Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145633.roa
File: AS145633.roa (raw, json)
Hash identifier: S/rguV8Pzv7Zjqj3dqb9QrNfn72yrvadjOqXttiR5m4=
Subject key identifier: B8:F8:EE:BD:A0:00:ED:A1:24:7F:78:4B:8B:53:C2:B1:FC:25:7F:A2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5707DEA5C10DD714A51ACA8BC7E6C91BA87BB051
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145633.roa
Signing time: Fri 22 May 2026 01:50:46 +0000
ROA not before: Fri 22 May 2026 01:45:46 +0000
ROA not after: Fri 21 May 2027 01:50:46 +0000
asID: 145633
IP address blocks: 240a:aba7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:07:de:a5:c1:0d:d7:14:a5:1a:ca:8b:c7:e6:c9:1b:a8:7b:b0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:46 2026 GMT
Not After : May 21 01:50:46 2027 GMT
Subject: CN=B8F8EEBDA000EDA1247F784B8B53C2B1FC257FA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:43:85:6e:1f:8e:4a:a0:b4:aa:2a:4c:40:
e0:00:67:4e:a0:9d:b8:b9:fe:3e:b5:17:50:96:3d:
bd:43:9c:29:48:eb:11:18:1e:a3:2b:fc:76:7e:33:
e2:f4:08:4d:f2:78:11:8d:6b:26:41:99:54:21:b6:
0a:cc:b8:87:c0:0b:bb:c5:5d:0b:fa:4b:3b:4f:7c:
68:fa:c0:95:9f:2d:90:87:a0:20:cc:80:db:85:5f:
85:53:7f:ee:0c:a7:87:be:b9:f8:b7:c0:9e:f2:cf:
86:04:bf:d2:8e:5b:08:89:3c:af:ff:96:6a:4e:7e:
37:14:78:2a:67:7c:9f:31:88:05:14:03:10:6a:48:
2c:1d:b7:7c:0c:85:e4:0e:e2:5d:60:49:be:35:84:
99:ea:07:9b:e8:c7:cd:0f:d8:db:67:d5:0e:f8:be:
7d:80:03:ad:bb:28:7d:6a:b4:bf:c9:84:44:6a:74:
b0:a8:a1:7c:66:2d:58:bb:dd:a6:43:73:79:36:4b:
12:e9:04:b3:1f:75:b2:a1:9b:2a:f1:69:8e:20:f1:
a2:3d:af:4a:ba:c5:90:fc:99:cb:e7:e7:3f:e9:ca:
d4:a1:ed:84:c6:7b:1c:ee:31:23:45:e3:5a:ee:2c:
f4:21:01:bf:23:6b:95:60:59:96:78:15:e7:18:59:
c4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F8:EE:BD:A0:00:ED:A1:24:7F:78:4B:8B:53:C2:B1:FC:25:7F:A2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aba7::/32
Signature Algorithm: sha256WithRSAEncryption
b0:66:f4:2e:f5:d9:28:62:94:05:6a:25:0b:e1:d5:af:7a:2f:
75:f0:ec:ad:cc:44:a9:aa:04:36:b5:0f:8b:26:82:e6:89:f6:
62:df:16:64:5b:6e:1f:f6:e5:60:01:94:69:b1:23:4f:6d:2f:
9a:04:f8:61:b5:33:05:ac:9e:56:c8:89:b5:f9:a9:51:c1:1d:
26:90:2e:b3:1a:d9:8b:db:a9:08:ad:12:16:92:cc:a6:e2:8c:
75:3b:ab:3b:8e:ce:9e:c3:16:d2:b0:b4:8f:dc:21:4c:42:49:
78:37:6e:ca:08:66:fb:7f:ac:34:dc:19:f4:9a:87:ba:9a:a4:
91:68:3b:14:4a:91:c9:c7:d7:6f:9e:92:6a:3b:07:cb:a7:9b:
84:42:b4:53:25:77:8a:f8:c1:c8:f8:b9:4e:51:03:fa:28:8d:
16:4f:b1:d8:c5:1f:c5:c2:47:6a:f0:40:8c:52:97:b9:75:ea:
cb:1c:75:c3:ee:ab:cb:53:be:5c:f6:a7:6d:92:ef:da:dc:72:
4b:eb:e9:2d:56:de:bf:c8:9f:32:35:29:cd:6f:87:60:f2:b0:
9f:95:2b:90:68:b1:0b:ca:8a:7b:ea:b7:8f:9d:46:63:fb:91:
31:9e:8d:b7:b9:66:91:5f:dc:ba:60:05:4d:2b:a8:86:11:2e:
ae:35:5a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:20 2026 by rpki-client