Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145590.roa
File: AS145590.roa (raw, json)
Hash identifier: arhWlZUUIWOdSfvhqaEzRivY8K6MBiLJZFym5hAaSgo=
Subject key identifier: 69:2E:DD:3B:6F:FD:7F:CA:36:77:2B:E7:71:B1:DD:E5:9B:14:84:F7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0E59691AF1C01BBBC2506E128A4F3679AA24C04D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145590.roa
Signing time: Fri 22 May 2026 01:50:07 +0000
ROA not before: Fri 22 May 2026 01:45:07 +0000
ROA not after: Fri 21 May 2027 01:50:07 +0000
asID: 145590
IP address blocks: 240a:ab7c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:59:69:1a:f1:c0:1b:bb:c2:50:6e:12:8a:4f:36:79:aa:24:c0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:07 2026 GMT
Not After : May 21 01:50:07 2027 GMT
Subject: CN=692EDD3B6FFD7FCA36772BE771B1DDE59B1484F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:50:29:30:04:76:ba:03:25:4c:f9:af:8b:3c:
73:05:02:c9:8a:23:f8:27:bf:45:ae:73:4a:06:47:
44:4a:52:30:40:80:93:47:99:d2:4b:f1:1f:52:c0:
e6:4a:65:73:fd:46:e0:31:50:4d:8c:1d:f4:0e:80:
87:df:a3:08:19:9e:bb:af:be:66:10:e5:d5:a1:1f:
07:7d:79:4c:8f:f9:87:79:5e:c0:ee:cb:bb:75:6f:
e5:94:b8:07:80:fa:6f:ee:00:07:4e:49:37:c7:b4:
9a:9f:88:9d:61:2c:b5:a0:3f:b1:a7:d3:96:a5:1e:
77:e7:48:4f:f9:c4:a5:09:e7:69:a1:7c:cd:67:7f:
49:98:1f:8e:d2:85:09:06:6b:18:05:e8:cc:72:44:
8a:ae:f4:54:d2:74:d0:de:13:ee:dd:b2:3c:40:50:
72:2f:b2:2b:8a:1a:57:6d:76:32:7e:28:3b:c4:c5:
66:4a:e5:1c:46:24:4e:6d:33:dc:18:92:bd:91:b4:
9b:35:9c:99:c4:e0:0f:29:9c:da:49:52:c1:8a:e4:
19:78:51:82:27:51:4a:42:83:de:95:66:1c:8d:6a:
52:ea:10:50:75:70:b8:87:67:05:66:25:cb:aa:50:
4a:9b:88:53:7c:c4:cd:6b:aa:b7:d3:61:1e:1a:2e:
4e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2E:DD:3B:6F:FD:7F:CA:36:77:2B:E7:71:B1:DD:E5:9B:14:84:F7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145590.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab7c::/32
Signature Algorithm: sha256WithRSAEncryption
9f:2a:f1:c3:40:b5:5e:38:6d:22:43:1f:7e:66:ee:15:6b:62:
b6:ea:9d:2c:27:0c:bf:4a:fd:99:e2:56:9e:7e:4b:c9:65:aa:
83:09:b5:84:18:d6:5a:9d:8f:76:91:c6:4c:36:70:82:8c:bd:
6f:f0:10:7f:39:2e:9d:17:25:f0:59:3a:d7:25:cf:bd:b8:d3:
db:23:4d:01:db:b4:fe:d6:23:d0:c6:a8:79:c5:f9:9d:12:31:
36:cd:8a:1b:60:61:88:55:3c:f8:a9:89:f9:68:ee:5f:15:15:
0e:eb:33:8e:5d:23:d8:8f:90:af:ec:e4:31:6f:bd:5b:91:80:
74:a7:30:d2:64:d5:19:9d:97:43:f3:14:b5:0c:11:70:c9:a1:
c5:4f:74:20:ee:75:da:c6:47:e9:a2:fb:49:af:09:5b:54:da:
05:2e:8b:8a:97:2e:2d:dc:11:0b:91:cc:a6:2c:42:70:60:5b:
f8:01:30:a4:ed:e5:0a:d4:ff:5a:81:2c:db:f9:38:f1:5c:39:
4e:08:68:93:b0:b2:bf:3a:08:a0:0e:88:2a:c3:6e:67:83:d9:
37:1f:37:ef:0f:cb:3f:ce:a1:16:76:3c:27:71:30:b1:4e:92:
04:1b:6a:95:ee:2a:bf:89:4e:af:26:e8:6a:c4:85:63:1f:ab:
e4:c8:96:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:42 2026 by rpki-client