Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145955.roa
File: AS145955.roa (raw, json)
Hash identifier: 8LN1FfejGRSTObeWRyD+VF18LFzvY/sfE/2r2tgJiho=
Subject key identifier: B2:16:F0:E1:91:80:94:B8:AF:87:83:3C:07:24:F1:BF:60:8F:5C:59
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5DCEF95EC632655ED2DCCAA78364D8D6F7A58FF3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145955.roa
Signing time: Fri 22 May 2026 07:08:44 +0000
ROA not before: Fri 22 May 2026 07:03:44 +0000
ROA not after: Fri 21 May 2027 07:08:44 +0000
asID: 145955
IP address blocks: 240a:ace9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ce:f9:5e:c6:32:65:5e:d2:dc:ca:a7:83:64:d8:d6:f7:a5:8f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:44 2026 GMT
Not After : May 21 07:08:44 2027 GMT
Subject: CN=B216F0E1918094B8AF87833C0724F1BF608F5C59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ce:76:8a:48:14:8f:06:49:f1:f9:bf:92:9b:
1c:8b:07:58:6b:21:51:a5:16:cc:ff:19:e8:2e:6b:
ee:e1:ee:9a:29:24:ca:44:c6:02:ae:90:c6:35:0c:
d9:99:f7:0c:73:e8:0c:89:b2:35:71:45:d7:de:0f:
39:59:3c:75:b8:c3:9a:be:d4:4b:69:dd:7a:bd:c6:
5e:a9:16:9d:81:3d:8b:5f:5b:e7:93:06:65:42:e5:
80:bb:3b:37:f0:c4:cc:31:87:aa:e4:87:1c:25:cf:
a7:0c:fb:8b:1d:c6:78:b5:d1:9f:03:6c:a7:ad:48:
c8:db:31:3a:17:7a:14:76:d5:c4:ff:05:cd:cb:a7:
90:ac:e3:e3:2c:46:f6:c5:be:15:4c:95:e6:98:22:
f4:ed:bc:60:3a:b8:b2:c8:12:6b:35:73:71:3f:d3:
3f:d5:9f:ff:75:3b:e5:cf:d6:c9:ae:0e:f6:62:02:
9c:25:e3:a5:ba:8e:f4:d3:c9:5d:db:8c:94:d9:e2:
2d:e1:38:a3:07:17:1e:a3:ea:db:27:a7:77:6e:c0:
18:74:39:f7:ba:2f:f0:57:ce:f5:25:7b:03:60:76:
ce:4a:bf:10:27:0c:48:7f:35:4e:31:e4:99:e1:2a:
d2:0f:eb:c3:05:f1:ad:14:7b:c5:6b:c1:e4:82:c4:
e4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:16:F0:E1:91:80:94:B8:AF:87:83:3C:07:24:F1:BF:60:8F:5C:59
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145955.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ace9::/32
Signature Algorithm: sha256WithRSAEncryption
83:f4:32:19:cd:5a:21:b2:36:5c:9f:30:49:1d:27:72:2b:3d:
58:0f:45:85:5b:0e:f4:e6:d1:e8:9e:4b:2a:88:5e:65:78:9e:
29:5c:b2:b1:eb:47:29:19:24:3a:63:49:e2:a5:9e:17:5a:84:
da:9e:3c:cf:a6:cc:6b:7a:cb:85:1b:fb:30:6e:91:a9:e5:e0:
a9:8b:b6:09:10:1f:d5:66:66:20:9f:07:c4:1e:73:65:4d:68:
fb:3e:ed:01:cf:c9:ab:dd:0f:c9:df:35:47:74:85:92:e5:89:
d2:b7:c2:cc:98:74:5f:04:23:5b:ef:0d:a2:eb:bc:43:f4:df:
2c:b9:35:99:cc:5a:da:58:82:f2:29:be:68:af:b6:cc:b5:81:
98:78:1b:02:16:4b:81:e9:17:22:52:c2:7f:a3:e8:ae:95:69:
81:1d:b3:98:3b:e6:1d:4c:d0:51:ea:c2:81:2a:15:22:d3:e4:
95:75:bd:e8:6a:90:e5:08:d2:20:63:90:f5:72:e4:6d:10:dd:
d3:ed:1d:a3:a6:9c:2b:44:b0:77:d6:39:c4:24:ba:b9:ba:7b:
65:29:38:c3:39:f6:f2:58:db:bd:df:29:5f:f0:01:53:08:22:
9f:94:c0:4e:a9:b8:bb:6d:e6:bf:77:ba:e7:01:51:a0:69:90:
23:85:bf:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:23 2026 by rpki-client