Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145654.roa
File: AS145654.roa (raw, json)
Hash identifier: qFMnGgm+CHQtQN74r38oSuH7YgmcmnNV1z4Y6k6Ni10=
Subject key identifier: FA:21:44:98:C8:D9:7D:54:0E:C8:4F:5F:DE:B5:2D:F9:DA:68:BD:FB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 070F4911CD5792FC9D257B7EEFFF803558EC035E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145654.roa
Signing time: Fri 22 May 2026 01:50:28 +0000
ROA not before: Fri 22 May 2026 01:45:28 +0000
ROA not after: Fri 21 May 2027 01:50:28 +0000
asID: 145654
IP address blocks: 240a:abbc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:0f:49:11:cd:57:92:fc:9d:25:7b:7e:ef:ff:80:35:58:ec:03:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:28 2026 GMT
Not After : May 21 01:50:28 2027 GMT
Subject: CN=FA214498C8D97D540EC84F5FDEB52DF9DA68BDFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:ec:ca:e1:51:c9:b8:83:8a:e1:3a:77:a1:
54:6a:8a:a4:b3:81:9d:63:04:45:0b:ce:0d:9c:b3:
82:d0:a7:0d:c8:4d:d5:0f:03:a4:b7:b2:83:a7:4a:
95:8d:4d:a6:52:41:49:4b:54:9e:54:dd:b5:1f:b8:
a3:51:14:b1:c7:0e:6b:8c:fa:c8:2e:7a:30:94:82:
26:2b:a0:b9:81:d7:33:09:54:e0:a8:91:ca:5c:f6:
73:16:f6:db:e3:68:a7:87:3c:af:18:5a:18:fe:03:
44:6d:6d:dc:de:85:78:04:36:36:bf:6e:8f:24:a7:
83:71:da:ac:c7:67:34:6a:38:61:93:cd:1c:20:63:
be:42:55:c5:14:ad:e2:b9:0a:d6:30:1d:4c:f3:fb:
44:ec:b4:bd:31:de:f8:72:2b:02:99:95:a0:09:d4:
aa:4c:96:a8:59:1e:33:ae:af:50:44:78:54:06:14:
c1:f3:49:33:f6:5d:5a:d0:b9:32:91:bc:fd:c1:1c:
50:b5:62:5e:1b:b4:bc:df:81:a3:18:3d:24:db:e3:
bd:3f:2b:57:14:91:23:07:a0:82:1b:7a:70:e2:70:
9a:83:97:9c:fa:4d:e9:80:34:8e:c0:d1:10:0a:49:
7e:eb:39:f6:20:8f:b8:04:02:e1:42:00:18:c2:1f:
96:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:21:44:98:C8:D9:7D:54:0E:C8:4F:5F:DE:B5:2D:F9:DA:68:BD:FB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145654.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abbc::/32
Signature Algorithm: sha256WithRSAEncryption
6e:31:d9:5b:2a:7c:d1:2c:7b:85:81:33:39:7a:03:5f:77:fc:
2a:80:9d:48:0b:46:9a:36:9e:30:4a:d5:1d:25:16:92:50:04:
0d:4e:13:fb:6d:e6:fd:ba:4b:3c:e0:65:74:99:62:9b:11:41:
dd:ec:68:63:f0:ba:e6:66:f5:1d:98:d1:4c:0e:c1:3f:5e:00:
2c:fe:31:53:14:38:2d:24:ef:e1:48:ed:14:31:f9:c1:cf:75:
aa:2e:6e:05:c7:53:b2:0b:ce:af:d6:76:c1:b5:b0:39:f1:d8:
eb:7f:c0:fa:fb:4f:06:14:e0:0b:19:88:2e:75:c4:a3:e7:8f:
d1:d7:e3:e0:82:e7:40:08:87:49:98:fd:5f:3f:b8:87:ad:70:
2b:db:7c:fe:8d:04:a0:6d:eb:a5:d5:9d:bb:35:0b:e3:01:79:
96:35:92:8a:ed:79:88:79:d7:01:e5:1d:87:91:25:42:87:67:
59:99:c5:10:49:eb:91:90:8b:b2:86:18:8a:ee:01:c2:11:63:
8b:9d:fb:d2:c5:0b:43:b6:e4:97:df:27:02:1c:9d:66:7b:07:
4e:02:a9:26:7d:2c:1d:8d:b0:51:49:de:31:4c:6c:72:70:82:
5e:09:86:ce:f3:4b:f8:6e:6f:0e:bc:e9:36:60:36:93:3c:0f:
8c:08:da:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:25 2026 by rpki-client