Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145662.roa
File: AS145662.roa (raw, json)
Hash identifier: bZqKZd27accRQjWjSaEpBSA/MfKzrP3a0XWxi0dTekA=
Subject key identifier: 23:AB:4B:1C:D5:C7:0E:37:3E:3D:36:4D:FC:07:FE:28:13:51:8C:85
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 528D08EBCB2CFC38E86C73F4A055B46575C34313
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145662.roa
Signing time: Fri 22 May 2026 01:50:38 +0000
ROA not before: Fri 22 May 2026 01:45:38 +0000
ROA not after: Fri 21 May 2027 01:50:38 +0000
asID: 145662
IP address blocks: 240a:abc4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:8d:08:eb:cb:2c:fc:38:e8:6c:73:f4:a0:55:b4:65:75:c3:43:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:38 2026 GMT
Not After : May 21 01:50:38 2027 GMT
Subject: CN=23AB4B1CD5C70E373E3D364DFC07FE2813518C85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c4:ae:91:a4:c3:08:88:68:d4:b8:3b:e2:24:
1d:97:ae:da:64:03:50:6d:dc:21:23:0a:1c:bf:a5:
16:55:e4:f6:38:7c:2f:93:5c:a3:04:3f:fb:e9:00:
bd:d6:88:2b:15:09:75:4b:5d:d0:6d:08:a9:a5:6e:
26:8e:85:f2:a6:c6:31:ea:63:30:38:72:79:38:dc:
ae:32:48:d8:cd:37:02:2b:5b:3e:27:37:46:3b:98:
05:6f:7e:43:c2:97:f1:ff:4c:a6:3b:27:3c:63:58:
37:9e:da:12:16:d6:bc:95:8b:73:ac:4c:70:a8:be:
18:4f:f2:46:db:14:a4:6c:1b:10:7b:e0:ab:3e:08:
6f:d2:39:8e:5f:37:af:21:ee:ad:61:99:ee:7d:8c:
cb:3d:68:78:f3:4f:97:c7:38:37:28:31:4d:ca:dd:
e5:49:ec:09:5a:ee:27:63:ee:3b:cb:ef:4a:4c:39:
93:13:d3:2d:be:20:e4:f6:27:5f:05:f7:01:f2:aa:
6e:fc:5b:42:eb:d9:db:5a:e4:0d:a3:87:d9:98:32:
41:57:e4:b7:71:37:68:53:ce:e8:9c:3a:72:ac:38:
fc:f8:c8:e6:fb:92:4a:39:ea:ed:e3:3e:ff:e2:cc:
5c:0f:f4:dd:16:8b:95:9a:e5:a8:db:1f:c8:ae:66:
69:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AB:4B:1C:D5:C7:0E:37:3E:3D:36:4D:FC:07:FE:28:13:51:8C:85
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145662.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abc4::/32
Signature Algorithm: sha256WithRSAEncryption
95:0e:78:32:be:cf:94:a4:89:15:86:4b:63:4f:9c:5e:58:2e:
c9:19:4d:3e:45:6c:e3:c1:9f:97:3d:9a:bd:84:c3:7d:7b:2b:
bc:7f:5d:8f:b8:86:ef:fd:66:29:ef:0b:49:f5:3e:ed:91:98:
a7:72:bd:d3:64:bc:6d:73:1f:b9:b4:a4:92:f9:94:26:d1:31:
be:1b:be:2d:71:c2:28:60:12:03:89:9e:58:b7:68:aa:1b:39:
52:e9:5a:21:7c:4f:aa:2c:50:ef:51:32:f3:80:b3:a6:e3:c8:
38:b5:b9:f8:77:ba:e3:86:a7:08:08:76:2f:36:f4:c2:c3:cb:
ae:41:de:f8:51:49:17:76:55:4c:37:04:e9:c2:fd:06:bc:09:
80:e9:d9:dd:09:24:e9:57:3a:82:4d:fd:1b:21:a4:c0:e2:49:
a3:2b:ef:f1:2e:9e:bb:c5:e7:75:d8:ad:22:02:70:bf:fd:99:
e6:e8:66:bd:9a:4f:f4:59:11:ac:bc:e9:22:9c:27:0a:84:7d:
b8:71:4c:f8:c4:e8:eb:7c:98:e4:69:82:40:2a:c0:cc:fd:57:
c4:f5:95:53:1f:62:f6:08:22:84:9c:8f:9d:c7:38:ca:13:86:
a4:bb:59:8e:42:2a:52:f3:aa:6c:3e:b8:d1:98:41:06:a4:40:
18:89:c5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:35 2026 by rpki-client