Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145486.roa
File: AS145486.roa (raw, json)
Hash identifier: KHYS0TH5oudpg1zxxigkUqIhJWGC5MOC9k143BDVY+s=
Subject key identifier: 3C:DC:C6:7D:1A:D4:28:AB:E8:03:08:C1:07:B9:A6:FA:F7:94:0C:61
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 498A1790B9D249B9E60EB58ED064781FFFCA68B0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145486.roa
Signing time: Tue 26 May 2026 01:13:32 +0000
ROA not before: Tue 26 May 2026 01:08:32 +0000
ROA not after: Tue 25 May 2027 01:13:32 +0000
asID: 145486
IP address blocks: 240a:ab14::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:8a:17:90:b9:d2:49:b9:e6:0e:b5:8e:d0:64:78:1f:ff:ca:68:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:32 2026 GMT
Not After : May 25 01:13:32 2027 GMT
Subject: CN=3CDCC67D1AD428ABE80308C107B9A6FAF7940C61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1c:3c:f7:dc:44:c3:e0:f4:4f:a1:26:2c:b7:
98:d7:85:70:eb:c7:85:d0:e2:db:fb:bf:4a:a9:95:
77:fc:f0:8b:a7:2e:b8:ac:2c:23:ae:6a:0b:9b:1b:
72:77:03:7d:e5:55:44:d0:3e:ce:c1:1c:3b:cb:4b:
47:4b:18:f5:55:d5:7c:a6:6b:41:50:98:20:c1:53:
5e:cb:70:df:eb:e4:78:d7:6b:53:ae:6d:16:0e:37:
1a:b7:52:12:ff:25:a0:02:8c:97:62:4a:ea:34:8d:
17:c8:3d:62:0b:39:cd:26:79:a9:29:e4:4c:7b:a0:
20:06:7d:fe:de:b7:79:5e:b8:bd:90:da:9f:27:6e:
d7:df:f6:98:b6:6a:65:6e:aa:23:04:ad:b8:82:8e:
d7:9e:16:b7:b6:1c:35:4a:6f:d3:07:4e:f6:fc:e1:
90:36:c1:cc:30:1f:e8:ab:dd:a3:f6:fd:7c:b5:d4:
0e:76:2f:60:0d:98:29:27:94:22:9d:9a:e1:7f:da:
f3:7f:bb:66:54:11:ed:c6:8f:c7:3f:78:17:98:08:
6a:dc:17:0c:99:c4:9c:80:8c:a7:79:bf:2e:4b:6a:
c9:8b:18:83:6f:3d:9c:86:ac:e6:89:36:1a:15:8a:
df:77:39:81:8b:a8:ea:a3:32:4a:78:f4:8f:70:15:
10:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DC:C6:7D:1A:D4:28:AB:E8:03:08:C1:07:B9:A6:FA:F7:94:0C:61
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145486.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab14::/32
Signature Algorithm: sha256WithRSAEncryption
a2:87:0c:77:20:c2:5b:34:06:c1:b9:47:33:f9:9f:a0:65:36:
42:2b:42:cb:d5:96:0d:97:f3:aa:f5:86:8d:3c:93:50:3f:1e:
ca:e0:e2:7b:57:44:18:d6:7c:59:d9:5e:db:8a:05:74:ac:35:
47:a2:99:df:a9:c6:31:eb:12:77:c9:86:ec:0b:5d:3e:4a:6d:
e0:29:d7:ca:54:e4:75:ba:cd:6d:c3:05:c7:f9:00:d6:24:cf:
46:7d:c1:05:65:35:c2:96:6b:79:26:5c:3b:20:88:18:8f:f6:
e3:73:77:21:d4:c9:f6:f3:f6:70:19:79:35:1c:b3:72:c9:fe:
97:4c:e1:c7:a1:d1:c3:45:18:0f:95:02:fd:d4:0c:97:cf:a0:
d3:eb:da:b7:9b:f2:e4:cd:4b:95:ce:a3:dc:8e:75:46:14:53:
bb:28:8e:d1:f1:4a:bd:50:85:76:7e:e0:34:1f:44:64:fa:6a:
1a:c4:cc:63:7b:e4:72:93:90:5e:93:e3:49:7f:3c:b3:5c:dd:
12:b6:8e:36:18:d4:bf:18:03:65:c7:4f:b2:28:4c:75:50:c1:
6b:75:23:f5:3d:f5:87:ff:a2:d8:10:b5:31:6b:11:ab:1a:28:
23:37:59:86:2b:25:a8:8d:0f:e2:d3:47:51:65:75:f7:ba:1e:
9a:7d:b6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:56 2026 by rpki-client