Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145499.roa
File: AS145499.roa (raw, json)
Hash identifier: 0vvUtX9Ouf6NUaHYRb9teiB0/Mcbb0KXVz9i11DEjI8=
Subject key identifier: 2A:1A:CA:88:17:1B:68:30:37:5F:87:90:13:DD:59:C7:A4:6F:A5:6A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 218C2A334E41E1DE31AC2299BEA64279426DA3D1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145499.roa
Signing time: Mon 25 May 2026 03:19:17 +0000
ROA not before: Mon 25 May 2026 03:14:17 +0000
ROA not after: Mon 24 May 2027 03:19:17 +0000
asID: 145499
IP address blocks: 240a:ab21::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:8c:2a:33:4e:41:e1:de:31:ac:22:99:be:a6:42:79:42:6d:a3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:17 2026 GMT
Not After : May 24 03:19:17 2027 GMT
Subject: CN=2A1ACA88171B6830375F879013DD59C7A46FA56A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a0:06:6b:c1:bb:cb:99:48:70:39:b5:94:d9:
19:61:6f:4a:ad:8a:d3:1c:6b:d4:7e:57:e0:ba:87:
2e:30:d0:90:75:a5:24:8a:8a:4e:1e:ca:72:93:fd:
70:54:83:c5:bf:64:a3:10:fe:68:ad:64:93:ca:e4:
6f:04:ef:00:38:6d:21:dd:16:33:74:13:ac:e3:f4:
39:85:0e:0e:db:eb:18:2d:1b:ad:01:b7:98:d6:fe:
90:9f:12:56:57:c6:c6:9c:31:eb:47:79:cd:25:24:
11:f0:be:a2:dc:8a:cc:3f:69:a7:46:21:23:52:9a:
7b:49:91:85:9c:b3:8c:07:40:77:9e:76:d6:58:af:
e3:6c:92:31:ec:25:e4:42:d9:a5:fa:72:4a:d1:28:
d9:50:ee:4a:03:61:fe:9c:d3:28:c9:dd:aa:0e:37:
56:ca:ae:6e:c3:a8:3d:60:0d:ce:54:10:39:7e:58:
8c:ae:67:cf:1b:d5:67:dd:91:6d:4d:83:35:2f:92:
a8:52:9a:d5:09:7f:6e:65:7f:ff:11:13:60:9c:0d:
51:71:cf:08:a8:71:7e:67:6f:21:8e:05:47:8e:ea:
18:06:c9:a3:48:0f:e0:d0:4f:f6:0d:8a:4d:6f:0d:
0e:9a:6b:10:03:45:74:2b:67:2f:98:e3:4a:df:60:
cb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1A:CA:88:17:1B:68:30:37:5F:87:90:13:DD:59:C7:A4:6F:A5:6A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145499.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab21::/32
Signature Algorithm: sha256WithRSAEncryption
4e:ab:aa:94:61:38:2a:23:fa:4e:75:cd:06:d2:1a:34:bf:60:
3e:fd:b2:96:8c:6f:d6:83:05:f1:ae:ab:53:83:8b:12:d9:ac:
6b:16:57:50:17:17:ae:cc:47:e4:4a:b1:cb:95:d8:68:ba:16:
54:61:3b:51:f3:8a:8f:97:52:84:64:0e:59:3b:b8:0c:3d:34:
39:7a:3f:31:58:46:cb:00:d0:87:f6:04:04:b3:b2:ab:92:fe:
35:17:33:21:b6:c7:4e:c9:25:ef:6f:2b:f0:f5:8d:c2:b2:28:
dc:65:c8:6e:22:15:cc:a1:ac:be:16:03:79:d7:0e:98:11:4c:
da:6b:e0:ee:11:d2:08:63:b1:ab:65:7f:e2:b0:dd:73:de:d8:
e2:9e:17:5d:5a:9f:21:a2:73:53:39:27:09:ae:4c:44:3b:d0:
e6:ba:ca:08:8f:25:48:6f:fe:87:d0:58:e6:88:89:85:56:f4:
83:cf:a3:93:48:cc:08:ca:d0:b8:ae:b5:89:42:78:3a:6b:fd:
a3:36:6c:f6:7e:3a:77:20:b9:17:3f:83:06:b2:24:ab:d0:6a:
ff:14:b9:24:81:12:9c:58:ab:e1:4e:3c:8b:36:40:2b:c4:8d:
1d:c5:09:93:7b:98:16:91:7c:fb:cb:9a:84:98:4b:ad:3c:2d:
1a:11:23:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:47 2026 by rpki-client