Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145971.roa
File: AS145971.roa (raw, json)
Hash identifier: OkCY0BUGZ3F8vrKWuvXUYv68zwFcNyGfC2dm8Jd++Ak=
Subject key identifier: C3:18:2B:51:E6:EA:7C:F8:F6:8A:2D:73:49:FD:A5:E7:CA:A8:D1:6A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 68836E5DBB6DEACD3152AC09139D0082A8172FBB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145971.roa
Signing time: Tue 26 May 2026 03:16:40 +0000
ROA not before: Tue 26 May 2026 03:11:40 +0000
ROA not after: Tue 25 May 2027 03:16:40 +0000
asID: 145971
IP address blocks: 240a:acf9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:83:6e:5d:bb:6d:ea:cd:31:52:ac:09:13:9d:00:82:a8:17:2f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:40 2026 GMT
Not After : May 25 03:16:40 2027 GMT
Subject: CN=C3182B51E6EA7CF8F68A2D7349FDA5E7CAA8D16A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:d7:22:69:c8:6d:d8:b7:c3:e3:7a:bb:84:
56:55:da:1a:ce:e1:e5:38:98:b2:ec:3a:1d:71:3f:
2f:2e:c0:d6:35:8e:13:c7:33:11:28:81:b1:c0:6a:
20:c7:2c:d1:b1:ba:6b:5c:15:9d:88:56:e3:fc:5f:
39:cc:76:53:25:83:22:61:3a:54:2b:69:a4:78:a3:
a7:be:07:84:ba:33:8b:41:0b:44:9e:bd:63:60:f7:
89:96:be:73:c7:06:ea:7c:ba:03:5d:eb:8d:27:89:
e5:aa:76:49:34:7a:2c:e5:42:a8:e7:c6:81:c8:db:
0a:c7:a3:7a:03:e9:a6:f0:6e:b7:ea:45:7c:aa:56:
2f:ec:a9:bb:a1:7e:e6:85:3e:8c:6d:8e:8b:a6:c6:
44:83:5e:ca:34:3d:b6:3b:38:46:eb:fb:c7:25:1b:
df:62:90:11:46:ff:f2:1a:f5:30:9d:5a:c7:ab:b0:
f3:35:4f:f6:d6:f8:d3:38:56:1e:49:fd:5d:e2:ab:
72:d8:fd:5a:ff:89:41:54:20:9c:c2:2f:e3:36:80:
2d:31:4c:af:15:ed:ec:9d:03:35:1b:10:ac:db:af:
fb:a8:3c:f1:f3:a7:c2:97:4a:88:46:83:8a:9c:61:
55:2f:3b:07:79:86:b9:e0:1b:25:e6:68:ef:2b:b5:
9a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:18:2B:51:E6:EA:7C:F8:F6:8A:2D:73:49:FD:A5:E7:CA:A8:D1:6A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145971.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acf9::/32
Signature Algorithm: sha256WithRSAEncryption
59:a6:39:9f:e5:a0:91:ce:2b:31:86:6c:1f:a5:18:27:63:0e:
dc:fa:cd:8a:2f:ea:5e:9b:7f:01:32:f1:39:fc:cc:77:09:54:
78:55:bc:06:e8:71:36:b4:48:3f:30:d7:0f:af:6a:f6:66:c1:
89:f9:24:a3:36:81:92:75:e9:e8:e3:eb:a1:1e:6f:56:9b:7a:
71:09:86:f6:f5:9c:e9:5e:86:ad:db:19:47:13:04:a8:5a:f7:
72:65:83:7a:fd:86:e0:28:fc:f1:e7:25:f2:54:26:3c:be:94:
ca:87:34:8b:98:16:64:ff:bd:c6:33:c5:7b:eb:c2:c1:80:82:
b3:6b:d4:cb:39:ee:c4:88:cc:6e:58:e0:92:89:4a:95:8c:77:
5a:e0:08:2a:ef:55:25:2a:00:0c:85:95:69:cb:bb:8d:4e:84:
e6:09:d6:7a:bb:87:94:63:0e:aa:9b:6f:84:52:b7:18:a9:f9:
2b:98:95:88:c5:37:5f:bd:7b:ef:6d:cb:e5:29:1b:45:4f:d1:
31:a2:a4:02:c7:f9:e5:08:e5:1a:9a:52:3c:19:60:85:8a:d5:
91:06:62:db:c9:f1:ef:88:16:06:99:7c:3e:26:11:d7:fa:15:
18:ac:a1:36:92:a9:3a:3c:fc:0e:f1:c8:77:6d:32:75:86:2f:
7e:b7:3e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:39:28 2026 by rpki-client