Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145096.roa
File: AS145096.roa (raw, json)
Hash identifier: /UP4hnR0IvdGFmKj8RMuyQHC9Y99+JpqbaPSu7XHxJc=
Subject key identifier: A6:F5:B7:50:E6:6E:CA:97:18:98:A1:46:61:A0:53:5B:60:66:EA:F3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1136947F837800C846E1A1FCCCA370A430E3F436
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145096.roa
Signing time: Fri 22 May 2026 01:50:31 +0000
ROA not before: Fri 22 May 2026 01:45:31 +0000
ROA not after: Fri 21 May 2027 01:50:31 +0000
asID: 145096
IP address blocks: 240a:a98e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:36:94:7f:83:78:00:c8:46:e1:a1:fc:cc:a3:70:a4:30:e3:f4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:31 2026 GMT
Not After : May 21 01:50:31 2027 GMT
Subject: CN=A6F5B750E66ECA971898A14661A0535B6066EAF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:19:d4:68:4d:35:eb:dc:50:a9:2c:15:5a:42:
17:59:dc:0a:41:31:f0:a9:8c:e0:e0:b3:ec:c3:f3:
7e:f8:16:8b:57:c5:f5:09:9c:d2:29:6f:c4:23:e3:
29:4b:b7:d2:6c:1c:69:b5:38:3e:32:de:cb:8e:a4:
fb:72:ae:45:8f:e5:ad:d1:56:91:33:36:36:8c:03:
8c:0d:b3:35:bd:88:c2:4b:7d:99:a9:4c:0f:59:42:
63:48:8f:d4:49:74:eb:6d:3c:e6:f0:38:93:14:04:
3b:4a:16:0f:04:23:b3:41:44:b8:88:c6:d9:7b:aa:
f7:7d:b2:ff:21:71:c1:78:0c:d4:fd:6e:22:b3:ea:
5f:2c:67:b3:72:0a:37:e8:6a:43:89:77:66:a9:62:
d3:f5:85:51:37:02:72:76:9f:c1:9e:4b:4b:e3:13:
9a:18:e7:2e:d9:c0:d7:09:08:2b:a9:1c:f3:35:75:
47:22:1b:47:6f:b2:55:9f:da:66:c7:f6:be:2c:13:
e9:e6:ca:d7:53:1d:f6:98:ce:91:00:1d:41:f5:b7:
ac:15:48:dc:bf:7c:68:4d:3b:dc:f0:72:53:18:b2:
68:27:27:66:4b:09:f2:24:d8:8e:ed:00:4e:00:33:
2e:81:01:a1:6f:ab:7d:1d:9d:ee:36:66:a6:23:b8:
77:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F5:B7:50:E6:6E:CA:97:18:98:A1:46:61:A0:53:5B:60:66:EA:F3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145096.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a98e::/32
Signature Algorithm: sha256WithRSAEncryption
53:58:99:6c:eb:54:0d:66:12:38:45:05:b1:0a:ca:27:56:4e:
83:80:a5:d1:00:fc:5b:96:45:5c:d9:fd:47:a7:57:85:a9:7f:
3d:87:40:f5:ae:61:8b:9a:54:32:e1:e9:8a:61:4d:ca:65:e7:
f9:64:0b:3f:cc:06:a7:42:08:48:3c:ce:93:6b:f1:a3:e7:89:
ba:37:7c:3a:6b:3f:bb:b5:81:d2:4f:7b:3f:64:83:e2:27:79:
2c:db:2d:d3:fe:b0:ab:14:c7:ca:22:38:eb:49:9f:1a:f9:f4:
07:f8:17:59:6a:b7:78:00:d1:49:bd:a5:05:56:9d:93:75:9d:
7c:0a:00:91:55:21:40:e5:3b:40:e5:85:ea:9f:25:8f:16:27:
f1:ca:64:f6:a5:e4:32:48:cc:ac:10:b9:03:c2:57:70:81:10:
cd:46:60:38:fb:f7:c7:aa:ca:91:89:04:8b:67:b0:6d:fa:46:
d2:28:bf:b3:f9:66:c7:2e:0b:ea:56:8c:4d:ec:0a:6d:35:e9:
f3:e2:25:09:70:06:90:7a:55:32:28:90:59:4c:55:93:f8:cf:
9b:c8:87:9a:f4:74:8b:20:33:d6:0f:9a:5a:9e:7a:7d:11:b5:
bd:98:5c:c4:fa:1a:39:95:ef:8a:ba:8e:81:af:1c:7d:ea:d9:
8b:8a:8e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:30 2026 by rpki-client