Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145684.roa
File: AS145684.roa (raw, json)
Hash identifier: a4lskOfUe++iQ0CsAg3EpsD/qXR6DDWvuyC+vo6G9+c=
Subject key identifier: 13:8F:C8:CA:34:E2:A8:01:E9:DD:93:37:7B:B6:DF:98:3C:6E:0C:37
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 66C24BED17CA0FBE8D33CE284D3C949EA215CE73
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145684.roa
Signing time: Mon 25 May 2026 06:49:02 +0000
ROA not before: Mon 25 May 2026 06:44:02 +0000
ROA not after: Mon 24 May 2027 06:49:02 +0000
asID: 145684
IP address blocks: 240a:abda::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:c2:4b:ed:17:ca:0f:be:8d:33:ce:28:4d:3c:94:9e:a2:15:ce:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:02 2026 GMT
Not After : May 24 06:49:02 2027 GMT
Subject: CN=138FC8CA34E2A801E9DD93377BB6DF983C6E0C37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ec:87:67:9a:65:27:99:16:5f:94:69:dc:2c:
f9:e7:e9:11:e6:38:28:68:8a:57:e9:cf:44:b2:18:
76:05:20:f4:60:b3:d6:60:55:7c:31:02:31:03:99:
6f:2c:62:2c:40:7e:61:c1:d9:d8:47:66:8b:f0:84:
94:e9:a7:48:d3:6e:77:25:16:bf:e0:71:db:1f:12:
5f:4d:cf:05:a2:c4:ad:6a:dc:50:8f:8a:8b:bb:2e:
b7:2b:92:37:86:f6:5e:5f:ac:5c:8d:e1:64:f7:b9:
90:d7:19:0f:b9:aa:16:18:1c:bb:d9:30:f0:1e:89:
e6:98:da:b6:8e:93:4e:90:fd:0f:47:16:16:a7:cd:
ee:74:b3:c5:6c:36:96:e0:fe:63:80:21:12:76:3e:
de:58:d1:47:75:2f:c0:13:05:ae:2e:73:7d:db:07:
90:93:c7:26:b5:24:c2:42:18:66:71:76:69:80:30:
82:cc:24:5e:37:d8:1f:85:03:ac:be:86:b4:ab:95:
6e:a7:45:58:4f:c1:fd:34:bf:82:76:cf:1e:82:97:
7b:23:84:93:df:5f:48:03:e5:b9:85:7d:89:50:cd:
e1:0c:a0:6a:30:27:4d:cd:c6:89:d6:a7:37:c0:9f:
11:68:52:d7:e1:5c:df:53:3e:34:66:91:0d:e4:ad:
7c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8F:C8:CA:34:E2:A8:01:E9:DD:93:37:7B:B6:DF:98:3C:6E:0C:37
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145684.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abda::/32
Signature Algorithm: sha256WithRSAEncryption
67:61:90:d3:49:39:44:b0:c2:d5:47:b1:69:79:c1:fa:f3:0a:
f4:4a:56:5c:21:b1:e0:ce:8d:7c:d5:47:9b:b8:e1:42:76:1b:
cd:e4:72:81:e6:8f:a2:d4:94:57:ae:eb:c8:41:4e:0f:0d:92:
8d:f2:06:1f:31:d7:7d:e4:f6:e9:53:63:c1:a1:8a:01:7a:77:
0c:f1:27:1d:31:70:8f:f5:85:27:c1:6c:a6:02:7d:ac:55:a5:
76:05:57:2f:8a:83:7e:da:4d:db:aa:90:b5:91:01:f3:6b:6f:
7d:df:03:f5:b4:56:b1:27:a7:7c:7e:03:ba:20:ad:e4:0c:e6:
02:58:aa:19:19:04:78:39:25:94:f3:5a:68:90:b7:36:8c:15:
c9:0e:91:8d:54:d2:76:51:d7:5c:3a:88:5b:ec:f2:46:f4:cc:
11:53:42:6d:e4:75:b9:ef:97:5b:a8:09:66:4c:40:d2:c7:5d:
75:1c:4d:c8:b2:bc:27:15:c5:e6:25:a8:67:f1:20:db:28:b7:
0d:ba:ec:ae:c5:8f:8e:5c:2f:8b:74:36:a5:a3:81:8f:dd:40:
04:f7:fd:e8:c4:f0:f0:02:77:11:8f:c4:85:f0:e0:96:a0:a4:
9e:72:6a:57:ba:42:f2:36:57:97:79:54:4f:82:51:06:1f:72:
1c:5c:24:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:27 2026 by rpki-client