Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145687.roa
File: AS145687.roa (raw, json)
Hash identifier: OWeRN38DLPBevW0Lq9sjeYzW+pCC77QqmR8AhuJlsWk=
Subject key identifier: DA:DB:AC:95:EE:5E:2B:3C:3A:68:9E:0E:7D:5F:BC:33:F2:BA:0D:84
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 52DCF01ABA946CA1AE0A75F0C46593D8B0CE41E2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145687.roa
Signing time: Fri 22 May 2026 07:24:44 +0000
ROA not before: Fri 22 May 2026 07:19:44 +0000
ROA not after: Fri 21 May 2027 07:24:44 +0000
asID: 145687
IP address blocks: 240a:abdd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:dc:f0:1a:ba:94:6c:a1:ae:0a:75:f0:c4:65:93:d8:b0:ce:41:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:44 2026 GMT
Not After : May 21 07:24:44 2027 GMT
Subject: CN=DADBAC95EE5E2B3C3A689E0E7D5FBC33F2BA0D84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:84:e7:09:a5:2c:79:34:97:8e:7b:57:2e:
6a:3a:fc:7a:75:72:b4:50:53:d0:17:d2:36:92:d5:
9f:70:56:17:41:a7:1c:b1:e2:54:78:41:0a:59:71:
65:7e:97:34:0d:65:21:f7:cd:75:72:7e:53:c2:0d:
a8:23:82:48:b0:7e:19:5d:fa:f8:e2:97:af:72:04:
03:65:57:c5:eb:68:a0:e5:46:fe:48:d8:a3:15:54:
c5:7b:89:c8:40:08:45:79:91:1e:cd:62:57:3c:78:
b8:95:f2:81:fa:44:7e:f1:ee:c8:fb:cf:5b:f6:36:
d3:3f:41:3e:96:8c:d6:9d:ad:bc:51:e5:ab:c2:39:
fa:dd:2a:a0:06:8d:14:c1:83:10:a0:bd:01:b3:fd:
3e:ce:9d:50:be:7e:e9:aa:6a:ce:74:76:4f:37:d9:
5e:c2:f3:7f:0f:8d:e8:18:6e:25:db:f3:c5:5f:51:
5e:18:0a:fd:c6:cb:34:2f:59:cb:5b:ea:6f:43:31:
24:b0:43:0c:d1:1d:ba:f0:d4:a6:e4:26:7c:f7:41:
b6:52:2f:18:1c:51:9d:58:da:63:76:9f:ee:bf:b7:
30:18:84:ea:27:e4:f3:2b:8c:04:49:88:0d:a8:87:
e4:95:8d:65:a6:b2:81:63:ea:6f:0e:89:89:04:9e:
2a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DB:AC:95:EE:5E:2B:3C:3A:68:9E:0E:7D:5F:BC:33:F2:BA:0D:84
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145687.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abdd::/32
Signature Algorithm: sha256WithRSAEncryption
1e:5e:5d:79:4c:06:23:0f:c1:f3:46:f1:05:03:0d:18:81:8a:
e8:a3:e2:f5:ad:f6:e2:45:8f:46:ea:ba:b2:76:1f:2a:55:f6:
48:75:e4:ae:64:f4:cc:74:3f:0a:98:5a:36:89:2f:fd:14:20:
d8:0b:8b:e6:90:2f:93:82:1d:59:a4:54:ea:c8:ea:57:09:1e:
b8:26:89:ca:44:ae:0e:9c:b2:83:63:05:44:81:7d:85:d9:b5:
cb:ec:cf:99:68:63:55:74:d4:d9:0f:b2:6c:cb:1f:fa:d2:51:
a7:fa:77:7e:2f:8d:b5:e6:5f:e6:ea:b9:de:2a:1a:1c:e4:19:
df:50:e8:3a:91:e6:57:cd:24:e4:da:0e:08:91:de:50:af:df:
a2:c2:3b:26:2e:b6:bf:2f:99:5a:b4:58:53:f8:80:a7:f2:78:
ec:c5:e6:46:3d:49:63:dc:51:20:fc:11:25:0d:56:75:b6:46:
4c:e0:fc:b0:af:7b:8f:b2:82:4d:f3:01:ac:45:cc:33:ee:22:
c2:79:16:d0:c7:d6:9f:dc:bf:2d:a2:b3:89:ad:99:ef:07:4b:
98:5c:db:3d:56:7f:9a:34:1d:6a:52:2e:0b:8f:c0:d1:d3:b8:
ae:7d:12:78:6f:d7:d9:12:4b:92:26:ab:9d:e2:16:0f:c5:a9:
37:3c:bb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:49 2026 by rpki-client