Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145606.roa
File: AS145606.roa (raw, json)
Hash identifier: guh/+IEwRzfOBlOAZ9q1YaglgXpX/tITTFIb2g7WDrc=
Subject key identifier: 84:F4:4D:D2:DB:C9:21:16:4D:AF:99:C1:B9:47:20:F1:BC:4D:4D:7A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 19FD9FFDCE7E2C5E87D0CC8D1274903B514BD5D0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145606.roa
Signing time: Tue 26 May 2026 06:30:23 +0000
ROA not before: Tue 26 May 2026 06:25:23 +0000
ROA not after: Tue 25 May 2027 06:30:23 +0000
asID: 145606
IP address blocks: 240a:ab8c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:fd:9f:fd:ce:7e:2c:5e:87:d0:cc:8d:12:74:90:3b:51:4b:d5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:23 2026 GMT
Not After : May 25 06:30:23 2027 GMT
Subject: CN=84F44DD2DBC921164DAF99C1B94720F1BC4D4D7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:84:de:38:43:aa:90:d8:c3:16:30:51:7d:d2:
64:17:be:5e:21:1c:8f:36:dd:bf:2b:be:3a:dc:63:
49:32:08:82:30:54:1e:c5:fe:10:96:f2:ff:8c:7d:
36:ba:5d:b6:41:78:af:f5:8c:6f:3a:25:3b:21:59:
04:1b:28:c7:d9:3c:db:7e:8c:fc:42:c7:1c:7c:57:
1e:a5:eb:c3:21:b2:77:84:1a:1b:7d:71:55:56:68:
fa:75:58:5b:8f:1b:df:ab:37:20:87:eb:24:08:90:
5d:0f:43:67:78:16:d4:64:dd:69:f3:34:0d:5f:ae:
07:96:ca:fe:77:33:3e:6c:5f:22:ef:83:a4:d7:0b:
d7:8c:cf:29:b4:03:5f:a2:6f:f4:2f:d4:8c:65:71:
26:ed:c7:9e:8a:ce:b5:2b:aa:95:ac:87:b9:ce:e8:
0e:d8:19:30:71:8a:32:3a:90:14:0a:72:84:d6:ab:
a4:96:63:fb:c4:4c:ad:31:1a:8d:bc:34:f0:17:df:
72:7b:84:04:99:e0:81:32:6b:17:eb:a9:c1:a1:55:
48:ce:80:48:ae:8f:09:82:d7:d3:f1:13:0d:dd:8d:
c8:34:df:9c:9e:54:12:c5:d9:6e:d2:69:73:91:a5:
25:4f:55:2c:cc:5d:54:d1:c6:f9:d7:4f:1e:83:a6:
b1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F4:4D:D2:DB:C9:21:16:4D:AF:99:C1:B9:47:20:F1:BC:4D:4D:7A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145606.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab8c::/32
Signature Algorithm: sha256WithRSAEncryption
96:03:d9:c8:9a:55:ce:7e:20:51:1b:7b:1f:e9:a5:05:ba:ee:
e7:79:bb:ed:9a:3b:d8:ef:26:81:4d:77:76:8b:15:e6:ce:a9:
2c:f1:9e:4c:78:86:6d:54:40:97:23:34:36:a3:04:db:93:f8:
22:63:d2:e5:5e:02:71:1a:f8:d1:7e:40:20:21:7b:57:98:86:
eb:e0:3a:83:a0:eb:d6:9e:84:15:2d:71:72:e8:a8:69:73:0d:
6b:46:4b:ec:b3:fc:b2:75:25:9c:32:bb:e2:5f:a4:ad:b9:55:
9e:bd:a9:49:2c:45:4c:ac:01:f3:68:6c:20:20:89:cd:29:b6:
af:d4:e8:c6:e7:0c:89:7d:1e:4d:8b:e7:5c:9e:23:79:d0:d7:
c6:2c:4f:b5:ff:08:ee:c3:75:a8:94:4f:dc:2f:f5:cc:36:9d:
87:6c:09:5f:20:d1:e0:b4:aa:cf:9b:ea:78:1d:83:21:a1:38:
f1:6c:cd:68:13:75:8e:eb:32:aa:d8:21:b4:90:da:dd:c5:09:
69:ce:b0:e8:d2:ec:b5:ba:57:08:1b:3f:51:8d:af:67:c9:c0:
bd:a9:88:97:4e:8a:95:44:15:7c:f0:1a:38:ae:63:f9:c5:ab:
f0:bb:66:2b:fb:60:70:97:d4:8b:32:f7:a8:a5:cc:c5:7a:8b:
fd:c2:c4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:30 2026 by rpki-client