7e:e9:02:07:d6:a3:6c:
6d:15:6f:7e:fa:ed:93:bd:40:09:25:da:e3:fc:3f:01:bc:16:
96:0f:da:1e:38:b2:af:fa:25:75:e8:b2:c4:b2:20:6f:6f:50:
46:ea:8b:47:b8:b1:26:4e:21:17:dd:66:d1:a5:e2:36:ea:f3:
77:67:d6:49:d2:10:64:25:af:6a:82:8d:d3:b1:37:30:9b:92:
2a:c8:e3:9e:b9:28:7f:a2:d7:ae:af:8e:75:4d:14:5c:08:f5:
4e:a8:50:6b:5c:31:d2:6c:57:e6:4e:c7:69:29:f5:b5:97:50:
25:0d:d6:9a:3e:2e:42:c1:bf:5b:06:65:93:88:c7:dc:65:c0:
47:7c:c1:b4:34:ab:70:d1:4c:92:8f:48:cc:d7:a4:28:9a:07:
34:df:1c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:56 2026 by rpki-client