Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145663.roa
File: AS145663.roa (raw, json)
Hash identifier: +zHKTpDWSt9JStZ6a5nqGNjWDxjp6nU7AifaL8M0q/U=
Subject key identifier: 36:8F:8F:0A:6C:7F:E3:B0:47:A6:95:D5:D0:1A:56:59:83:20:8A:88
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2FF21E0AA3C13B1DAD7BE4B0B63B2B230676C087
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145663.roa
Signing time: Mon 25 May 2026 01:38:15 +0000
ROA not before: Mon 25 May 2026 01:33:15 +0000
ROA not after: Mon 24 May 2027 01:38:15 +0000
asID: 145663
IP address blocks: 240a:abc5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:f2:1e:0a:a3:c1:3b:1d:ad:7b:e4:b0:b6:3b:2b:23:06:76:c0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:15 2026 GMT
Not After : May 24 01:38:15 2027 GMT
Subject: CN=368F8F0A6C7FE3B047A695D5D01A565983208A88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:50:77:ac:9d:4c:3b:b5:f7:ff:bc:43:4b:3d:
19:0c:08:86:8e:28:0b:51:8c:3d:bb:9b:6d:b4:b4:
36:84:7b:03:5c:bf:9c:9c:1e:13:d2:b3:6c:ad:b5:
9c:d7:26:f7:ec:2f:83:7c:11:21:4d:4d:0f:dd:00:
18:c9:ec:11:c1:cb:34:c0:b4:0d:c1:fb:c0:8f:8d:
67:c1:dd:71:dd:04:ae:99:31:38:70:65:fc:80:d3:
74:80:62:39:0c:87:2d:9f:33:4c:48:a5:c0:28:d4:
f3:05:9d:eb:70:ed:af:17:3f:13:47:a5:79:be:31:
8c:58:36:5d:e9:7c:7c:1d:dc:3e:7a:f8:69:77:e0:
c5:45:f8:9e:8c:2e:24:a8:b1:46:9a:a2:14:33:fd:
c9:1c:34:d5:af:a5:59:b3:06:c3:0c:0b:08:9c:50:
46:9c:ff:95:57:c3:77:36:ad:50:d8:a5:98:7f:76:
f3:1e:87:a6:40:b4:f0:fe:95:05:f0:dc:fd:f9:30:
27:75:4d:84:79:12:e4:58:82:7a:cc:cd:9c:91:ef:
03:78:32:bc:a5:e0:78:e4:fd:88:b7:35:65:eb:b4:
1b:1d:1e:9c:9a:3c:df:5f:11:9e:a0:99:4e:de:8c:
1f:63:25:02:ba:8c:dd:5f:73:0d:96:9e:4d:14:16:
5b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8F:8F:0A:6C:7F:E3:B0:47:A6:95:D5:D0:1A:56:59:83:20:8A:88
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145663.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abc5::/32
Signature Algorithm: sha256WithRSAEncryption
ba:1c:d0:59:84:d0:dd:0b:f9:c4:e9:4c:6e:9b:82:5a:43:2e:
7a:64:88:fc:85:b5:0c:21:bd:3f:3f:ea:3b:37:45:d9:0a:b0:
84:ea:05:73:ce:57:c0:3b:f1:3b:f7:2d:62:67:37:70:4e:a2:
ae:94:b7:c2:09:fc:0e:18:1d:16:2c:40:11:c7:e0:4b:c9:af:
11:b1:ac:b6:3c:1b:ba:b5:0c:30:89:cd:db:ed:e0:fc:8f:e5:
06:3c:e0:e9:40:45:a9:17:c3:37:0a:07:47:6c:53:81:75:c7:
a4:b3:43:eb:41:a7:d0:40:dc:88:5a:62:1e:31:77:53:22:01:
a7:49:f3:87:18:b0:15:f3:f1:52:57:a2:98:d3:4d:0a:64:15:
b8:30:66:05:12:53:5c:9b:56:b7:eb:2f:38:12:26:77:b4:fa:
d8:38:7f:fc:45:2c:5c:6c:75:73:c2:80:ae:e6:38:c9:4e:14:
d8:fd:40:e2:2b:26:41:79:1b:08:4a:fe:b5:e2:9f:08:e2:ee:
c4:0d:e6:66:e7:66:9a:d1:46:5d:8a:c1:40:2c:68:c5:50:88:
99:67:00:c3:26:d5:d7:53:63:75:33:c6:79:7d:8f:5d:d6:49:
8d:76:4b:3e:50:43:43:45:b7:5f:7f:8f:c0:40:ab:da:92:a6:
60:a7:e5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:56 2026 by rpki-client