Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145089.roa
File: AS145089.roa (raw, json)
Hash identifier: 8iC5Nop/k5cjxnvSARGzJk1nhcQZhl9HOnwaRM5t+bw=
Subject key identifier: B2:06:87:20:C2:49:1B:76:DC:10:AA:D3:22:A6:8B:92:B9:B0:A2:02
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4F12C0DD9C4C55B5257E30082E5486347C5F2BB6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145089.roa
Signing time: Fri 22 May 2026 06:05:43 +0000
ROA not before: Fri 22 May 2026 06:00:43 +0000
ROA not after: Fri 21 May 2027 06:05:43 +0000
asID: 145089
IP address blocks: 240a:a987::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:12:c0:dd:9c:4c:55:b5:25:7e:30:08:2e:54:86:34:7c:5f:2b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:43 2026 GMT
Not After : May 21 06:05:43 2027 GMT
Subject: CN=B2068720C2491B76DC10AAD322A68B92B9B0A202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:34:e3:f4:bc:b7:2d:4f:44:66:6e:cd:8e:34:
af:42:4a:ef:bd:7e:ad:dd:cd:f8:f4:c0:7e:1f:23:
3c:9b:21:63:e4:fa:88:d0:86:f1:be:db:12:a4:ed:
76:8c:bd:65:81:10:cd:f0:8d:31:c5:b3:e2:d6:50:
de:e6:33:d5:54:b0:bb:d8:73:ef:e2:85:0a:9e:7a:
38:90:bd:48:a9:b1:b1:1d:9c:35:f3:8e:cb:6c:31:
90:c6:d2:61:08:9b:3c:a8:95:94:27:cd:f7:c4:97:
e6:63:c0:16:e1:58:b1:99:24:f2:0d:2c:3c:1b:fe:
1c:8d:86:c9:49:3d:0c:2b:c7:ee:15:cc:4a:5e:37:
d6:6b:49:e8:12:ba:88:3a:d9:4e:9e:7d:42:f0:8a:
c6:f9:35:95:5b:a8:7a:5c:d3:82:c1:98:31:39:86:
3e:ec:82:2b:ac:e3:45:a0:0f:d0:9c:b0:30:1e:64:
52:90:79:e4:9e:35:a5:02:a9:14:a2:dd:1a:c3:c3:
5c:d8:34:98:14:9a:2a:d7:e1:79:d3:72:3a:36:79:
33:5c:a4:7f:4e:72:40:e4:bf:33:24:28:e6:7f:15:
d7:f7:19:c2:03:70:3d:32:f3:2a:09:bc:96:9b:89:
dd:3e:39:b8:9c:2a:6f:e5:9b:a2:11:9a:16:99:e5:
0f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:06:87:20:C2:49:1B:76:DC:10:AA:D3:22:A6:8B:92:B9:B0:A2:02
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145089.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a987::/32
Signature Algorithm: sha256WithRSAEncryption
3a:89:9c:7c:37:a0:5c:fd:7e:06:7a:95:93:96:24:20:d3:f3:
d3:5a:5b:ca:21:2d:bf:41:06:ca:73:ea:b5:cb:0a:29:d9:04:
7f:65:e8:6b:04:d3:18:35:12:44:51:a0:d9:1e:6b:ed:68:c3:
cf:46:00:c1:17:88:86:ba:41:ce:1c:62:34:ce:c3:65:0c:a4:
3a:5c:ff:bb:5f:02:59:13:9b:25:05:e8:86:f6:c6:67:4d:2f:
7a:21:f5:44:c8:59:53:b6:c0:5b:ad:b9:e6:42:c3:0e:47:d3:
dd:d0:57:5d:06:51:29:0f:4d:0b:d1:05:d7:3b:20:2b:0d:d0:
68:c1:db:a0:6d:56:b6:a4:22:65:83:7f:f4:c2:ea:cd:74:8d:
e5:b6:31:9e:8a:ca:a5:f3:4b:58:32:2d:de:0c:70:12:cf:73:
9f:55:25:31:59:f1:0a:fa:be:a4:04:04:9b:c9:da:d2:26:57:
67:c1:d8:27:16:00:11:9e:44:4f:74:dd:63:dc:9e:5e:4a:d3:
ff:e5:b7:ff:73:ce:9e:56:20:b7:07:c3:e6:1e:be:6f:b3:d4:
71:ce:b3:7d:69:18:c0:8f:2b:27:3e:a6:bd:a9:d5:b3:0b:08:
4e:c5:ba:48:19:fa:f4:d5:57:19:19:80:7a:63:95:12:ab:61:
26:af:fd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:59 2026 by rpki-client