Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145552.roa
File: AS145552.roa (raw, json)
Hash identifier: yiZ1/GLSTdIXwj57urlkUOiMXvE+998kr8EtS/U5FWM=
Subject key identifier: 5C:24:13:52:19:DE:F1:3F:13:A0:A9:AB:42:24:BE:EC:8B:59:E7:8B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 73BB107186266D16232CFD5B93FA19C0B36974FC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145552.roa
Signing time: Tue 26 May 2026 02:35:17 +0000
ROA not before: Tue 26 May 2026 02:30:17 +0000
ROA not after: Tue 25 May 2027 02:35:17 +0000
asID: 145552
IP address blocks: 240a:ab56::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:bb:10:71:86:26:6d:16:23:2c:fd:5b:93:fa:19:c0:b3:69:74:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:17 2026 GMT
Not After : May 25 02:35:17 2027 GMT
Subject: CN=5C24135219DEF13F13A0A9AB4224BEEC8B59E78B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:76:62:69:56:fe:9c:75:3f:58:13:04:48:af:
cd:89:79:ac:e4:2d:63:23:1d:73:85:99:aa:5e:e7:
c1:5c:a2:b3:2d:28:b2:21:86:a8:df:4b:07:8f:51:
44:f0:8e:92:ff:15:83:9b:e0:92:57:e4:aa:e5:2c:
ca:31:dd:c4:33:e9:ad:e9:c3:c8:8c:9a:51:80:64:
76:de:6e:0b:8b:f3:6f:8b:76:35:fb:70:3d:d8:7c:
99:2b:b3:0b:43:30:3e:a2:8d:f9:23:76:c1:0d:fa:
f6:57:eb:8c:20:84:7e:6d:c7:69:0c:7c:b4:58:fb:
4a:f1:43:3f:b2:b5:75:b6:af:7d:7b:b4:e2:b8:6a:
6a:3f:3d:17:8e:d1:8b:9e:ad:64:08:35:b4:1c:7a:
ae:e7:a9:6a:4a:ce:cf:30:12:f2:c4:b5:05:66:90:
51:c2:54:70:c3:74:7c:ec:03:eb:71:d8:b3:ea:d9:
e0:29:09:0e:f0:6f:6f:c7:e9:07:ec:af:98:28:ba:
52:c1:d9:1d:6c:77:7b:68:ce:ba:ca:94:0d:40:64:
96:43:3c:c6:0c:6d:99:be:05:b2:b1:35:45:2f:31:
0a:c9:b4:76:86:c3:6a:fb:dc:c5:9c:34:a0:c7:90:
2c:34:72:2a:52:85:e6:d1:25:fc:98:2e:2d:49:4b:
5e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:24:13:52:19:DE:F1:3F:13:A0:A9:AB:42:24:BE:EC:8B:59:E7:8B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145552.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab56::/32
Signature Algorithm: sha256WithRSAEncryption
24:c2:50:46:64:b6:f8:77:31:af:0d:26:fb:55:ac:9e:19:82:
94:8c:a9:73:f1:f1:42:50:dc:b8:9a:61:74:ba:5a:b7:5d:cd:
2a:ea:3e:bb:04:67:d7:58:78:3e:39:52:96:0d:5b:f1:2d:d3:
88:b4:35:67:38:26:2f:1f:c0:e7:8c:c0:0c:5d:22:c2:c7:2a:
50:e7:75:4e:81:e1:d6:e4:fd:15:af:76:36:a1:18:6c:b0:21:
0a:5f:84:98:77:e5:63:49:13:c9:1a:4a:22:25:00:bb:35:39:
02:20:b9:74:0c:f7:2e:22:6e:a3:b0:ce:37:57:8e:a5:57:36:
43:fc:ff:6b:df:1c:86:3e:30:c0:52:92:2b:d5:ef:7e:5d:e3:
a0:3b:20:7f:84:05:e8:24:b6:93:de:b4:2d:a8:3c:b4:d1:40:
d4:20:9b:7e:fa:5c:7c:bf:a1:14:18:9a:70:fc:66:e8:01:96:
23:a5:a2:e3:62:47:de:92:86:b6:16:44:39:e1:2d:10:bf:19:
19:ae:14:22:cd:39:de:f2:92:9d:ce:ca:1e:38:60:95:dc:f4:
c4:46:86:49:2f:69:f6:18:5c:f2:f7:7a:33:6d:09:7c:89:b7:
de:5f:c5:01:70:c4:f7:09:7d:f3:54:eb:9b:52:ea:23:eb:ba:
f4:49:19:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:16 2026 by rpki-client