Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145521.roa
File: AS145521.roa (raw, json)
Hash identifier: j4uK3aktqkvr952XqHs0n6H6KWr/IXDXRvJoIc83LBI=
Subject key identifier: 4D:A6:3D:A9:DB:38:FA:29:61:26:37:94:3C:9D:80:2E:75:53:0C:A0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 709E36DD9C6B76AE6A00026E59E263B63C836F3E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145521.roa
Signing time: Tue 26 May 2026 01:12:58 +0000
ROA not before: Tue 26 May 2026 01:07:58 +0000
ROA not after: Tue 25 May 2027 01:12:58 +0000
asID: 145521
IP address blocks: 240a:ab37::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:9e:36:dd:9c:6b:76:ae:6a:00:02:6e:59:e2:63:b6:3c:83:6f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:07:58 2026 GMT
Not After : May 25 01:12:58 2027 GMT
Subject: CN=4DA63DA9DB38FA29612637943C9D802E75530CA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e5:7f:ab:3e:6c:3f:82:d0:37:27:2f:a9:1b:
8d:69:c9:39:c0:20:1e:de:a9:d7:ce:df:96:4d:75:
e4:21:b2:17:04:fd:6a:42:96:33:e4:8d:76:b4:fc:
5a:5b:ac:78:98:cd:55:a0:23:7d:54:ff:29:c9:6e:
40:2e:43:bc:75:53:56:16:89:22:fb:fb:bf:85:75:
68:56:17:55:d8:11:33:85:89:cf:96:29:e7:78:d3:
14:43:70:01:d7:a9:7d:f0:8e:d1:0a:b8:f4:00:15:
f4:75:2d:f6:a9:0c:70:c0:5b:86:2f:91:88:a3:ea:
cb:6a:53:57:84:30:18:83:9e:23:39:29:78:be:f8:
74:73:b5:72:fa:17:51:b0:00:fe:63:00:b0:64:08:
d5:5a:ba:df:8c:44:96:fe:6c:04:95:3d:cd:4c:36:
01:4b:4f:1f:31:8c:92:c1:13:8c:ca:07:50:67:d0:
71:8a:b0:2b:6d:37:04:6e:31:ec:13:cb:ae:dd:93:
62:4d:3d:f7:46:41:de:67:63:b8:f2:d0:ca:6a:1a:
5c:ae:61:ac:99:c5:b9:64:9e:d6:f6:f2:1f:28:0a:
8b:7c:e5:b5:49:67:a8:e7:60:1a:29:04:90:c2:25:
cc:8f:8e:51:2a:4c:2e:03:87:e5:be:e4:6b:d1:97:
a0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A6:3D:A9:DB:38:FA:29:61:26:37:94:3C:9D:80:2E:75:53:0C:A0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145521.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab37::/32
Signature Algorithm: sha256WithRSAEncryption
8b:4a:aa:a7:4c:a1:ab:47:c4:18:a2:84:3e:eb:ce:b9:13:b7:
a7:43:ca:b0:6a:c5:55:91:94:65:d9:4e:f0:e7:b3:24:ac:fe:
bb:02:e7:cd:df:64:5d:0e:24:5a:65:a7:81:73:97:9c:c3:db:
2f:b2:26:a0:b3:bf:b1:4c:80:48:34:d3:80:f2:f2:a7:69:bb:
d8:1a:83:6d:7f:c4:f9:6f:4d:b3:65:8f:46:a6:25:f8:6e:3d:
b5:86:d2:cd:dc:9e:65:23:50:dd:ca:6a:70:9e:f2:3c:63:7a:
28:20:c3:87:70:13:49:54:b3:67:40:67:b2:a1:cf:d4:97:fd:
86:bf:a7:d5:7c:49:a7:ad:b1:1a:39:92:70:d0:27:57:d5:df:
c9:90:84:e6:cf:a8:85:86:1d:ae:d4:d2:dd:0f:9a:15:dc:80:
bd:8e:08:65:ab:3f:64:63:31:0a:65:11:ee:5e:fc:c9:01:29:
51:f9:1e:6d:c4:a2:52:71:df:21:70:c9:4f:55:e2:66:73:4e:
c8:6a:56:84:a6:bd:24:15:63:96:92:55:23:c7:40:aa:e4:12:
d0:dc:ec:b5:4a:57:fe:01:70:2e:68:50:0c:5a:80:08:18:c9:
be:c1:7d:5e:0b:e7:77:d7:54:73:1c:0b:0a:6b:68:d2:c1:14:
a4:f7:11:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:57 2026 by rpki-client