Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145647.roa
File: AS145647.roa (raw, json)
Hash identifier: BKqwGKHg2oZSERGamuU0kGw0wnE8HFktIFixTYifHlg=
Subject key identifier: 9D:A2:93:EA:10:05:5C:F6:80:7C:29:04:67:8D:AA:96:D6:F1:F5:46
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0672DD6D63F2AAA322A109416B491ACE118A4556
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145647.roa
Signing time: Fri 22 May 2026 07:40:43 +0000
ROA not before: Fri 22 May 2026 07:35:43 +0000
ROA not after: Fri 21 May 2027 07:40:43 +0000
asID: 145647
IP address blocks: 240a:abb5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:72:dd:6d:63:f2:aa:a3:22:a1:09:41:6b:49:1a:ce:11:8a:45:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:43 2026 GMT
Not After : May 21 07:40:43 2027 GMT
Subject: CN=9DA293EA10055CF6807C2904678DAA96D6F1F546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:fa:95:43:51:89:9e:e2:dc:7d:45:57:34:
85:fc:08:d7:46:2e:97:35:fa:f8:f9:35:55:cf:95:
28:6d:64:e8:d9:02:e6:07:2c:a2:52:90:e2:8f:34:
e7:3d:7e:ef:42:a2:b6:bd:f7:5f:b0:43:33:91:88:
6e:bf:8b:af:c3:dd:c2:03:1f:9a:33:e9:5f:70:d1:
81:18:ea:f2:47:74:a5:f3:a1:93:10:d2:40:ae:4b:
7e:8c:7b:cd:90:0a:be:97:08:ae:46:f0:27:51:31:
fd:cb:75:4a:52:39:f6:a7:2f:0e:2a:b5:8e:36:da:
d7:ed:59:2a:6f:8d:db:fa:1a:61:82:62:71:7c:31:
5b:9a:8d:f1:c6:43:19:82:b4:ed:32:46:7b:55:53:
f2:38:b9:b2:47:49:77:0c:50:78:f5:1f:a6:5b:76:
84:57:fe:9a:89:fa:92:ac:0b:c4:20:5c:2c:34:0b:
32:f9:80:1b:da:f2:95:b4:59:b0:4e:44:29:d2:22:
a1:4e:98:25:d0:10:c7:47:44:e8:b3:1a:72:45:17:
9f:9b:e6:4a:0f:0d:80:f3:f5:19:55:4a:9d:52:80:
24:39:7b:80:36:1a:eb:46:a4:5c:70:a5:77:9f:f5:
be:bc:20:b2:5a:7f:5f:dc:b0:e9:5b:7e:9f:1d:13:
8f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A2:93:EA:10:05:5C:F6:80:7C:29:04:67:8D:AA:96:D6:F1:F5:46
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145647.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abb5::/32
Signature Algorithm: sha256WithRSAEncryption
32:ff:73:5a:a1:97:ee:d5:65:61:77:f4:22:21:d1:fd:17:63:
99:7d:e2:40:61:92:16:61:cd:2a:d4:03:1f:5f:50:d2:f2:08:
04:02:44:8e:d1:f7:c5:fd:e1:63:e5:80:cc:41:43:92:d4:75:
8a:64:6f:ff:a9:14:36:91:d3:70:d0:77:70:22:cb:d9:a5:bc:
47:f5:b3:96:ae:3d:0d:3a:07:3a:44:ff:0e:43:67:d8:06:ff:
a8:9d:8d:49:50:f4:a0:1c:1b:d0:06:92:24:09:dd:5f:1c:be:
05:07:9e:94:f5:07:9a:8a:39:95:52:a2:7e:0d:a5:0b:c0:48:
d5:ea:9a:a2:c1:88:79:3b:f3:27:33:43:fb:9f:8b:7a:6b:7e:
d2:20:81:c1:de:83:70:cb:c7:2b:5b:db:c2:52:42:fe:37:86:
be:ab:c9:ae:d7:49:a1:9f:85:82:f4:51:3c:43:b3:6e:02:f8:
38:88:97:e5:63:9f:de:a7:08:bf:ce:a7:03:af:0d:d4:96:26:
bf:64:d6:cb:c9:70:b5:5a:72:6c:1d:62:c7:19:91:2f:ae:2f:
fc:95:0b:b4:77:26:fd:e7:6b:66:1f:88:84:45:0c:44:46:5e:
db:80:a0:16:0d:b4:2d:aa:a8:b8:4c:0e:10:22:99:eb:35:54:
d7:ef:17:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:34 2026 by rpki-client