Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145108.roa
File: AS145108.roa (raw, json)
Hash identifier: 6ULK+nNSvM+3T495d6R9sN3zX/b9sc7i2WajS38VJNw=
Subject key identifier: 65:F0:70:94:D7:B9:48:78:73:20:D2:A6:55:EE:97:CF:A9:F1:36:09
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 79EEDCFEA06859B0AACBEAB1A39B1C97B0C6D604
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145108.roa
Signing time: Fri 22 May 2026 06:27:50 +0000
ROA not before: Fri 22 May 2026 06:22:50 +0000
ROA not after: Fri 21 May 2027 06:27:50 +0000
asID: 145108
IP address blocks: 240a:a99a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ee:dc:fe:a0:68:59:b0:aa:cb:ea:b1:a3:9b:1c:97:b0:c6:d6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:50 2026 GMT
Not After : May 21 06:27:50 2027 GMT
Subject: CN=65F07094D7B948787320D2A655EE97CFA9F13609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4a:06:1a:c2:d2:d4:07:de:ed:db:14:35:9b:
1f:7e:b8:d6:96:c4:92:00:f2:5e:ec:10:9b:1c:29:
4e:7b:a0:7a:10:d6:63:c1:11:73:15:0b:9a:ec:ec:
ae:96:3f:02:1f:81:ac:b3:dc:c5:aa:d7:95:48:87:
41:11:4f:47:00:df:93:9d:7d:89:ba:f2:cc:7f:ab:
5f:13:ac:e9:38:09:93:f5:69:07:bc:3e:ea:e5:4d:
5b:9e:f5:c4:bd:00:bc:3c:fc:e4:fd:ea:4c:a2:49:
83:3e:1d:4f:9c:c3:60:4b:7a:a0:b5:cb:eb:5a:9a:
da:52:df:da:f0:fc:28:61:22:e4:5d:1c:52:b0:e1:
b1:48:ef:30:9d:b6:b1:5d:6d:f2:00:8c:1a:08:23:
7f:ef:7e:4e:f7:70:1f:fb:eb:b5:59:62:5d:17:f3:
30:f9:76:05:ac:57:4c:14:48:80:11:08:5b:9e:a2:
2c:30:85:18:ec:db:02:7a:3c:26:ef:70:10:5f:8f:
fe:40:4f:8f:13:5f:fc:a8:62:6d:0c:70:ed:5e:a9:
1b:71:7e:39:b6:b6:21:73:b4:2c:ee:06:69:21:be:
34:ec:f6:4c:d9:56:fb:49:a4:11:46:6a:06:1a:35:
dc:df:84:45:29:1c:21:72:5a:56:af:42:15:c4:26:
41:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F0:70:94:D7:B9:48:78:73:20:D2:A6:55:EE:97:CF:A9:F1:36:09
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145108.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a99a::/32
Signature Algorithm: sha256WithRSAEncryption
2d:36:a9:c1:9c:40:aa:3c:32:25:ff:e3:94:71:dd:f3:df:ce:
5a:0c:ba:0e:7c:d4:f1:a4:32:36:26:51:a7:dc:52:58:f2:fe:
d7:ff:77:20:9b:12:4e:d5:d0:43:a5:75:d3:9d:06:94:56:63:
1e:ba:6d:3d:08:ee:ca:86:67:15:71:40:e2:2f:db:c7:3c:a9:
17:b6:14:59:d7:6c:a4:b4:76:1a:c3:18:2b:49:1c:ea:87:60:
67:09:1d:42:89:0c:99:86:a4:36:96:1c:b4:94:1a:04:ff:87:
5f:5c:e9:cc:c4:66:b7:36:47:b4:62:38:66:32:39:3f:e9:aa:
4d:ac:ea:9f:4b:5b:c6:d4:d0:5f:e4:11:9a:6c:00:9c:ae:b8:
31:e4:1b:9d:d7:41:92:80:96:22:e2:ea:7e:16:23:92:89:1b:
5e:6a:4d:1a:41:ed:72:bb:58:e1:70:69:fa:fe:f1:81:62:64:
1e:b2:9e:d4:03:31:77:80:c6:17:27:f8:cc:bc:49:b7:ac:06:
56:17:6c:60:71:63:9c:4b:7c:1a:86:86:0d:0b:62:01:f8:19:
b1:65:6b:c2:8e:83:d0:4e:ee:16:8f:d2:6b:7f:22:5d:09:d6:
16:41:e8:15:62:f2:0e:4e:9c:53:f9:f9:a8:f6:ae:57:29:8f:
30:47:cf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:26 2026 by rpki-client