Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145696.roa
File: AS145696.roa (raw, json)
Hash identifier: HXgNa/sgMXP4ePgHnHngNU1bvQvKcxaR3E8o3+A3Q+g=
Subject key identifier: 11:E7:E3:F6:FB:DA:28:B0:57:B0:B5:67:9B:69:12:81:B7:81:F5:FE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0801DEE1FE547505359864E1D6E45942EB43C985
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145696.roa
Signing time: Fri 22 May 2026 06:27:35 +0000
ROA not before: Fri 22 May 2026 06:22:35 +0000
ROA not after: Fri 21 May 2027 06:27:35 +0000
asID: 145696
IP address blocks: 240a:abe6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:01:de:e1:fe:54:75:05:35:98:64:e1:d6:e4:59:42:eb:43:c9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:35 2026 GMT
Not After : May 21 06:27:35 2027 GMT
Subject: CN=11E7E3F6FBDA28B057B0B5679B691281B781F5FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:1a:32:4c:37:c8:cc:75:eb:3a:94:d2:0b:d9:
83:7a:e6:38:e7:15:48:0b:5e:46:ed:22:3e:1b:7b:
2a:67:40:31:6c:32:fc:53:27:f6:f2:1c:e9:fd:f7:
6e:af:44:a2:5f:38:7c:8d:ed:79:ab:56:fb:a6:d3:
50:82:61:f5:f6:c3:a7:ad:97:ad:6a:e4:db:85:ac:
7b:12:86:a6:1e:11:8b:28:51:37:4e:53:d4:93:b9:
c6:80:1a:45:81:a1:00:35:42:38:78:17:68:4a:97:
a9:45:26:8a:0d:00:b3:6a:a1:71:a3:c4:7a:ce:54:
81:07:14:59:d2:e0:e7:ef:53:df:47:7e:31:af:d1:
7c:db:b1:a1:5b:5a:96:25:00:f9:fe:5c:b7:2d:61:
49:d1:9a:07:d6:4f:79:9c:de:f8:90:4e:f3:44:15:
c8:49:ee:37:fa:69:66:95:fa:09:a8:b1:17:fe:37:
5f:f8:3c:5a:46:55:c0:fa:53:e2:c9:e7:cb:68:cb:
85:93:ed:7d:69:57:e5:2f:e7:48:8c:04:4d:67:19:
4c:8b:9f:64:d1:21:a6:40:f6:70:47:dc:14:db:fc:
d2:6e:ae:0b:9c:f5:5a:8b:fa:8b:81:b3:11:b2:d6:
03:02:79:17:1b:3e:2e:a5:2d:f4:21:42:4f:ac:bc:
af:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E7:E3:F6:FB:DA:28:B0:57:B0:B5:67:9B:69:12:81:B7:81:F5:FE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145696.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abe6::/32
Signature Algorithm: sha256WithRSAEncryption
a9:a1:90:88:84:5f:72:cb:10:f2:51:26:78:11:06:c6:3d:2d:
57:df:3c:4c:2e:3b:28:9b:ba:80:3f:e0:5d:5b:e3:75:97:aa:
55:99:02:65:c9:70:51:53:b7:74:d6:c3:ce:8b:62:6e:93:4b:
29:2e:e1:84:ca:77:ac:87:e8:6d:2f:fd:9d:ab:90:51:55:51:
af:2d:94:0d:14:33:70:54:39:ae:3b:c9:b9:7f:a5:5a:7e:c9:
46:a5:cc:c7:4b:43:2e:b5:51:e9:eb:05:e6:23:48:dd:9d:60:
ca:3b:ec:a8:ec:03:be:c8:af:d7:ad:8e:6f:42:85:e7:8f:c9:
c9:0d:2d:02:1f:a5:7c:47:52:c0:ed:6a:b3:3d:76:7e:af:cb:
09:fb:67:01:37:1b:44:fb:85:d2:5e:7a:c3:b5:55:f8:17:9c:
d4:1e:35:5c:f1:9b:23:48:d1:50:46:a3:a5:90:45:47:b9:ee:
eb:b4:51:31:96:62:1e:3e:55:7b:4a:68:3d:08:67:ac:d2:fd:
9e:d4:59:35:a8:a9:15:41:45:70:a3:41:2d:94:e5:24:6a:38:
a3:30:c8:99:27:cd:a5:66:08:ec:ee:42:c5:91:25:f0:04:88:
65:70:f4:cb:7b:90:1f:cd:a7:1a:66:73:0e:b2:9b:0f:a9:90:
94:c8:ec:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:37 2026 by rpki-client