Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145668.roa
File: AS145668.roa (raw, json)
Hash identifier: J7QBXcQcPapSJNYlid1u/XncFb1SHYwbRmOfTcvgiVA=
Subject key identifier: C1:4E:D7:97:A1:98:76:AB:89:61:BE:15:49:8A:EC:04:EB:7A:1D:60
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 08D3B9DE429E6971EBE9749B1B666D2627D4EEC6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145668.roa
Signing time: Mon 25 May 2026 01:38:41 +0000
ROA not before: Mon 25 May 2026 01:33:41 +0000
ROA not after: Mon 24 May 2027 01:38:41 +0000
asID: 145668
IP address blocks: 240a:abca::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d3:b9:de:42:9e:69:71:eb:e9:74:9b:1b:66:6d:26:27:d4:ee:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:41 2026 GMT
Not After : May 24 01:38:41 2027 GMT
Subject: CN=C14ED797A19876AB8961BE15498AEC04EB7A1D60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:51:95:c0:2b:22:64:b1:31:f2:ce:3f:4a:
eb:9b:e5:60:3e:d1:a5:3b:57:b6:a5:5e:b9:51:f7:
8a:5d:f0:6b:15:6c:f2:a9:fc:62:07:3f:4b:fa:6b:
bb:e2:0d:23:dd:7d:40:fe:e6:60:7e:1f:24:c8:9a:
a3:e5:ec:f2:c4:54:b0:2a:25:4f:24:cf:15:4e:5e:
aa:44:73:cd:42:b3:1d:ff:c9:6c:7b:0b:e5:f3:f5:
f8:c4:83:f2:28:45:b7:0a:41:64:eb:4e:66:b8:03:
bd:fb:e8:95:bd:94:09:f9:2e:d7:ec:6e:cf:91:62:
7b:62:b5:dd:22:61:ac:eb:45:52:0e:ec:3d:7b:1c:
39:d8:0d:ff:94:7a:77:d9:95:25:3b:42:c1:5f:9e:
2c:84:ea:bc:d7:8b:f6:9d:25:dc:cc:6c:37:76:c9:
1f:6f:b9:ec:51:7a:28:a0:56:5d:9c:37:4c:47:72:
6a:bd:5e:58:12:3b:25:6d:b3:80:66:30:5c:9f:ec:
58:08:0f:4d:7d:52:e8:ce:06:11:56:cc:ea:1f:e7:
a9:6f:83:af:72:84:e8:0b:b6:4d:75:43:db:b3:41:
6a:02:13:91:5e:ae:6c:32:ed:12:af:53:42:dc:7b:
11:1f:7b:9e:8b:80:b2:e3:a5:e4:3a:5d:88:4d:e2:
3d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4E:D7:97:A1:98:76:AB:89:61:BE:15:49:8A:EC:04:EB:7A:1D:60
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145668.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abca::/32
Signature Algorithm: sha256WithRSAEncryption
49:ec:b8:0b:0a:94:58:b9:dd:cf:e2:80:22:89:b3:d3:e8:93:
08:58:63:71:d7:ae:52:e7:d1:e0:64:d0:62:a8:61:49:fc:0d:
43:1f:b0:fa:92:a2:cb:e1:36:97:fb:11:e3:33:1b:15:ae:a4:
99:3e:42:58:c6:b8:af:1d:23:ff:a3:65:97:53:ed:89:ba:ea:
0f:9f:a6:91:cd:e4:c9:6d:4b:54:ba:c3:98:e0:55:a5:17:29:
6a:af:f3:d6:6a:f8:51:db:e0:fc:ec:f5:11:36:e3:92:ed:ca:
73:2c:83:89:df:ae:d7:93:03:74:cb:51:c4:c6:39:df:de:4c:
7d:4b:98:2b:47:35:dc:da:4f:c6:01:9e:fe:09:eb:e1:46:11:
c7:bc:06:4b:cf:53:f2:b7:ae:01:07:c5:10:6c:c1:64:da:2b:
30:57:bd:62:7c:15:8f:01:dd:9e:fe:ff:8d:e6:b5:23:83:91:
3e:c5:f4:8b:7d:84:b1:81:49:75:d6:d0:28:55:86:5d:f5:66:
8a:fb:e8:2e:62:24:96:73:ac:40:0d:70:fe:f5:90:09:3a:c2:
c8:64:b9:c5:14:38:c2:97:88:79:59:d6:e0:c5:01:d9:99:6f:
66:54:a2:44:70:5a:7f:dd:04:34:de:77:7a:67:85:38:40:9c:
1f:11:9a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:39 2026 by rpki-client