Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145962.roa
File: AS145962.roa (raw, json)
Hash identifier: OIJhITn2SSh1bifnugrgSi1/meMuSpgTVcjDDA4qokY=
Subject key identifier: 85:1B:FD:62:3B:0C:A7:8D:E6:58:D2:3D:91:33:D7:88:E1:D4:23:7C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4342E3C38F22DB5FA3BAEA9B6709F5D6B1DE58D8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145962.roa
Signing time: Tue 26 May 2026 01:13:06 +0000
ROA not before: Tue 26 May 2026 01:08:06 +0000
ROA not after: Tue 25 May 2027 01:13:06 +0000
asID: 145962
IP address blocks: 240a:acf0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:42:e3:c3:8f:22:db:5f:a3:ba:ea:9b:67:09:f5:d6:b1:de:58:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:06 2026 GMT
Not After : May 25 01:13:06 2027 GMT
Subject: CN=851BFD623B0CA78DE658D23D9133D788E1D4237C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f3:25:28:9a:26:4e:cb:d8:ef:6d:54:dc:38:
58:75:16:61:17:78:94:27:95:07:94:24:db:8e:73:
97:50:18:57:bb:6c:71:9e:af:0f:c7:7a:59:8f:b9:
96:1f:62:b7:b1:4f:48:74:54:40:6c:0c:4a:a2:69:
a6:c5:45:4b:fa:92:ee:a8:dd:98:a6:16:b4:66:d4:
e3:10:0e:74:dc:94:6d:0c:5e:00:42:6c:ef:e7:fe:
a1:9c:9a:3f:dc:32:f7:e8:8e:a0:02:b0:6d:cd:55:
74:b3:fc:12:c5:e3:3f:d9:2b:15:c7:69:e8:e4:b1:
d8:22:3a:c3:2c:50:64:e8:46:49:d3:47:ca:a5:fd:
27:7f:d1:d4:9d:23:b9:f5:4a:3e:5f:ca:db:6a:7c:
be:d2:97:c9:15:0a:43:b2:97:cb:11:02:7c:5d:77:
24:ee:48:d4:04:1a:6c:a5:91:e4:b5:bd:04:ae:ff:
97:a0:be:75:82:29:e9:c0:da:8d:c4:6d:68:13:37:
01:15:f4:0b:90:4e:e1:a4:1f:d2:a6:4c:a8:f2:f6:
e7:3b:5a:54:62:68:c7:42:db:df:a9:e8:88:6d:44:
6c:29:6a:a4:8f:dd:80:38:58:87:b1:8c:bc:94:62:
02:b5:b3:c7:15:51:95:c4:1d:61:20:80:2b:49:40:
9d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1B:FD:62:3B:0C:A7:8D:E6:58:D2:3D:91:33:D7:88:E1:D4:23:7C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145962.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acf0::/32
Signature Algorithm: sha256WithRSAEncryption
01:d9:96:07:b0:ac:8a:6b:7e:23:89:3d:81:79:3a:5a:a1:8f:
e9:ec:56:27:28:4e:51:11:d7:15:9b:13:13:f5:0e:08:6b:74:
61:73:33:5e:58:ab:26:8c:a7:6a:56:f2:c3:b5:1f:65:b7:52:
72:df:b3:af:db:3f:f8:04:be:6c:7d:af:05:20:48:69:0b:33:
28:e4:a6:7b:1a:7e:1e:7b:d7:1f:9d:c8:e0:4c:95:9f:46:1f:
a7:f8:48:31:48:bc:5e:78:47:73:aa:56:6f:f4:05:20:7b:d0:
1a:b5:fa:19:2a:3c:66:92:b8:da:13:d9:b1:d3:8b:26:75:a1:
30:57:39:4a:49:dd:5e:fa:c5:e3:12:57:a2:e4:60:8f:52:e0:
9d:f9:6f:46:84:c6:ce:02:51:65:9c:4e:32:a6:cf:a3:61:1f:
98:d1:e0:ad:63:7c:78:0d:9c:0c:35:0e:70:43:e3:82:fd:75:
80:e7:8c:45:f0:95:f3:9b:76:7c:b3:72:06:24:86:2f:21:b0:
95:de:9f:65:18:3b:8a:49:08:b6:20:52:78:0d:cd:47:15:8d:
39:b4:3e:39:89:1f:f5:08:d1:60:2d:e2:de:ed:66:49:07:89:
ab:14:41:61:87:e6:87:60:d2:97:1d:b6:3c:cb:24:74:fc:09:
97:d2:91:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:13 2026 by rpki-client