Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145506.roa
File: AS145506.roa (raw, json)
Hash identifier: Q2+Pib8aJLBhP2yD/MmUcUZll8uCZsB2Mx7wzKxQxco=
Subject key identifier: 67:24:97:F0:DF:D3:14:31:98:87:54:92:DF:C0:BF:A3:E6:C4:B3:20
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 592AFCDB7D81B361B6E0ED20B1BD4C439F69E38C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145506.roa
Signing time: Fri 22 May 2026 06:05:38 +0000
ROA not before: Fri 22 May 2026 06:00:38 +0000
ROA not after: Fri 21 May 2027 06:05:38 +0000
asID: 145506
IP address blocks: 240a:ab28::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:2a:fc:db:7d:81:b3:61:b6:e0:ed:20:b1:bd:4c:43:9f:69:e3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:38 2026 GMT
Not After : May 21 06:05:38 2027 GMT
Subject: CN=672497F0DFD3143198875492DFC0BFA3E6C4B320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ad:f9:eb:7d:c9:00:65:da:a1:42:35:89:64:
8d:f3:74:52:f9:f8:9c:30:dc:0b:f1:30:8a:66:9e:
6a:60:24:5f:4a:94:9a:eb:2c:70:af:3f:67:64:53:
19:b7:99:53:25:91:c5:be:cf:a3:26:9f:f1:3f:b0:
97:31:a8:f8:1e:1c:59:7d:25:d8:e5:24:d9:35:86:
98:69:8e:40:f1:55:eb:ac:36:aa:55:fb:b2:77:11:
70:16:c6:7a:c6:1e:fc:79:7e:b0:06:f3:83:df:c3:
a8:14:03:8d:c1:6e:49:a3:fd:80:6f:e1:3a:97:b0:
3b:bb:6a:72:a6:84:3d:2d:5f:a0:8d:4e:d4:fc:9a:
93:92:86:bd:be:aa:68:4c:a3:33:fa:f4:d8:d0:29:
72:de:d8:40:28:e0:6a:3c:46:ac:fa:8a:e7:93:89:
22:94:7e:0c:d8:cd:aa:86:0e:27:77:f7:01:65:36:
b8:b0:c5:b3:4f:96:cc:da:c5:de:71:14:c0:d2:11:
1e:6e:ff:fa:5a:d0:10:9f:57:69:83:c1:74:37:f1:
ed:a1:c9:cd:d0:4a:71:a3:48:58:98:5c:1f:49:1e:
ca:15:ff:51:68:3c:6f:ba:25:db:40:fa:e4:3b:8d:
5a:cc:be:49:43:dc:76:bf:19:aa:00:23:8c:50:f8:
87:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:24:97:F0:DF:D3:14:31:98:87:54:92:DF:C0:BF:A3:E6:C4:B3:20
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145506.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab28::/32
Signature Algorithm: sha256WithRSAEncryption
b2:bc:70:5e:9e:89:46:b6:3e:41:82:ea:4a:25:8a:09:ac:ee:
fe:09:94:06:03:10:0c:f3:8b:02:fd:f8:72:43:74:56:2d:dd:
16:64:fd:7e:80:af:dc:e7:49:4b:92:fc:d6:ba:0b:ad:0a:0a:
3a:ea:6a:ad:f3:55:0d:7f:d3:93:6c:c2:4f:38:d9:a4:8a:63:
c8:8a:1c:24:ea:b9:85:1c:19:99:bb:da:db:81:66:ce:fc:52:
5c:b5:c0:f5:00:44:f5:f8:72:be:7f:31:17:24:16:12:f1:ab:
4a:49:da:e0:21:a4:e3:d7:e1:ca:05:a0:33:5f:c0:f0:c7:d9:
97:a5:6b:38:39:26:35:b3:cc:d2:16:18:99:10:1b:1e:e5:df:
fc:f8:88:08:8c:34:2f:99:c8:78:ee:1b:c9:0e:6e:bf:a2:52:
b4:eb:aa:ea:d9:5b:e8:48:05:2f:5c:ab:8e:27:62:16:47:70:
26:78:50:9f:40:22:52:0b:1d:2f:7b:5d:ab:e1:91:0a:57:bf:
47:df:c9:e6:27:b2:1f:18:a0:ad:51:35:ec:01:06:9e:e4:ba:
e7:df:7b:77:96:76:35:f4:8e:fc:53:6a:6a:f3:b7:60:00:6f:
a3:76:60:a5:a9:d1:66:a3:46:09:e5:ea:81:b4:3d:fa:e4:a3:
c3:e5:b3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:48 2026 by rpki-client