Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145596.roa
File: AS145596.roa (raw, json)
Hash identifier: PPNqZEHjxnp1nXmMxxD03oK3NYYMJb02h8o/wtQcNFQ=
Subject key identifier: 54:B0:EB:DB:D9:2A:35:B7:3B:ED:FB:F7:2E:6A:70:59:18:94:93:EC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3D980FA6734AEC999AE57E7FAB87C45B96603585
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145596.roa
Signing time: Fri 22 May 2026 07:24:53 +0000
ROA not before: Fri 22 May 2026 07:19:53 +0000
ROA not after: Fri 21 May 2027 07:24:53 +0000
asID: 145596
IP address blocks: 240a:ab82::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:98:0f:a6:73:4a:ec:99:9a:e5:7e:7f:ab:87:c4:5b:96:60:35:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:53 2026 GMT
Not After : May 21 07:24:53 2027 GMT
Subject: CN=54B0EBDBD92A35B73BEDFBF72E6A7059189493EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:33:51:c3:94:12:30:fe:6b:03:f1:60:4e:
82:14:42:66:89:e8:05:27:4b:92:cb:6a:9e:29:31:
84:77:b6:4c:ef:bd:15:d7:ce:10:82:16:b0:c1:1a:
4e:60:55:e4:b1:0c:ad:db:d7:a0:16:d6:5e:41:a3:
9b:5a:70:b1:a6:b0:50:e0:df:ea:c9:94:b2:29:54:
21:0a:ee:ef:f2:49:ed:60:79:e8:a9:c3:79:01:c8:
cd:7a:5d:81:52:a2:d9:61:f6:d0:2f:71:b1:b7:01:
24:8c:c2:50:5c:1b:99:73:f3:5c:00:89:3c:d3:fd:
34:43:b5:aa:e5:e7:3e:ff:bf:2d:d3:ad:a4:71:d2:
61:e8:a3:07:db:85:29:2c:2f:11:f8:f3:49:c2:11:
ab:35:b9:0e:0e:8e:6e:69:a6:37:36:c2:2f:dd:85:
e5:a7:fc:c4:02:ed:53:10:44:e8:40:52:77:97:20:
6a:a5:83:04:82:97:59:3e:9b:ff:e0:a1:7c:54:f4:
e7:7a:65:be:90:0f:01:c3:34:dc:a9:88:f1:51:c2:
b0:3f:b6:e5:c6:c5:5d:22:93:c2:86:14:1c:cc:c0:
d5:94:a0:66:a5:c2:58:4d:1a:97:eb:c0:12:87:c3:
42:c9:fb:77:e3:23:13:b0:ee:04:e0:47:6d:3d:2a:
74:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B0:EB:DB:D9:2A:35:B7:3B:ED:FB:F7:2E:6A:70:59:18:94:93:EC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145596.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab82::/32
Signature Algorithm: sha256WithRSAEncryption
0a:f4:c6:c7:e3:1f:28:15:cf:5c:26:06:d8:51:f4:14:81:8d:
a8:5e:f6:aa:9f:1d:37:16:85:0d:7d:00:98:58:19:01:e0:90:
fc:b9:9b:32:2f:45:e4:fd:8e:87:a6:11:3b:ef:f8:77:e7:ca:
eb:34:1d:42:25:49:57:40:0a:40:f2:b2:6d:bd:a1:50:59:3e:
99:7f:d4:34:a1:95:92:7d:5c:62:49:0b:75:05:10:4c:e1:dd:
cf:83:3f:e6:b8:5c:96:54:b1:40:81:3c:52:dc:d8:13:ff:3b:
90:f9:b6:ed:b7:11:da:1c:48:08:19:ee:b8:97:a7:36:07:70:
aa:65:6a:26:36:44:23:c3:58:89:90:34:1a:5f:06:b5:03:8a:
18:e2:b6:9a:88:5e:b3:d8:74:c6:98:c5:29:d1:e9:92:c9:04:
c5:ff:c9:67:86:55:cc:6b:96:9c:ec:ee:96:e1:af:24:29:94:
a2:7a:18:35:1b:6e:f1:2b:bf:f5:0e:64:99:76:1d:73:aa:df:
cb:9c:a6:a5:fd:98:8c:54:09:cc:1a:f6:e2:0f:ce:6c:76:18:
43:dc:02:fc:22:5c:2b:22:e7:ad:1e:4a:59:6f:3d:28:1f:d8:
0a:e1:c5:ea:b2:0b:0b:3f:9b:8f:5c:78:7a:ad:dc:fd:ed:fd:
67:54:46:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:46 2026 by rpki-client