Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145961.roa
File: AS145961.roa (raw, json)
Hash identifier: XQeHooi+nM1yFhCVn+bza6M3JRDee6CpDOQs1QeGDBE=
Subject key identifier: 9F:CA:CF:2C:14:3F:45:1C:AB:50:07:C7:F8:5F:64:DD:91:A9:09:35
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0C2DC1745344741BA96F018C3F682BB7DF912EF3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145961.roa
Signing time: Fri 22 May 2026 07:09:04 +0000
ROA not before: Fri 22 May 2026 07:04:04 +0000
ROA not after: Fri 21 May 2027 07:09:04 +0000
asID: 145961
IP address blocks: 240a:acef::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:2d:c1:74:53:44:74:1b:a9:6f:01:8c:3f:68:2b:b7:df:91:2e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:04 2026 GMT
Not After : May 21 07:09:04 2027 GMT
Subject: CN=9FCACF2C143F451CAB5007C7F85F64DD91A90935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ef:f6:48:6e:4c:51:55:c1:fa:b5:2d:21:e4:
83:ca:bf:eb:d3:c1:64:d4:ee:d6:18:57:56:ef:83:
04:6d:98:18:3c:80:01:c3:f9:ff:ee:f2:7d:f1:bb:
cc:cf:bf:e6:a6:3e:a3:63:5a:71:9f:1a:90:3f:e3:
3e:91:46:73:6c:b8:4a:9b:7d:69:5d:d6:4a:ef:5d:
c7:7b:54:40:80:d0:f2:b2:42:47:64:9c:a5:34:be:
ef:c9:7b:6f:7e:c1:24:d7:85:69:c1:32:cc:58:e8:
28:33:a5:07:cf:0b:7e:26:9c:cf:2b:d2:81:ed:bf:
a6:27:72:06:a4:3d:38:a6:c3:37:b7:74:9e:3c:26:
26:b6:b3:bb:a0:03:c6:98:d4:2f:f9:b6:8d:57:66:
11:21:fd:c1:90:be:3d:2b:dd:11:88:16:aa:69:21:
74:ac:a9:6a:70:10:ca:44:44:f1:1c:4c:97:6e:cc:
85:78:ae:cf:cf:43:d9:21:9b:b3:6d:f8:10:58:1d:
33:7a:db:e2:92:6c:d2:ba:3b:f3:97:b8:1c:8a:04:
44:05:8f:06:83:5a:44:3c:6a:70:17:28:92:47:f2:
13:60:12:e1:51:83:bf:45:98:ad:c9:43:b5:49:01:
24:c5:fb:0a:80:9b:23:23:4f:5a:cd:d8:4c:c5:13:
6e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CA:CF:2C:14:3F:45:1C:AB:50:07:C7:F8:5F:64:DD:91:A9:09:35
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145961.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acef::/32
Signature Algorithm: sha256WithRSAEncryption
0b:50:1d:39:68:c1:e4:a6:a0:b3:15:1f:bb:fd:8e:23:71:22:
cf:25:3e:ae:f7:41:9f:de:58:35:f1:ac:93:c9:b8:aa:65:b9:
4e:37:af:26:c9:92:c7:08:a7:58:75:aa:1a:10:26:15:15:21:
08:9b:c6:7f:b6:6f:1f:0e:a8:cc:16:08:b2:40:4f:fc:a4:d8:
d9:8c:7d:2f:d3:d6:18:a7:ea:17:38:23:b0:11:13:20:0a:3b:
2c:05:90:73:69:c4:df:53:28:58:f8:55:bd:2d:b4:68:fb:6a:
b5:9e:e6:f5:4b:16:c6:06:cc:96:67:50:f0:b8:54:65:2f:48:
7a:12:bd:3d:99:42:58:06:fe:e2:e8:6e:60:e0:54:9f:75:74:
03:98:9a:7a:8c:ca:e1:51:70:f6:41:68:7b:ff:78:3b:5c:09:
0e:21:24:73:90:cf:f0:4f:93:ec:4a:c7:33:2d:91:e7:52:a3:
4c:e6:b2:99:64:92:56:b7:cd:f4:be:66:44:66:7d:c0:a2:b7:
d4:71:45:58:a5:d0:2e:9d:68:6b:19:57:f1:e8:f8:21:d9:90:
2d:a7:74:c1:1e:be:14:f5:b5:a4:85:6b:47:48:4c:66:38:ff:
9a:d9:03:c3:59:be:d8:e5:4b:dc:83:cb:08:2c:5e:f8:14:33:
a5:06:05:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:08 2026 by rpki-client