Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145104.roa
File: AS145104.roa (raw, json)
Hash identifier: Ax57zJ/DVEqu0pxaoHBGHOi5hj+K+37vTFEiXFkV1nc=
Subject key identifier: D6:16:81:A1:E1:E4:C3:E0:A6:2A:27:5D:39:A7:29:CD:05:63:15:AF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1AB92D9635632F038E2E8E86F1542E738C283DBD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145104.roa
Signing time: Fri 22 May 2026 06:05:21 +0000
ROA not before: Fri 22 May 2026 06:00:21 +0000
ROA not after: Fri 21 May 2027 06:05:21 +0000
asID: 145104
IP address blocks: 240a:a996::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:b9:2d:96:35:63:2f:03:8e:2e:8e:86:f1:54:2e:73:8c:28:3d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:21 2026 GMT
Not After : May 21 06:05:21 2027 GMT
Subject: CN=D61681A1E1E4C3E0A62A275D39A729CD056315AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:28:53:3d:20:7f:6c:b7:75:33:4f:5d:1c:
5f:25:94:7b:ba:d9:25:31:5b:06:fa:6c:76:15:de:
8f:5b:be:0d:5e:b2:3b:86:18:e2:fa:5d:47:73:5e:
e3:6e:da:d7:cb:03:31:8a:3d:21:cb:86:fd:eb:8e:
07:b6:a6:74:41:ef:79:2c:ee:36:64:1f:97:b6:69:
05:3f:cc:d4:f2:56:f5:66:3a:a0:31:46:aa:11:55:
51:bf:31:4f:29:2c:bb:70:a2:be:b7:60:22:48:f6:
d5:99:6b:ca:94:d5:22:7a:ec:ad:08:4f:d1:7c:52:
1d:52:87:0d:eb:f4:ea:88:16:63:37:60:5f:a2:57:
76:5d:d9:bb:46:3f:f4:16:23:38:b9:b4:b4:a7:74:
37:bb:40:60:02:10:ae:9f:8d:5b:e2:01:49:ba:f2:
43:55:52:d7:2e:b9:7b:c0:2d:cc:67:26:2f:ff:92:
35:cf:0c:01:15:7c:fb:04:17:bd:c0:96:f4:55:38:
ed:16:8f:1e:e5:2f:d2:8a:0b:3c:ef:38:de:c6:9e:
9c:06:d4:aa:6b:38:ab:40:87:cf:03:52:8e:4a:d0:
d5:0f:bd:de:b5:2c:f6:9f:fb:fd:ae:e6:34:9a:e1:
cd:c1:cd:a3:b9:b1:a8:28:65:ce:16:ef:61:ec:b2:
b9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:16:81:A1:E1:E4:C3:E0:A6:2A:27:5D:39:A7:29:CD:05:63:15:AF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145104.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a996::/32
Signature Algorithm: sha256WithRSAEncryption
85:28:ed:e5:36:82:9c:27:c0:f5:e2:f5:f0:ad:c6:0e:6e:db:
21:f5:2f:36:6e:95:cd:24:fc:4e:2f:39:e5:dd:63:06:97:39:
8f:2c:fd:b8:3d:4b:a9:39:d1:ad:a7:fe:2c:1b:d1:86:4a:77:
90:7c:0e:94:12:17:03:c9:74:71:75:ab:63:d6:93:66:a9:2a:
ae:2f:5b:b8:f9:21:66:60:1e:39:53:12:fc:b3:3d:b7:fb:27:
cf:f7:d8:a3:1f:cf:d8:2d:02:a8:81:b6:ea:eb:2b:35:c1:d6:
c6:ab:ec:08:7e:06:c0:23:1b:24:3e:b9:16:27:8c:f1:be:3a:
97:53:75:d3:47:fe:de:23:af:e2:08:26:94:b6:0d:e4:5a:cb:
b0:9d:01:57:3a:1d:c0:d0:55:52:99:a7:65:38:2a:ed:e1:03:
86:7c:fd:a0:39:9e:a9:bd:28:38:52:4c:71:d4:f4:ee:fe:2a:
c2:4d:4f:b0:6c:52:7e:39:ff:2a:48:86:52:31:2c:5f:41:73:
7c:e4:a0:44:b4:4f:a7:bd:80:83:51:78:a5:fe:c3:a8:7d:87:
2c:77:13:8e:30:28:14:17:e9:af:f8:6a:85:d8:8b:4f:71:30:
48:be:60:27:39:d3:e7:43:4d:d4:a5:76:15:a5:d5:18:6f:97:
bb:84:ba:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:26 2026 by rpki-client