Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145471.roa
File: AS145471.roa (raw, json)
Hash identifier: kcTxa7CTGs0hqqTdzbEPuFydTyLJjQSEESKAIazfz6o=
Subject key identifier: 19:21:16:64:CF:25:6C:27:4D:2A:60:4F:C8:DD:B1:49:C4:C5:79:04
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 07046E1C07DBBD7DB265571C13CAB745869C124F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145471.roa
Signing time: Fri 22 May 2026 07:24:28 +0000
ROA not before: Fri 22 May 2026 07:19:28 +0000
ROA not after: Fri 21 May 2027 07:24:28 +0000
asID: 145471
IP address blocks: 240a:ab05::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:04:6e:1c:07:db:bd:7d:b2:65:57:1c:13:ca:b7:45:86:9c:12:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:28 2026 GMT
Not After : May 21 07:24:28 2027 GMT
Subject: CN=19211664CF256C274D2A604FC8DDB149C4C57904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1b:07:b1:c4:19:f8:2b:88:63:62:17:90:f6:
d5:08:41:42:31:2a:e4:84:80:26:3f:af:54:2b:0b:
1c:fc:40:22:30:68:91:55:d0:80:f5:ad:6d:42:8d:
a6:71:f6:12:c6:08:a1:c3:13:b8:03:5a:35:af:49:
66:64:3c:d5:fa:8e:4f:77:a8:1a:b1:a4:2c:46:93:
99:94:5b:5f:e5:a5:bf:eb:27:c3:8b:6c:0e:03:63:
df:60:a6:5f:60:e7:36:d3:74:26:38:0f:07:92:1f:
8b:b1:26:4d:5d:91:bd:da:ca:99:16:e3:d9:b3:86:
07:13:1a:69:18:ef:2f:ca:65:06:06:31:47:c9:61:
fd:40:1c:3d:2f:ee:36:02:db:c8:80:ac:5a:79:17:
db:ae:c7:22:f3:1e:e5:f3:8b:7c:f4:f5:bb:de:6a:
77:fe:23:52:07:d0:2b:1f:3d:eb:70:cb:00:c3:88:
8b:b0:88:58:49:71:fd:b9:92:c2:68:38:cd:66:81:
e0:7f:83:77:c7:dd:9d:77:8e:4b:2b:01:75:e6:3f:
a7:c1:bb:0c:81:ab:9a:48:e3:1a:97:2e:db:33:a8:
f3:89:dd:b3:77:c6:ef:d8:1f:8f:22:85:1f:ae:1a:
97:8d:74:11:3a:bc:07:af:51:06:11:ee:fd:a2:f5:
77:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:21:16:64:CF:25:6C:27:4D:2A:60:4F:C8:DD:B1:49:C4:C5:79:04
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145471.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab05::/32
Signature Algorithm: sha256WithRSAEncryption
4e:d0:df:24:5a:bc:44:5a:b4:19:5f:5d:3e:b0:fe:06:17:1e:
29:62:03:39:c3:eb:d0:7d:6d:22:70:b2:ed:2c:1c:05:3c:6d:
64:e7:84:da:5e:3f:d9:5f:4a:b0:c3:c9:12:14:f1:35:82:8e:
88:f9:43:b9:1a:17:62:09:8f:ef:de:8e:9e:06:55:b7:fa:5f:
43:a0:99:22:31:a0:ae:c0:80:31:82:29:1c:b8:8d:c8:b3:00:
f4:12:1b:e6:98:0e:1c:c7:48:62:bb:e5:a2:38:89:bc:38:a1:
59:d2:69:08:52:11:e0:43:76:2c:54:fd:c3:43:19:df:16:3f:
25:6b:7b:c9:44:13:c4:97:5c:bf:54:7c:33:c0:e8:2f:9c:27:
d3:c7:37:61:0d:69:68:5b:cd:db:7a:4e:4d:5c:01:66:cd:b2:
f8:61:4a:7c:e9:03:00:13:59:e5:b0:bd:0a:2a:d3:0b:ad:9b:
c8:8a:5e:bb:40:0f:4e:ca:72:e2:37:33:17:46:6d:99:22:b8:
8c:4d:81:b5:02:be:6a:37:39:07:b2:82:3e:99:d8:e1:06:78:
16:7e:fe:f1:28:f8:3f:94:45:83:ca:2c:03:63:3e:c4:7a:72:
b8:d7:a8:6f:4c:ab:11:3c:c4:17:e5:93:6c:59:dc:dd:f4:61:
d3:d9:76:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:36 2026 by rpki-client