Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145556.roa
File: AS145556.roa (raw, json)
Hash identifier: Xk1ZBvL78/YzcwS94s/AmJi+OZQOcK9jUa30qj+amnc=
Subject key identifier: 06:10:FE:29:2F:D0:C8:71:A9:E7:F7:CA:3E:36:B2:BC:FD:F7:CB:81
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 56D1A16B1321B7CB5002F19E63EEE53275318EFA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145556.roa
Signing time: Fri 22 May 2026 07:24:39 +0000
ROA not before: Fri 22 May 2026 07:19:39 +0000
ROA not after: Fri 21 May 2027 07:24:39 +0000
asID: 145556
IP address blocks: 240a:ab5a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:d1:a1:6b:13:21:b7:cb:50:02:f1:9e:63:ee:e5:32:75:31:8e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:39 2026 GMT
Not After : May 21 07:24:39 2027 GMT
Subject: CN=0610FE292FD0C871A9E7F7CA3E36B2BCFDF7CB81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:29:27:f1:d4:63:ce:fb:3c:e6:28:b5:25:40:
4f:1f:92:57:78:a1:02:5b:f0:3b:75:29:68:24:10:
bc:d4:33:e2:52:3c:be:97:18:f9:b7:fd:da:fb:f4:
79:47:0d:ea:2d:b4:7d:24:54:0a:38:1e:1e:8e:73:
9c:13:50:20:02:80:e9:12:b8:ca:36:87:e3:8b:b7:
22:00:70:43:3e:2d:df:fa:9a:bd:20:a7:41:fe:24:
4a:78:61:d1:4d:4d:a4:88:75:58:37:b0:1c:45:c1:
ae:4f:fc:e5:aa:df:b6:47:a8:d4:f4:38:fb:bc:78:
6b:3b:1d:07:a8:6c:62:e2:43:fa:c8:23:80:9b:2b:
12:de:59:ea:c5:b5:1c:83:74:1b:2f:b8:d3:78:b0:
9a:88:7c:80:70:1a:ca:cd:a9:1b:ff:2e:fe:dd:ae:
3e:b4:14:b4:f1:36:25:da:2c:d8:49:f7:63:de:66:
ad:61:46:22:4c:95:11:da:8c:52:31:69:f8:30:cc:
e5:a6:2d:eb:95:1c:84:23:ac:69:50:f8:86:d2:25:
99:5e:72:93:ff:b2:b8:84:6d:83:07:15:50:9b:21:
0d:f2:ae:75:d7:ef:1c:b5:15:3b:40:3d:c3:b9:da:
17:0d:88:aa:82:e3:80:2b:a9:79:08:bb:2f:c5:ba:
36:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:10:FE:29:2F:D0:C8:71:A9:E7:F7:CA:3E:36:B2:BC:FD:F7:CB:81
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145556.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab5a::/32
Signature Algorithm: sha256WithRSAEncryption
9e:70:11:c2:16:18:77:77:4f:21:83:f7:0a:ae:10:7c:ca:b8:
d5:ac:f0:1b:7d:60:5e:b7:44:60:90:38:b2:6f:a7:03:f0:9e:
26:0c:7f:d0:64:0f:3e:3c:9e:d2:38:46:41:ef:f3:8e:ab:fa:
19:4a:b4:0f:53:25:04:e6:db:25:36:d6:a5:3f:48:8e:8a:8a:
79:27:0e:a3:3a:69:49:81:d4:0c:14:a0:5f:8c:81:34:b8:a0:
c6:c9:22:50:ca:3d:0c:7d:8a:a2:bb:5c:11:36:24:bd:67:9c:
bd:19:c4:f8:49:99:a1:e4:bf:5a:83:96:af:0f:bb:77:fd:c8:
b4:39:b8:bd:32:e8:08:2d:45:be:e4:1b:8d:25:80:63:57:fd:
7e:4d:66:17:de:ca:29:28:62:49:a8:3a:8c:53:04:c5:1c:74:
60:3e:c8:46:7f:fd:a4:fd:a4:25:24:7d:c6:49:6b:c1:cf:61:
ee:7d:a2:b2:9e:63:14:2d:13:99:b6:6c:df:07:84:d5:4b:67:
52:18:4f:2f:de:3c:b1:98:44:2d:4e:ba:78:94:5b:50:d5:94:
25:4a:fc:7e:e8:cd:7b:e4:12:58:eb:ee:83:1b:c7:75:c1:6e:
7b:45:ce:fb:00:37:58:ef:55:d4:14:dd:98:77:27:94:88:8a:
16:16:45:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:08 2026 by rpki-client