Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145497.roa
File: AS145497.roa (raw, json)
Hash identifier: 39i/arxZ8zd997HO4Z1Ciq+djpdfvuQ+XWx819f8ybA=
Subject key identifier: 31:C0:7E:06:5B:CB:F4:11:C1:33:F0:84:1C:E2:8A:46:6E:A8:EA:50
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6C7BE7AC96EBEE2953BA11091AEBD21A2D41A0B3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145497.roa
Signing time: Fri 22 May 2026 07:32:15 +0000
ROA not before: Fri 22 May 2026 07:27:15 +0000
ROA not after: Fri 21 May 2027 07:32:15 +0000
asID: 145497
IP address blocks: 240a:ab1f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:7b:e7:ac:96:eb:ee:29:53:ba:11:09:1a:eb:d2:1a:2d:41:a0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:15 2026 GMT
Not After : May 21 07:32:15 2027 GMT
Subject: CN=31C07E065BCBF411C133F0841CE28A466EA8EA50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:44:33:1c:42:38:9e:65:50:d1:3a:8f:1a:3f:
1e:78:a7:da:83:75:0b:67:1e:5b:51:8a:a8:00:00:
3b:a0:87:8b:8f:83:6d:fd:96:ff:7d:69:3e:ac:4a:
7b:c0:5b:de:96:c1:bf:8c:47:dc:ec:42:5d:aa:16:
ca:de:16:0d:0c:11:a3:66:09:bf:b9:4f:ed:b6:c3:
bc:30:9f:d9:10:6e:a0:b8:5a:78:cb:2d:9e:21:b8:
69:30:15:68:c1:15:15:da:eb:45:60:4c:dc:d6:87:
b3:29:0e:d1:3d:c3:de:8d:d5:b9:56:6c:f7:0a:dc:
fa:a6:a1:4c:8c:32:12:15:4c:4d:65:7f:da:5a:ce:
b6:4e:15:3f:f6:0e:f6:58:79:c5:d1:e6:2e:96:0e:
4b:64:bc:6f:68:38:90:37:4c:0b:b0:07:84:08:71:
cc:0a:07:9c:dc:4c:21:2b:55:a2:c2:84:19:4e:0e:
cf:7f:59:93:19:b3:a5:1e:56:9d:64:97:29:dc:fd:
f4:58:ad:51:df:c0:65:b6:6c:f3:c9:7b:67:c3:67:
54:d8:24:a3:84:f8:fe:48:03:9a:89:5b:3f:12:c4:
92:bd:02:96:08:15:8e:4c:2e:cb:11:87:82:8f:63:
cd:e5:89:ad:1e:30:8c:84:83:3d:b0:7a:f0:b0:f6:
1f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C0:7E:06:5B:CB:F4:11:C1:33:F0:84:1C:E2:8A:46:6E:A8:EA:50
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145497.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab1f::/32
Signature Algorithm: sha256WithRSAEncryption
a8:50:25:49:14:1f:86:ec:de:ab:d3:23:dd:5b:9a:17:66:2c:
f5:55:18:80:51:75:02:1e:72:b1:14:77:c1:21:1e:97:8c:d4:
82:2c:98:c6:19:1b:5c:33:6f:f5:3e:7d:c2:0d:8a:71:d2:0f:
25:25:d7:c5:71:02:4e:5c:46:8b:a8:01:b8:e6:58:c5:44:58:
23:5c:db:56:1d:42:1c:1a:d6:0c:dd:2e:55:06:55:61:09:9a:
f6:b5:9d:95:18:8e:5f:72:8d:18:0e:ba:9c:00:09:98:0a:06:
61:f1:f7:d5:2d:43:ef:fe:59:54:55:55:a5:29:46:6b:ac:5a:
a4:a3:09:ec:78:30:a9:02:67:8b:50:86:2a:96:6a:55:09:60:
b0:24:74:71:67:66:a9:69:43:04:55:f2:82:d7:b3:4c:81:3d:
74:97:94:d8:23:04:02:ba:78:e2:41:09:42:c7:87:d7:3e:c1:
44:44:32:5f:5f:80:52:0e:9a:b9:2d:d9:f7:68:a2:74:8f:78:
67:87:39:b1:ec:04:bd:74:e7:22:47:21:78:e7:1e:0e:e6:e9:
72:70:1a:59:68:37:70:f0:0b:af:2f:57:70:fb:75:8a:80:5c:
13:0c:55:09:27:1a:a5:ba:2e:90:41:bb:cc:95:be:94:39:1a:
41:7f:ef:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:33 2026 by rpki-client