Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145976.roa
File: AS145976.roa (raw, json)
Hash identifier: zqZoL6YPELDHtofFvEixT3LMuTNBtEi07LX8Ig+n7sk=
Subject key identifier: C4:EE:E2:55:48:40:52:A0:DC:21:97:DD:AA:25:07:D6:8C:0E:6B:1C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4DBC6B0E8E867862414CD5D8CE300400A59274CF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145976.roa
Signing time: Tue 26 May 2026 02:34:54 +0000
ROA not before: Tue 26 May 2026 02:29:54 +0000
ROA not after: Tue 25 May 2027 02:34:54 +0000
asID: 145976
IP address blocks: 240a:acfe::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:bc:6b:0e:8e:86:78:62:41:4c:d5:d8:ce:30:04:00:a5:92:74:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:54 2026 GMT
Not After : May 25 02:34:54 2027 GMT
Subject: CN=C4EEE255484052A0DC2197DDAA2507D68C0E6B1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0f:5b:46:98:86:8e:ae:6e:7c:90:4b:ae:85:
5d:d9:1f:ba:e4:b6:94:ae:09:53:ff:61:65:fc:0c:
fd:8c:64:13:ba:5f:db:79:81:5d:5e:e6:d8:50:a2:
b4:5d:97:ef:37:9a:a8:ef:b8:53:02:14:e9:d9:ca:
ef:f4:d8:b0:87:e8:97:c4:b3:fa:38:b5:34:e8:ce:
9c:ed:68:7a:62:8d:e6:1f:f6:21:47:35:03:42:82:
66:a5:f2:28:b8:ed:bc:d7:dc:fd:6e:28:2c:79:90:
43:fe:5e:22:01:44:97:e8:15:e5:5b:25:a2:4f:40:
b2:d0:43:8a:09:85:9f:5e:5b:fd:ba:68:b3:b6:f9:
58:ff:d5:cc:84:59:02:88:7e:20:72:54:86:47:90:
fb:7d:68:60:5b:c3:56:36:6f:97:20:12:aa:c4:35:
33:60:ec:75:44:0e:9c:0c:da:bc:e3:91:f1:5d:cb:
87:14:aa:a3:c6:c5:ce:90:5f:4e:27:4f:c5:1d:e9:
1e:72:a6:bc:6f:86:2e:e0:ae:df:78:dd:53:c1:18:
2c:7a:ba:9a:3d:81:b4:27:56:d9:7e:7a:1e:e3:d4:
52:8b:ca:ea:ee:83:f4:b0:81:e5:f9:a7:fa:e9:bd:
a0:11:6c:8a:2e:b3:c1:07:8d:76:a4:43:6c:3e:83:
f8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EE:E2:55:48:40:52:A0:DC:21:97:DD:AA:25:07:D6:8C:0E:6B:1C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145976.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acfe::/32
Signature Algorithm: sha256WithRSAEncryption
51:f8:9d:9c:90:5e:c4:24:36:c7:26:30:14:09:6c:e6:a6:99:
ee:30:10:c4:74:df:1b:6d:5e:c0:d6:30:dc:c7:3c:8f:38:ae:
88:3f:24:a7:b5:bd:9a:a2:1c:e1:e3:e4:6a:71:07:3c:21:42:
00:b6:a3:8c:ff:0e:93:35:37:14:3f:82:71:88:b8:96:bc:65:
16:8b:29:5c:5a:ed:52:6e:3f:48:67:73:d4:66:02:94:c5:d9:
22:f7:e2:db:7a:5c:44:a5:8e:86:77:cb:97:29:2a:67:57:26:
48:be:30:59:10:36:e0:18:c7:10:82:63:24:77:8a:9f:58:50:
0a:f8:3f:e6:eb:c8:3b:67:38:85:d8:33:88:c9:2c:23:03:42:
09:17:49:0e:ba:5b:e8:fd:77:87:61:80:be:46:48:a6:13:dc:
46:fe:3d:f1:8d:12:86:52:5f:3a:2e:76:08:48:cd:ff:5b:e2:
85:e2:3c:49:ee:d2:95:42:69:ee:53:08:aa:84:4a:bb:02:bd:
53:a6:f0:ea:23:67:9f:a6:91:70:58:63:d6:b7:8d:36:31:02:
dc:fd:55:49:55:54:d2:7f:33:d3:0b:d7:b7:65:7f:c6:a2:5f:
54:78:a7:b1:75:ca:e3:4d:d1:20:d9:d1:c0:7a:a2:c8:51:c5:
bf:0b:80:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:24 2026 by rpki-client