Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145666.roa
File: AS145666.roa (raw, json)
Hash identifier: 4DunnP2z3K3AE5LoxgkjisnoURnmlXFzR5d2DxhnfTs=
Subject key identifier: 49:73:41:65:DB:79:46:6C:91:DD:E4:29:17:9A:E8:26:78:FF:A8:FC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 61DA5ED86566F797A00EFB1ADE5A986DC820B62C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145666.roa
Signing time: Mon 25 May 2026 02:22:46 +0000
ROA not before: Mon 25 May 2026 02:17:46 +0000
ROA not after: Mon 24 May 2027 02:22:46 +0000
asID: 145666
IP address blocks: 240a:abc8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:da:5e:d8:65:66:f7:97:a0:0e:fb:1a:de:5a:98:6d:c8:20:b6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:46 2026 GMT
Not After : May 24 02:22:46 2027 GMT
Subject: CN=49734165DB79466C91DDE429179AE82678FFA8FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:02:06:55:67:fc:ad:82:16:19:a9:db:0a:dc:
0f:b6:20:4a:67:35:4c:88:c6:f3:d0:cd:bb:39:97:
2b:c7:25:8a:2e:27:00:24:1e:2a:c0:77:45:b9:13:
b5:fc:de:c7:80:5b:86:3a:cc:ab:35:42:72:3c:69:
96:88:6a:8a:c2:c1:63:ca:68:bc:c2:5f:19:be:1e:
eb:3b:a8:a1:80:b9:b6:ea:e7:d7:a4:73:22:92:98:
d5:4d:75:3c:54:20:bc:19:30:3c:10:46:8a:8e:b0:
38:20:8b:46:91:e0:fd:b3:f4:48:51:46:1f:32:f0:
07:a7:91:c9:26:4b:54:72:74:81:2c:92:16:d1:14:
09:4e:a2:5b:51:e1:5b:f7:e3:53:69:be:63:30:50:
26:ad:7f:53:e5:d3:af:7b:48:40:e4:70:b2:b5:4b:
37:06:b4:41:3b:bf:41:a7:f2:2f:79:52:5d:46:52:
06:35:6d:f4:ba:b4:0f:65:67:db:c3:ca:b4:d6:39:
c3:b2:22:7c:8f:ad:41:59:91:19:7d:07:a4:70:33:
e4:24:43:82:32:8a:e1:9a:60:5a:05:43:60:e9:0f:
5e:af:ca:31:92:60:d3:3c:e6:49:82:82:21:be:3a:
89:43:53:c4:d6:ad:71:59:00:7e:b1:ce:8c:6f:11:
97:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:73:41:65:DB:79:46:6C:91:DD:E4:29:17:9A:E8:26:78:FF:A8:FC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145666.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abc8::/32
Signature Algorithm: sha256WithRSAEncryption
8f:9c:99:96:97:b4:ca:e3:51:4f:d1:49:c4:2c:92:ca:ba:6e:
73:3d:5b:ec:e3:c0:d7:28:35:78:16:23:a3:59:91:90:d8:23:
e5:5c:ea:a7:54:38:f7:c6:5a:5a:b3:b6:e7:bc:b1:50:13:4d:
a8:75:3d:63:6b:f7:bb:08:2a:0a:03:7e:6e:ab:d9:79:6a:1c:
ea:38:39:9e:0d:43:b4:ee:bb:d4:1b:51:c6:30:3f:57:f1:b7:
52:4b:26:55:8f:70:d5:0b:92:d6:92:8a:f7:16:90:25:93:31:
de:b4:79:b0:e4:26:e5:8f:ad:3b:2e:49:a3:5b:9b:87:a7:ce:
42:a2:72:02:ba:27:77:83:bb:da:31:00:84:99:2c:05:e6:29:
38:e6:44:80:02:94:5e:84:23:68:26:3a:d2:72:b8:a8:61:99:
2e:96:8c:c2:c5:2a:35:1a:38:04:5c:71:a2:5d:0c:4c:02:c5:
23:38:a0:08:55:3a:11:c5:f2:82:15:7a:d7:d7:cb:38:6c:ea:
1e:8a:c4:a9:ef:20:26:d7:4e:d5:e7:c7:e0:72:78:fe:4c:10:
9c:e1:09:48:81:b7:3b:ca:c5:74:e5:40:cf:c7:38:b6:14:0b:
ce:9c:fc:46:3b:69:de:df:64:e3:c1:6c:97:6d:21:0f:4b:8d:
17:29:5c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:40 2026 by rpki-client