Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145477.roa
File: AS145477.roa (raw, json)
Hash identifier: I67SglTedLm80goRuMfWJj5j2gU3EHuGUQnATd5HLX4=
Subject key identifier: 70:9C:79:A6:36:1B:ED:E4:70:00:E8:CB:41:D4:B0:F1:26:B0:33:CD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 29498DE816981A80E1C68A8644FEBB5CB38B9217
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145477.roa
Signing time: Fri 22 May 2026 07:41:03 +0000
ROA not before: Fri 22 May 2026 07:36:03 +0000
ROA not after: Fri 21 May 2027 07:41:03 +0000
asID: 145477
IP address blocks: 240a:ab0b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:49:8d:e8:16:98:1a:80:e1:c6:8a:86:44:fe:bb:5c:b3:8b:92:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:03 2026 GMT
Not After : May 21 07:41:03 2027 GMT
Subject: CN=709C79A6361BEDE47000E8CB41D4B0F126B033CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9f:24:5a:5b:7c:9f:5b:49:6f:70:25:c5:d7:
bf:68:aa:6c:4a:58:aa:8e:b5:18:28:e1:d3:b7:ba:
50:c7:76:59:a0:b2:3a:05:df:a4:0a:c4:38:d4:e0:
0f:48:32:69:52:53:d5:f1:04:bd:45:09:9d:01:81:
f2:03:d0:53:c4:93:c7:4e:c4:b4:d1:d8:ac:38:50:
b8:ae:14:90:a1:a5:bf:f4:40:6c:c8:39:a8:74:68:
b5:be:98:55:31:16:dc:6f:f3:52:91:f1:ad:45:fa:
a2:06:ad:95:2b:a6:fe:de:c5:33:17:4d:66:d0:8d:
eb:78:19:ec:13:84:e1:1b:c8:00:bf:61:17:3c:73:
85:61:a2:a8:79:88:69:fc:a9:c0:42:24:5a:2a:15:
03:4c:71:fa:1b:89:c9:c9:08:7c:05:16:03:20:a3:
7c:b2:03:19:a5:17:52:c3:a3:16:72:b9:0d:fc:f2:
f6:1b:90:ac:44:2f:5e:72:17:c9:5e:27:7f:32:9f:
15:83:3e:04:65:97:0e:e2:95:29:71:65:9e:ac:54:
f8:14:1b:b4:1a:4a:7d:2d:2f:b9:a3:6d:54:e0:1f:
21:a8:6b:3d:fc:c5:3a:b2:ad:e9:88:24:1b:b1:50:
44:1e:ae:ae:85:e1:79:e5:42:02:46:2c:49:e7:47:
77:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9C:79:A6:36:1B:ED:E4:70:00:E8:CB:41:D4:B0:F1:26:B0:33:CD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145477.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab0b::/32
Signature Algorithm: sha256WithRSAEncryption
91:1d:c7:79:1a:1b:e2:f1:cd:1e:7d:58:28:12:80:2b:df:b3:
47:99:9d:1c:5d:77:c2:05:1b:f4:cf:95:66:21:20:03:95:23:
3f:dd:50:5d:83:77:20:97:2e:32:5b:7c:6b:eb:de:61:67:bb:
5a:73:cc:43:2c:12:bd:ba:ba:4f:85:08:bc:2d:dc:63:42:9e:
09:fb:13:71:3f:cf:3c:72:39:47:52:58:4a:b2:19:41:22:25:
58:56:6c:db:cf:5a:de:47:2f:64:82:e9:84:79:47:43:c2:2c:
73:a2:e1:81:2d:f1:0a:c3:85:0b:b7:5e:04:09:36:40:66:c1:
20:07:21:7e:e2:46:87:7b:30:eb:5d:37:55:ec:de:25:84:0d:
48:05:9f:b5:d5:d2:e5:0e:0d:67:aa:63:d5:60:a9:04:da:cd:
60:f4:92:3e:be:52:69:5c:e2:9c:5a:42:71:cb:88:9f:87:d0:
41:ba:bc:62:05:43:3b:c7:06:b6:0d:5f:19:db:3d:14:23:c0:
46:98:df:76:fa:1a:e2:b1:85:7a:30:01:e4:2c:c2:53:52:10:
d4:87:5e:6b:c5:7c:f2:1b:61:29:84:43:09:35:d6:18:c4:f5:
ae:9f:f7:2e:57:09:44:a7:b4:f3:0d:ff:0a:f5:d2:00:06:d8:
41:e7:41:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:49 2026 by rpki-client