Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145620.roa
File: AS145620.roa (raw, json)
Hash identifier: pk2ZrAS/k+vxg24ZA3P2vv0IbQ98qoKom5Qpn4mTygc=
Subject key identifier: DC:5A:9B:65:88:BE:23:52:63:EA:7E:E9:3A:43:53:BB:7D:25:7F:BC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 72E34CD59CEB92F6EB4155B011FC39268AC1D6D1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145620.roa
Signing time: Tue 26 May 2026 06:12:31 +0000
ROA not before: Tue 26 May 2026 06:07:31 +0000
ROA not after: Tue 25 May 2027 06:12:31 +0000
asID: 145620
IP address blocks: 240a:ab9a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:e3:4c:d5:9c:eb:92:f6:eb:41:55:b0:11:fc:39:26:8a:c1:d6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:31 2026 GMT
Not After : May 25 06:12:31 2027 GMT
Subject: CN=DC5A9B6588BE235263EA7EE93A4353BB7D257FBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:f6:56:df:e3:46:41:b5:93:4f:e1:0d:9e:
b0:3b:0f:f7:b3:1a:03:74:84:b8:9c:9f:c3:eb:59:
72:db:cf:75:e3:76:24:31:a0:cd:07:4f:3b:0b:8b:
61:af:bb:e7:d5:e7:b0:dc:63:85:e9:8d:57:e8:41:
25:7d:10:b6:33:52:50:91:a5:7e:26:d9:14:13:90:
30:0a:83:07:7e:7d:6e:61:d2:81:94:f6:18:4c:dc:
e2:a6:42:4b:f7:63:37:49:d7:4a:82:98:70:aa:00:
80:3e:41:95:98:66:c8:d8:83:57:13:36:b5:41:9d:
8e:6c:0d:ab:af:8d:12:ca:e7:30:c1:73:ac:e0:95:
0e:73:a9:71:67:e9:45:c6:82:14:f5:50:24:3a:fb:
37:9f:cc:8b:c5:7d:08:35:f6:f2:5b:0e:34:a9:3a:
66:85:59:09:8d:e4:bc:55:21:99:7d:51:7c:95:b6:
1e:b4:94:61:1f:7b:37:d0:a1:90:ac:01:8f:13:90:
88:ae:2c:45:e1:43:67:af:4e:89:b5:e0:36:38:e5:
4c:b6:79:3b:7e:52:bd:8d:d1:6c:13:92:88:74:48:
35:e8:a2:4a:64:4f:2e:66:31:74:52:5a:02:82:0b:
31:f1:d4:01:fe:7c:20:d7:11:db:42:1d:93:7a:05:
38:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5A:9B:65:88:BE:23:52:63:EA:7E:E9:3A:43:53:BB:7D:25:7F:BC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145620.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab9a::/32
Signature Algorithm: sha256WithRSAEncryption
22:7f:d5:2c:cc:33:85:8b:6e:17:77:24:05:00:57:8b:e6:fa:
f8:8b:02:99:ad:bc:25:ac:eb:43:b6:d1:fb:4a:b1:0a:c6:6f:
06:53:c1:16:32:5c:64:d0:e0:01:8b:85:7f:a8:10:8a:c5:53:
17:79:7e:d3:e6:88:56:17:67:7e:ee:6c:c0:bf:c3:48:04:d6:
02:57:77:fb:6b:58:e0:44:5a:8e:4a:e1:74:c0:9c:41:3d:39:
1e:43:49:7e:11:3e:e5:cb:d3:66:f6:0f:42:df:3a:a6:1c:b3:
eb:37:de:e7:c7:fd:54:8b:02:a7:c9:b6:15:2a:48:d7:91:21:
fc:18:29:39:63:94:10:5c:cb:35:74:80:9a:58:5e:38:45:d4:
8e:a1:81:a6:31:5c:b1:45:66:04:46:00:f1:ef:64:89:95:29:
3f:97:da:e0:92:89:36:bd:6d:37:d7:b5:3e:5b:d9:d9:1d:81:
97:43:eb:5d:98:ea:0e:93:13:0f:2a:f4:11:36:eb:7d:00:49:
a4:cd:50:11:c4:35:34:e8:25:6d:d6:f7:fc:9b:fb:74:3a:c1:
e2:af:c1:43:70:35:de:bc:58:75:54:a1:60:24:0f:52:23:b9:
a4:f2:b2:68:f7:79:9c:2c:7e:ba:87:6f:18:92:37:90:0e:67:
9c:67:0a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:23 2026 by rpki-client