Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145651.roa
File: AS145651.roa (raw, json)
Hash identifier: 7iARQmXJY4CuAfSfuEf7G5lnCNVDKpy2t4mqU6EqfiM=
Subject key identifier: 21:F2:03:0F:E1:EE:45:FF:74:FB:11:1D:07:F0:DB:A2:1D:23:56:CB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3287F04F31E4EFBEE341A7B3A6A98D8C4BC944A7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145651.roa
Signing time: Tue 26 May 2026 03:17:20 +0000
ROA not before: Tue 26 May 2026 03:12:20 +0000
ROA not after: Tue 25 May 2027 03:17:20 +0000
asID: 145651
IP address blocks: 240a:abb9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:87:f0:4f:31:e4:ef:be:e3:41:a7:b3:a6:a9:8d:8c:4b:c9:44:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:20 2026 GMT
Not After : May 25 03:17:20 2027 GMT
Subject: CN=21F2030FE1EE45FF74FB111D07F0DBA21D2356CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:70:50:3c:31:a2:fc:8a:af:e1:73:3e:c2:
d5:0e:e4:8a:3b:90:52:28:a1:54:31:17:56:cf:dc:
13:fa:fd:60:4f:ab:31:69:f7:03:b4:40:08:51:0c:
9b:74:15:23:ce:59:1b:06:ba:a8:cd:86:d6:a8:68:
ed:20:28:c4:ac:b2:ec:2d:72:54:d8:fe:1a:87:c6:
67:6d:26:0c:26:25:02:fd:56:15:bc:38:3c:a0:84:
6b:81:c8:08:dd:5d:35:e4:25:46:d7:f8:6a:28:49:
6d:a3:37:39:30:6b:92:01:86:b1:48:e7:a6:36:69:
0c:b1:31:02:ba:9d:8f:47:38:31:9d:9e:6c:6a:ea:
04:b6:64:9c:aa:99:98:0e:df:d9:a6:d2:c1:24:92:
fe:b2:6b:d8:a3:77:7b:95:da:51:1c:4d:0d:20:a5:
33:fd:fe:b7:3a:9c:84:99:6b:bb:c0:c7:46:68:61:
5f:b7:77:39:d8:7a:ab:5b:1e:e0:da:e4:8e:9a:c9:
2d:4c:4c:5f:6d:83:89:dc:dd:95:15:12:41:06:d6:
af:d9:b7:6f:c2:7f:01:9c:15:c6:92:fa:2b:2b:8e:
68:e0:6e:6f:74:6f:12:16:09:43:67:e7:e2:be:41:
b8:c0:c5:80:4c:79:a4:fc:8c:eb:44:f3:5c:07:06:
36:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F2:03:0F:E1:EE:45:FF:74:FB:11:1D:07:F0:DB:A2:1D:23:56:CB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145651.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abb9::/32
Signature Algorithm: sha256WithRSAEncryption
21:9a:81:53:47:16:cf:da:35:7d:90:f7:a8:4c:fe:f1:85:2e:
e4:4f:b1:56:1f:a3:2a:4d:82:a0:cd:bd:f2:b5:d7:86:ba:5d:
42:89:c3:1e:bd:20:99:ae:34:0c:b6:88:30:cc:83:f5:4e:49:
5a:f6:a4:33:64:77:c2:48:cb:83:5e:60:5d:0c:2a:0e:ab:01:
29:11:8e:05:a0:c5:6f:21:aa:6c:10:b6:3b:07:b5:7b:f3:ba:
78:ff:4a:4b:80:84:08:89:77:88:1b:d9:89:28:0c:f6:79:8b:
92:a9:62:de:47:49:77:77:50:12:45:fc:7c:e0:5c:c3:da:ed:
7d:9e:38:04:45:3b:f9:60:eb:b9:5b:31:4f:5d:51:57:70:8d:
60:c0:ec:98:bb:95:45:2d:a1:c3:b0:e3:63:01:6c:ca:11:25:
0f:1b:39:71:38:68:18:d0:76:7b:b6:74:03:08:05:ee:76:c5:
9a:37:71:58:87:82:dd:01:de:19:ef:83:0e:8e:86:0f:ab:c5:
8e:09:b2:18:c6:70:82:59:8d:6f:c7:5b:2d:78:f1:ea:41:d8:
87:a4:9a:66:7e:10:ae:3f:46:05:00:a3:79:ce:a6:73:f5:d6:
f3:6d:ab:ed:5e:a6:26:c0:41:44:17:db:4b:4a:f6:f9:ce:d6:
22:e3:6c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:43 2026 by rpki-client