Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145545.roa
File: AS145545.roa (raw, json)
Hash identifier: BtwwHJEocIoibkcfqT72w7WQRQ9voMm8X8emHlfF5Pc=
Subject key identifier: 6A:9D:98:9B:9C:71:6C:FD:9A:CD:46:7B:A9:24:C3:34:77:0F:0D:2B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 20764759AC58EDDEF17292D9D6C1EDE684891263
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145545.roa
Signing time: Mon 25 May 2026 03:19:51 +0000
ROA not before: Mon 25 May 2026 03:14:51 +0000
ROA not after: Mon 24 May 2027 03:19:51 +0000
asID: 145545
IP address blocks: 240a:ab4f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:76:47:59:ac:58:ed:de:f1:72:92:d9:d6:c1:ed:e6:84:89:12:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:51 2026 GMT
Not After : May 24 03:19:51 2027 GMT
Subject: CN=6A9D989B9C716CFD9ACD467BA924C334770F0D2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:77:c7:13:28:49:74:2f:b9:c1:78:98:c9:d6:
ba:47:76:ef:6e:8b:9f:64:22:76:da:c9:d1:87:6c:
d5:10:c0:28:f0:5b:29:a4:ba:c4:ed:81:01:b0:01:
07:47:26:3a:80:dc:72:60:3c:5e:0d:56:82:a9:e7:
4c:51:2f:b9:99:f5:8e:99:0e:65:14:0c:24:43:97:
d9:45:80:0a:b4:b8:f9:de:d1:69:e6:5a:a2:39:de:
95:2f:79:0a:eb:46:06:b0:cf:88:8c:ce:84:dd:a5:
c0:d7:6f:01:d3:92:15:3a:ea:18:bf:96:a5:9e:d0:
3b:54:a1:e6:fd:5b:34:5c:96:6d:ba:d6:37:36:ff:
41:95:d5:b7:a9:72:9e:44:48:cc:dd:ab:fc:5e:43:
a6:89:31:83:16:17:41:a2:05:ad:ec:22:63:b3:f2:
32:80:0c:18:71:88:75:0e:db:67:ab:30:cc:ba:f8:
c9:52:54:9a:11:cd:fe:66:6f:fd:aa:27:c7:b6:c2:
f5:62:70:65:26:12:02:91:a3:0a:b5:a7:d5:b7:47:
93:3f:4a:d9:6f:1c:4f:a2:70:67:98:b6:4e:d0:a9:
3e:74:6d:a0:85:e8:fe:b4:13:5f:62:dc:0e:3d:4b:
90:22:72:9d:8d:c8:14:6d:37:a9:c6:e3:88:f6:27:
7a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9D:98:9B:9C:71:6C:FD:9A:CD:46:7B:A9:24:C3:34:77:0F:0D:2B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145545.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab4f::/32
Signature Algorithm: sha256WithRSAEncryption
9f:e4:7b:e0:24:be:31:86:df:f6:3e:6a:8f:88:e5:b7:d0:d6:
3b:fc:1d:79:c1:28:f0:5f:6d:e5:c6:6b:a5:f2:6c:6d:81:ce:
ac:ec:92:3f:3d:35:1e:e6:a4:91:7a:2d:06:6b:7e:32:e5:de:
6d:75:cf:3d:e6:1d:17:fe:3e:54:cb:2d:47:c9:e7:9a:cf:57:
25:0f:f1:0c:5a:51:b5:f1:7a:40:bb:5c:f5:15:bc:52:6c:4c:
46:a7:72:35:be:11:80:f8:0f:e2:be:a9:a4:1d:e5:71:1c:eb:
84:28:41:f6:55:cf:54:92:97:11:48:f5:c2:46:20:09:ea:82:
fb:dc:1a:3e:59:b4:f8:2c:28:2f:25:46:ee:79:14:46:0f:34:
15:a5:54:4a:27:ab:45:cb:56:4a:7b:2a:20:8e:5a:2e:53:f7:
55:2c:6d:3a:be:ba:08:a1:8d:db:29:95:84:3d:6b:11:7a:33:
85:77:30:16:58:9b:10:bb:af:51:58:a7:15:90:ee:8c:4e:df:
ea:c1:37:ec:8f:bc:be:77:9d:01:dc:0c:30:12:24:d9:c3:08:
1a:9f:b3:8a:dc:2e:0b:d2:70:5f:03:89:23:e9:78:a6:ef:09:
dc:2d:d8:a4:d1:9c:2e:51:21:27:f8:39:9e:57:a3:d2:7a:73:
f4:49:2a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:17 2026 by rpki-client