Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145588.roa
File: AS145588.roa (raw, json)
Hash identifier: y9JLnFZwAdcje/bZA5zZVvYpSB1o/u0L7IxFMCZ/TVM=
Subject key identifier: 16:38:F1:A3:85:B7:F6:5C:C1:61:48:A2:36:A9:E1:95:09:17:D0:F3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1D52C759E975937D89816889C28E9B6C3D933271
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145588.roa
Signing time: Fri 22 May 2026 06:05:21 +0000
ROA not before: Fri 22 May 2026 06:00:21 +0000
ROA not after: Fri 21 May 2027 06:05:21 +0000
asID: 145588
IP address blocks: 240a:ab7a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:52:c7:59:e9:75:93:7d:89:81:68:89:c2:8e:9b:6c:3d:93:32:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:21 2026 GMT
Not After : May 21 06:05:21 2027 GMT
Subject: CN=1638F1A385B7F65CC16148A236A9E1950917D0F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:2b:d2:a8:0d:a1:f2:ac:36:a3:ba:38:d6:
80:69:e3:ae:ab:59:15:41:18:db:91:5d:db:e7:58:
a9:7c:23:66:dd:3f:48:cd:10:37:f9:a1:20:38:b6:
23:70:49:01:31:ca:ba:18:9e:c7:0d:22:9f:5f:3e:
53:c9:13:a0:7b:56:6e:5e:6e:61:8d:d9:c3:02:4e:
2f:54:f6:7e:86:1f:0e:3f:de:88:eb:d8:f7:47:ae:
e4:41:59:e9:65:5d:37:52:af:cf:66:04:b3:65:da:
04:79:2d:41:53:96:ef:25:04:b7:5b:65:9c:7f:c8:
7c:45:c0:ed:cf:52:07:ce:51:fa:91:1b:6c:5f:47:
e4:2c:61:ca:56:2d:43:02:28:c9:01:39:88:f4:e7:
dd:2f:23:e2:c5:52:f0:3b:d4:8f:cc:d4:76:d6:73:
a6:5f:99:48:87:3b:1d:70:64:86:38:87:d1:76:10:
19:7f:d2:b5:36:9b:62:61:5b:37:e1:46:36:97:58:
cb:86:a5:3d:10:db:ed:a0:2b:b5:8f:cc:8f:e4:16:
b0:90:a8:2b:88:8d:64:2c:cd:d8:3e:aa:39:17:f8:
ef:bd:33:80:ed:fc:a0:60:31:24:36:0f:ac:35:35:
0d:87:ce:60:3a:d8:3b:4b:c1:e3:6e:fb:8a:e6:1c:
0d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:38:F1:A3:85:B7:F6:5C:C1:61:48:A2:36:A9:E1:95:09:17:D0:F3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145588.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab7a::/32
Signature Algorithm: sha256WithRSAEncryption
00:44:ac:82:23:a7:7b:f6:53:f1:53:b8:2d:34:0d:1c:72:63:
e5:33:d8:b5:27:5b:45:a3:de:2f:0c:e8:61:1b:c6:85:f0:b1:
64:79:16:eb:e6:ec:69:58:18:40:79:a1:8e:51:0a:86:1f:13:
55:5f:52:0a:5a:51:5c:c9:3a:1d:d7:c7:d4:3e:86:f3:6b:46:
63:29:18:fc:55:01:42:7d:6a:7c:71:70:01:a6:a2:ce:1c:5a:
b0:8c:04:8f:2f:40:6d:8e:90:c8:3c:a6:e3:a6:17:04:b6:38:
fd:ef:28:97:93:4a:78:0c:41:e9:a1:b2:05:43:c6:13:16:27:
41:67:96:98:a5:a3:f7:17:31:3e:5d:41:9a:74:35:f2:cb:d3:
b1:68:04:a2:62:06:d2:d4:34:a0:88:8c:2a:fc:bc:12:62:48:
2c:b5:c0:21:03:5e:a3:66:80:b0:c0:03:44:80:cb:d1:e2:30:
dc:74:df:5e:4e:c1:11:ac:8f:72:fc:1b:d6:ac:fe:ba:c1:9b:
58:b1:fd:bb:97:1d:ac:f8:2a:ee:77:19:1e:60:e6:d7:0c:c7:
55:67:10:49:4c:a8:05:8a:11:ff:42:ef:f4:7e:52:f9:ac:57:
d2:7d:5f:ed:34:d9:23:a4:90:73:32:5c:da:01:f7:d1:58:05:
ea:b6:9e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:11 2026 by rpki-client