Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145599.roa
File: AS145599.roa (raw, json)
Hash identifier: x38xoqB0FH7wR/4/RyaTYBb9ROD2HLwnm0Oz8Bum6rU=
Subject key identifier: FE:AC:23:1A:CF:86:2E:1F:1F:FC:1D:32:A7:A3:E5:2D:07:EF:3A:C6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7C70D6C6FEC4859F238C03C49559570B2AE5250E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145599.roa
Signing time: Fri 22 May 2026 04:08:02 +0000
ROA not before: Fri 22 May 2026 04:03:02 +0000
ROA not after: Fri 21 May 2027 04:08:02 +0000
asID: 145599
IP address blocks: 240a:ab85::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:70:d6:c6:fe:c4:85:9f:23:8c:03:c4:95:59:57:0b:2a:e5:25:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:02 2026 GMT
Not After : May 21 04:08:02 2027 GMT
Subject: CN=FEAC231ACF862E1F1FFC1D32A7A3E52D07EF3AC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f4:d6:8b:ee:ae:ff:22:18:78:dc:c3:ef:63:
77:32:ae:67:0e:f9:b2:33:35:fa:22:a4:5e:7b:06:
ed:24:9c:3e:40:75:dc:40:a9:9a:bb:9f:af:d3:82:
27:e5:c3:e4:c4:e7:ab:c3:dc:ce:2e:e0:f5:a2:e2:
fb:a1:12:2b:3e:63:8a:cf:7e:84:03:fa:cb:5a:40:
ef:09:c2:88:2f:a0:5a:25:8d:2e:cb:bb:b9:6e:38:
3b:4e:91:d1:4f:e4:ee:d2:50:e3:6a:c3:e1:c6:c3:
ab:68:96:f1:24:a4:26:9b:d7:e9:a0:61:13:9f:04:
7c:b4:cb:02:0a:13:94:02:d6:e5:96:3a:eb:b3:0f:
91:48:ff:a3:9f:4c:5a:f5:8e:7e:60:c8:30:f6:9d:
83:08:6c:22:eb:34:d4:ad:b0:11:a2:36:8e:a6:ff:
5a:b9:5f:b7:71:1d:01:3e:a4:77:b4:f5:6f:69:17:
e8:03:90:28:eb:d9:62:1c:d0:6b:31:49:97:9a:ff:
36:75:23:f9:8b:15:09:8b:ba:17:ab:bd:8a:bb:42:
7b:ec:b6:a4:f9:a1:00:55:30:ab:c5:bd:26:a8:1b:
78:db:bb:e8:4c:5f:7e:f1:15:57:71:33:44:bc:2a:
b2:6f:fb:83:1c:9f:01:2e:10:8d:0e:1e:5c:95:09:
65:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AC:23:1A:CF:86:2E:1F:1F:FC:1D:32:A7:A3:E5:2D:07:EF:3A:C6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145599.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab85::/32
Signature Algorithm: sha256WithRSAEncryption
47:88:57:8d:5a:88:a5:ee:1c:28:8c:da:a5:6a:a8:76:16:87:
d4:b5:c1:c6:8f:b5:9e:b9:b5:f0:da:9d:cb:9a:0b:03:67:be:
3d:71:16:90:82:59:8f:af:d8:c4:4a:f1:cf:7b:47:07:43:fc:
f4:12:ba:2b:74:c4:90:47:f0:d1:77:4d:d8:60:00:b9:bb:b7:
76:2f:9b:08:ef:84:8e:e3:02:03:43:14:20:a4:93:0a:22:13:
87:d9:5c:2b:0b:5e:e9:83:1b:6b:e8:26:7b:b9:70:bb:5c:da:
c8:8c:e3:aa:54:24:c1:fe:04:2a:e8:03:af:83:2c:7c:1b:23:
3d:78:5a:3d:e8:f8:37:b7:f6:74:94:05:35:6c:2c:18:f3:74:
da:eb:63:3c:30:84:dd:bf:4a:02:6b:3a:27:1f:ae:31:59:d9:
02:2c:d8:cb:37:53:47:02:e1:ed:b1:16:fc:c5:5a:ad:84:5a:
12:17:78:41:3e:39:94:b8:b9:27:92:d9:c3:a4:01:7d:84:4c:
a5:eb:79:e2:71:f8:3f:9d:52:a4:be:a9:20:a6:dc:d5:5e:d5:
e0:0a:30:d8:c6:2c:a5:54:40:6d:9c:c3:1d:3c:98:06:e8:ba:
41:9e:37:db:b6:02:7c:56:90:6a:2d:8d:87:b6:d8:83:26:b9:
53:ea:5c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:41 2026 by rpki-client