Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145691.roa
File: AS145691.roa (raw, json)
Hash identifier: k+YUxJFm6xLpUKS3FxO59JLSO6Dxbp4qw1XqPxlQ8ZI=
Subject key identifier: 5E:BC:35:0E:A5:D6:0D:E3:D9:01:C7:D6:1D:07:48:18:2B:E6:30:A7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3871187BA711245AB41FB195EE8D10402BF2646F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145691.roa
Signing time: Mon 25 May 2026 03:19:12 +0000
ROA not before: Mon 25 May 2026 03:14:12 +0000
ROA not after: Mon 24 May 2027 03:19:12 +0000
asID: 145691
IP address blocks: 240a:abe1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:71:18:7b:a7:11:24:5a:b4:1f:b1:95:ee:8d:10:40:2b:f2:64:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:12 2026 GMT
Not After : May 24 03:19:12 2027 GMT
Subject: CN=5EBC350EA5D60DE3D901C7D61D0748182BE630A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:b6:9b:e5:c9:fb:d0:fa:2b:51:c8:35:e2:
5c:59:ea:a6:50:28:83:36:08:c6:5d:ce:9b:8a:73:
bb:2a:d3:2b:c6:97:85:8e:b9:ae:c3:64:17:08:b0:
b7:09:99:c3:38:4a:70:55:c6:fc:d9:34:e1:9d:a6:
10:2c:e8:11:8b:0c:be:b8:2b:cf:7f:33:42:e2:76:
d2:63:59:41:f6:c7:db:83:14:c2:4b:70:20:72:a5:
a8:03:fe:3b:a8:52:92:df:9d:53:36:a2:20:4f:29:
48:8f:4e:9a:c4:fc:3f:09:62:70:eb:ec:c5:a5:ad:
b1:02:ec:8f:0a:98:c3:20:cd:c4:c8:a3:12:5c:ba:
d6:5f:e1:c5:41:e3:37:6b:b5:77:9d:9b:6d:2a:87:
9d:6b:48:6b:e7:f8:5d:1d:06:4e:86:15:ac:22:b0:
3a:9e:36:bc:85:66:e6:22:d9:ad:fd:36:5e:79:d8:
43:da:cd:0c:da:61:02:de:e6:2c:20:47:dc:e0:d0:
ff:d1:68:25:e6:58:93:5c:d2:fa:29:37:2e:b0:3b:
0e:de:5b:f8:fc:8f:e4:13:59:9e:0f:1b:bf:4d:8a:
41:fe:7f:25:31:35:88:2c:2b:b8:83:2a:60:b4:f6:
93:76:48:da:0e:20:7d:05:91:07:bb:33:c3:21:2e:
f1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BC:35:0E:A5:D6:0D:E3:D9:01:C7:D6:1D:07:48:18:2B:E6:30:A7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145691.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abe1::/32
Signature Algorithm: sha256WithRSAEncryption
a4:ea:f0:7c:87:a3:15:a5:6a:3f:da:d8:58:fe:29:ea:39:0a:
c7:0e:b7:ef:81:ab:e1:ef:d9:06:fb:3d:8c:a2:df:0c:26:25:
fb:af:7c:35:76:bd:e7:81:d6:9b:e2:c8:27:dd:cd:f1:43:ea:
95:d8:33:3b:c9:9a:d7:13:f4:68:37:0e:bf:50:6f:7f:1b:d2:
50:ab:ee:87:54:71:fc:7f:a8:5e:d9:aa:1c:c8:86:90:12:9c:
91:a6:db:39:1d:6e:3e:eb:97:c4:8d:72:aa:e5:17:16:0d:6c:
76:9c:8b:a2:55:3e:51:00:fe:72:d5:04:fa:40:57:10:1f:27:
ae:bb:72:ec:55:76:20:27:8b:a8:a4:62:7f:d8:59:4a:19:44:
5c:e1:ea:60:08:a2:d7:ef:42:d8:77:e9:96:05:a3:e5:fe:d7:
06:46:c5:a5:3f:34:95:5b:a4:ec:5a:82:9a:8b:df:39:b2:e1:
c5:22:c7:79:8b:7f:02:4d:0c:6b:b5:0a:e2:54:55:15:53:d9:
20:36:66:11:eb:9d:c4:69:47:71:1d:aa:3e:88:e4:eb:96:82:
2e:7c:18:91:58:6b:91:a8:38:9e:54:2f:5e:c8:9e:1f:bb:30:
f7:78:6e:02:a2:05:e4:6f:6e:84:6d:8b:4d:d4:51:55:90:f7:
db:6b:e6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:31 2026 by rpki-client