Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145657.roa
File: AS145657.roa (raw, json)
Hash identifier: Z0NkIb6BnazvMwggEGn9Nb03CL3tOI7inzAU5NJgFg4=
Subject key identifier: 55:28:72:BC:93:F4:1D:01:A6:BE:2F:6E:E4:44:C6:A9:28:62:53:72
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 57E1220AC22499F3B5D0F3C4F50404567681AB19
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145657.roa
Signing time: Fri 22 May 2026 06:27:58 +0000
ROA not before: Fri 22 May 2026 06:22:58 +0000
ROA not after: Fri 21 May 2027 06:27:58 +0000
asID: 145657
IP address blocks: 240a:abbf::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:e1:22:0a:c2:24:99:f3:b5:d0:f3:c4:f5:04:04:56:76:81:ab:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:58 2026 GMT
Not After : May 21 06:27:58 2027 GMT
Subject: CN=552872BC93F41D01A6BE2F6EE444C6A928625372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2e:34:16:b4:c6:90:55:ce:6c:6b:06:08:bb:
da:9c:ca:69:52:bd:49:d9:bb:dc:4d:fd:d0:d6:ec:
46:a5:f4:a2:61:5f:fd:49:f4:1b:ff:b2:a5:5c:9f:
24:6e:14:87:94:21:88:bc:fe:2e:bf:be:01:5b:8e:
c6:0d:3e:8f:6c:63:94:08:b9:e2:1c:86:bc:b7:c3:
cc:8c:75:34:4a:5b:1c:2c:a1:9d:d9:b2:81:11:c8:
bf:14:6a:e0:1c:77:d2:84:19:86:46:23:3d:e4:a9:
21:b9:a5:69:fb:e1:1f:4f:d5:59:23:cc:ca:46:06:
95:74:19:90:0f:2f:d7:ff:ee:7e:5f:c6:42:63:e6:
e8:d0:82:38:72:7a:73:dd:01:03:a0:29:3b:ae:89:
d3:fb:26:61:69:b1:82:32:6f:c5:a6:a2:e5:bc:7b:
46:39:3b:37:14:31:0e:b2:e6:57:41:67:11:9d:bd:
d8:e5:bb:8d:1c:e8:32:9b:c3:91:9c:61:09:b3:48:
fe:f8:46:7d:78:79:61:a1:92:a2:34:f5:86:f2:67:
ee:db:83:7c:63:2f:37:ba:83:53:5c:02:73:93:31:
59:e0:d8:09:0e:ed:2f:26:25:81:ae:3e:27:e6:0c:
98:ed:73:6c:fb:67:83:9a:c8:a6:dc:73:6b:8f:36:
a9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:28:72:BC:93:F4:1D:01:A6:BE:2F:6E:E4:44:C6:A9:28:62:53:72
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145657.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abbf::/32
Signature Algorithm: sha256WithRSAEncryption
54:d9:a9:19:21:8f:09:ec:6f:76:27:ab:c6:c3:b4:3a:7e:9f:
49:3f:29:0b:97:83:6f:ae:6b:4f:cf:f2:c6:93:9d:d2:4d:bd:
9f:9c:cb:12:c8:75:63:69:2e:a4:2e:1b:a4:e4:38:e2:d8:4b:
5e:4b:d5:13:fd:21:22:5a:6a:3c:f5:1b:03:bc:70:97:65:7c:
e7:c7:59:3f:04:48:50:f6:30:fc:2d:b8:8f:5d:c5:c9:41:ac:
57:c1:24:30:d2:b3:56:9e:64:da:6e:6d:d7:62:33:be:be:75:
76:c0:32:a0:e8:07:92:87:41:10:e2:09:eb:15:b0:e0:80:4f:
4f:84:68:44:52:85:57:e4:49:97:fd:c7:cb:e8:79:90:51:d9:
12:d1:fb:86:1b:2c:95:fb:c9:27:24:29:69:79:33:62:56:a2:
35:ea:0e:d8:a8:a0:cc:d1:1f:ae:e1:21:50:a6:94:be:c6:3d:
32:69:d4:c2:4b:03:0c:81:4b:30:36:db:81:50:15:f8:19:a6:
cc:04:a8:d6:fd:c3:3f:ba:d1:10:ff:7e:2e:51:0b:c5:9c:5d:
42:2d:84:78:55:3a:28:73:44:cc:6f:dd:fd:cc:e6:6f:ad:12:
53:82:4d:55:9b:7c:e4:20:18:70:6a:cc:67:6e:73:c9:ec:2e:
63:b2:85:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:25 2026 by rpki-client