Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145569.roa
File: AS145569.roa (raw, json)
Hash identifier: ofSutMbOYZC6NEtWovgQ4PqphuueH6SQsLbFMKpCr5I=
Subject key identifier: 73:19:C6:C2:24:59:F1:BD:05:B0:64:0D:E2:C4:EE:F6:FA:83:3C:CA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 65093DCA0FF231C117F332205B2F87537E4FF39A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145569.roa
Signing time: Mon 25 May 2026 02:22:51 +0000
ROA not before: Mon 25 May 2026 02:17:51 +0000
ROA not after: Mon 24 May 2027 02:22:51 +0000
asID: 145569
IP address blocks: 240a:ab67::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:09:3d:ca:0f:f2:31:c1:17:f3:32:20:5b:2f:87:53:7e:4f:f3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:51 2026 GMT
Not After : May 24 02:22:51 2027 GMT
Subject: CN=7319C6C22459F1BD05B0640DE2C4EEF6FA833CCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ab:67:98:ea:ce:b9:ef:d8:76:d8:78:b7:ac:
15:28:00:3b:bf:73:d6:ba:b0:24:9e:a5:f3:0b:1a:
0b:2f:8c:22:db:5b:4f:17:d1:2f:46:da:69:50:4b:
37:5e:81:3a:70:bf:9b:26:09:4e:a5:44:49:e3:78:
ea:1d:7d:9d:3c:53:3a:76:2e:c0:e1:fe:a0:3d:9d:
f5:d0:58:6a:a0:f7:f9:50:70:c8:19:e1:a9:97:7e:
52:3d:4a:f0:17:45:60:55:cf:57:1f:56:20:b0:cd:
40:45:da:18:b3:b6:e2:f6:07:98:de:0f:97:36:5b:
26:5a:84:e4:22:04:fb:cb:4a:c0:f4:05:c3:c5:a8:
a1:69:26:56:ef:f5:38:df:a6:6b:f6:ab:fa:14:e7:
d5:b6:cf:a8:bf:1e:49:3b:20:1f:0c:76:76:30:a4:
20:49:75:03:3d:cc:d7:56:ae:2c:d0:c5:16:c9:97:
0b:50:96:f5:6c:d2:d5:fe:46:e0:76:25:9a:84:7c:
65:b5:6e:9d:db:65:85:b6:25:36:10:1a:ac:1e:fb:
ef:df:ea:bd:6b:f4:04:61:82:a9:d1:8f:26:a5:78:
40:62:bb:e7:0e:73:e0:ef:ab:a3:7f:ce:17:f4:b5:
47:e4:e6:d7:32:45:d6:29:ea:c7:a2:9f:ff:e1:87:
ec:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:19:C6:C2:24:59:F1:BD:05:B0:64:0D:E2:C4:EE:F6:FA:83:3C:CA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145569.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab67::/32
Signature Algorithm: sha256WithRSAEncryption
90:3a:95:1e:8e:dd:ac:ea:6f:78:41:1c:f0:88:6f:fd:28:8f:
5f:a7:99:a0:0e:9f:29:51:20:6b:8e:24:de:4e:36:b0:5a:50:
d5:ad:9c:e4:38:59:bc:6c:55:97:de:a4:72:c8:40:fd:c2:91:
24:74:23:8b:b2:d1:24:70:be:54:09:10:28:16:54:ca:08:7f:
fe:9d:13:65:13:fc:87:98:f9:bf:c2:62:78:a9:bd:48:1a:86:
f1:7b:1c:99:24:1e:c5:a5:ba:04:0d:4c:99:32:4d:d2:f2:3b:
01:d4:ee:f8:76:50:63:25:3e:14:65:13:e6:19:86:91:4e:c6:
a1:39:66:f7:15:31:02:1a:d2:7b:38:b3:87:9c:7c:30:76:d7:
70:68:5a:40:34:3f:c8:30:51:a7:1b:a0:e5:6c:34:2f:94:2f:
d6:56:70:5e:f9:15:af:2e:4c:27:8b:b0:88:2f:2a:03:e5:b3:
a4:f1:df:8d:d0:fb:67:dc:65:c4:63:e1:ea:64:02:2a:88:bb:
9e:73:52:b2:3b:b7:e9:ed:67:9d:99:d6:53:03:40:72:9e:13:
cd:49:f5:b4:a3:50:01:4b:12:9c:1d:be:3d:45:92:28:8a:80:
89:f4:ae:98:16:3e:b1:37:43:1f:2a:77:ec:d1:ee:2c:4b:33:
14:b8:9c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:58 2026 by rpki-client