Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145286.roa
File: AS145286.roa (raw, json)
Hash identifier: 38l0qRkXnuC6LHl8cOu9fBUAzyS6rtPEdRppigO8tlg=
Subject key identifier: 61:AB:6C:2C:F4:22:AE:39:C2:80:F3:F3:BC:F0:26:93:E6:4D:39:C5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 78A63F37A5CF5FB7EA0A6FBF9879E1A824831C21
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145286.roa
Signing time: Fri 22 May 2026 04:08:05 +0000
ROA not before: Fri 22 May 2026 04:03:05 +0000
ROA not after: Fri 21 May 2027 04:08:05 +0000
asID: 145286
IP address blocks: 240a:aa4c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:a6:3f:37:a5:cf:5f:b7:ea:0a:6f:bf:98:79:e1:a8:24:83:1c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:05 2026 GMT
Not After : May 21 04:08:05 2027 GMT
Subject: CN=61AB6C2CF422AE39C280F3F3BCF02693E64D39C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:55:62:6a:a9:75:ff:68:a1:be:73:40:d6:
a4:05:4d:63:ef:4e:9f:3c:4f:2f:ce:bb:18:f6:38:
3f:b3:4e:b4:98:ff:41:1d:86:6d:be:d1:71:e4:70:
b8:98:64:fa:ef:ed:24:c6:26:17:c4:75:96:91:67:
54:72:c1:18:b7:96:e4:d2:4e:44:0c:a1:cb:55:ad:
a6:e9:cf:ed:2f:21:41:4d:39:9c:d9:6c:97:25:3b:
82:be:3b:4e:da:03:54:55:18:13:2b:99:b5:ad:f8:
e1:d4:f9:1b:36:12:92:96:ed:8a:ad:4f:42:8d:66:
62:85:24:f3:df:a8:0a:d0:89:e9:91:9e:e8:56:35:
3e:e1:32:82:0b:f1:f2:cf:35:45:96:80:d5:bc:3a:
ca:30:91:12:89:04:87:5e:3e:a4:07:07:e1:5d:9e:
89:23:0f:64:65:1b:6c:34:19:65:86:96:03:7b:cd:
96:08:f6:a6:cf:04:54:86:59:93:31:db:59:fb:a6:
b6:c8:3a:25:ef:9d:8e:f4:93:ce:f5:8a:3e:1d:08:
24:42:96:b1:02:e4:01:be:a7:fa:7d:e6:37:ad:28:
40:ca:56:ca:ac:91:3b:ba:10:70:be:60:2a:c8:14:
33:e4:2b:cc:27:d3:60:f1:21:7a:a4:66:6e:d8:94:
64:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AB:6C:2C:F4:22:AE:39:C2:80:F3:F3:BC:F0:26:93:E6:4D:39:C5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145286.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa4c::/32
Signature Algorithm: sha256WithRSAEncryption
90:6b:85:02:34:d9:88:75:f9:ea:bd:3f:18:43:88:1b:52:89:
42:ee:20:91:3e:f4:b9:d0:a1:a3:03:72:8a:64:ab:f1:1f:67:
8c:e4:3f:11:fb:7f:63:cc:7c:59:6b:6b:45:18:57:57:a2:20:
83:f0:60:a9:f9:ea:c9:5b:c8:b2:c1:49:f6:fb:5a:cf:68:25:
bc:aa:ec:00:d5:31:34:b2:a4:79:97:c0:43:48:50:8c:8e:81:
70:e1:eb:b5:a1:02:36:8e:4a:d4:11:6b:e9:5b:f9:6a:24:69:
f9:57:59:4c:06:c2:6d:6e:c2:ee:50:af:32:69:cd:8b:14:a4:
44:c0:30:67:81:75:53:6c:cc:43:bb:3c:01:47:a7:37:05:2a:
b3:43:da:da:08:c4:14:b8:a4:d6:5a:d6:ce:af:4c:38:c9:64:
11:6a:15:cf:ae:9a:70:c1:a0:e7:14:c4:a5:26:24:e3:d9:04:
23:50:d9:ca:e4:e6:5e:da:ff:1f:d9:ec:41:40:85:47:a7:8f:
9f:ef:06:ba:c9:c2:67:09:e9:f7:8d:09:80:9e:63:01:c2:05:
b4:55:7f:fc:fc:d5:a8:00:31:9c:6e:03:77:e8:97:62:b3:5d:
8c:4a:61:21:9a:8a:24:56:6f:d7:9d:79:57:37:45:2a:0c:88:
bf:51:ef:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:49 2026 by rpki-client