Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145553.roa
File: AS145553.roa (raw, json)
Hash identifier: VQ2HsfCpaHIFCgH9JJ1m8q1XdaKP9XI6WW3/sJQHBHo=
Subject key identifier: 19:2A:F5:EA:73:33:EF:E8:3B:10:54:B1:0D:26:58:69:9E:78:D4:83
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 105A47EAA675B253AC7A4C578162D3B27A489CCE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145553.roa
Signing time: Tue 26 May 2026 03:16:50 +0000
ROA not before: Tue 26 May 2026 03:11:50 +0000
ROA not after: Tue 25 May 2027 03:16:50 +0000
asID: 145553
IP address blocks: 240a:ab57::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:5a:47:ea:a6:75:b2:53:ac:7a:4c:57:81:62:d3:b2:7a:48:9c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:50 2026 GMT
Not After : May 25 03:16:50 2027 GMT
Subject: CN=192AF5EA7333EFE83B1054B10D2658699E78D483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:74:84:57:b0:0a:77:df:ba:91:6c:a9:4d:
62:69:f4:b2:94:36:71:d7:08:da:aa:68:0a:ec:e3:
c6:1c:4b:b6:cd:e5:8c:9e:c6:b3:3e:d4:01:77:67:
a2:f2:62:98:2a:82:84:4d:af:b7:12:0d:41:0f:24:
82:94:55:d5:b0:58:41:56:d9:08:44:35:7e:fc:40:
be:62:6e:97:53:79:f7:51:ee:3c:0a:b6:75:0d:3d:
01:d0:70:c2:96:99:5e:d6:20:1e:09:f7:40:38:39:
93:ad:14:2b:06:73:bd:1b:ee:0c:26:ac:db:e7:d5:
b3:43:f6:a6:04:e1:3d:5d:8e:94:89:18:d0:ad:1c:
7a:20:b5:8f:73:c3:0f:e8:93:2d:a8:0e:19:25:13:
5e:0f:02:ad:da:3f:69:bc:eb:a5:2f:da:0a:ac:fe:
05:51:fa:3d:c6:ad:e2:3c:1b:20:ea:1d:e5:41:36:
86:f4:c5:8d:e8:1c:c1:89:95:f3:75:d1:67:07:b5:
d3:77:91:90:1b:2d:a9:77:cb:25:1e:17:77:33:35:
a8:6b:54:eb:99:e4:46:23:54:fb:39:63:11:05:6e:
00:65:b5:ac:c3:da:a6:14:bb:53:e2:37:0a:3a:5d:
ef:69:b2:5c:cf:74:8d:4c:21:90:42:be:f2:96:2e:
4d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2A:F5:EA:73:33:EF:E8:3B:10:54:B1:0D:26:58:69:9E:78:D4:83
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145553.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab57::/32
Signature Algorithm: sha256WithRSAEncryption
3a:4d:25:5f:df:8d:fa:6a:d9:e3:ee:2f:f7:21:ee:19:e8:dd:
83:5e:14:f1:6b:3c:6d:cc:82:fd:dc:d8:1e:a0:86:24:8f:75:
b3:7c:6f:10:20:ea:24:26:d9:b4:0f:56:09:fe:86:15:f4:6c:
e5:9b:b4:c5:cd:f0:67:1d:41:7e:7d:86:10:69:68:fc:97:80:
34:fc:50:ca:91:ab:47:e1:3f:eb:18:47:ae:1f:ba:c6:1b:c2:
db:bd:35:72:6c:1d:24:fc:87:8f:0b:dc:30:03:c5:0a:c2:0b:
f6:d2:72:1d:af:20:0a:30:db:38:27:3f:dd:92:12:67:98:48:
71:6b:5d:aa:5c:52:e1:11:c5:82:60:34:87:f6:52:13:68:8a:
a0:6e:95:0f:2b:05:06:26:8a:5b:2d:89:b4:05:0a:82:59:79:
d2:c5:5f:2a:01:04:f3:b3:aa:10:0d:32:a6:63:bf:35:67:56:
63:c4:89:4f:e9:bb:9e:d5:6c:de:26:74:15:4e:5a:11:b3:eb:
46:20:d1:94:5f:9a:42:0d:c8:3d:c2:23:90:5f:27:45:1b:23:
1c:ae:b6:f8:de:c5:95:96:7d:68:44:2d:d9:aa:58:41:0d:4c:
df:0e:e3:73:9e:c4:53:65:00:3a:bd:41:d9:90:8e:01:0e:1f:
4e:b1:87:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:37 2026 by rpki-client