Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145702.roa
File: AS145702.roa (raw, json)
Hash identifier: gQSSAkKgMmoVbxvAAnikzdMVcMuWd4Fr+sR2eeLxn0w=
Subject key identifier: 26:AE:5F:F0:C0:D6:71:74:32:11:A7:83:14:B6:26:27:43:2D:11:61
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7C8A6B3086C56DFB06FC598EDC6CA472F40D0539
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145702.roa
Signing time: Mon 25 May 2026 03:19:33 +0000
ROA not before: Mon 25 May 2026 03:14:33 +0000
ROA not after: Mon 24 May 2027 03:19:33 +0000
asID: 145702
IP address blocks: 240a:abec::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:8a:6b:30:86:c5:6d:fb:06:fc:59:8e:dc:6c:a4:72:f4:0d:05:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:33 2026 GMT
Not After : May 24 03:19:33 2027 GMT
Subject: CN=26AE5FF0C0D671743211A78314B62627432D1161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:80:7c:15:f5:94:85:75:d6:42:58:3a:6d:d8:
82:ae:ea:88:58:5b:29:72:d3:84:04:f4:58:56:ea:
67:4e:3c:da:ea:ce:68:02:00:02:a8:e5:45:18:88:
d5:e1:df:b4:54:85:4a:c2:34:27:53:d2:f3:5c:2b:
f3:2c:5c:2d:0e:60:4e:6b:74:b0:00:08:1d:4b:b3:
11:a4:78:e2:93:d5:5d:50:6e:86:2d:39:c9:9f:ed:
e8:4f:c1:71:47:5f:6b:34:0a:02:02:04:39:ef:10:
ec:f6:15:59:c8:7c:7b:39:dc:28:d6:e9:cb:05:1a:
59:cf:51:bc:0b:68:10:84:8c:32:67:11:b9:80:1a:
1a:d2:60:87:68:1c:54:8b:fa:bf:a5:ba:b1:f7:8b:
64:4e:05:c3:aa:ab:af:42:1d:7a:87:8b:35:35:ae:
53:83:e4:fe:95:b0:30:dc:07:48:e6:75:fe:c0:59:
e6:97:67:79:10:68:31:54:59:13:bf:d8:51:11:bd:
c1:08:ce:5e:29:a3:bc:6d:04:9e:95:aa:c7:0c:74:
58:79:7a:6a:5a:83:ae:52:fa:e5:a1:04:cd:d2:f4:
2a:57:fa:0e:db:39:94:4d:02:20:42:97:e6:e9:f2:
db:8f:aa:90:42:cf:e2:c7:cc:32:b4:16:a9:fc:9b:
02:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AE:5F:F0:C0:D6:71:74:32:11:A7:83:14:B6:26:27:43:2D:11:61
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145702.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abec::/32
Signature Algorithm: sha256WithRSAEncryption
06:27:4d:25:79:93:2e:66:d0:a3:85:fe:3e:4e:69:db:ca:5c:
1d:1a:66:cb:b3:08:ee:8a:70:3f:d5:ef:3d:0e:6e:f7:b4:9c:
3c:70:f2:ab:79:09:d9:e0:86:3f:12:db:cb:4b:b2:75:23:63:
77:ad:cc:75:90:2b:a6:8c:b7:80:19:0d:d8:05:3a:e3:34:20:
6f:99:f0:b8:6d:52:14:97:cd:57:80:8f:14:af:22:5b:2d:ca:
9a:2a:c2:1a:87:53:c7:a4:0d:89:64:b9:15:ba:57:0d:b0:08:
43:b1:e3:03:6b:ce:01:2b:83:35:ab:96:f3:21:17:11:92:7e:
69:70:cf:e8:50:d7:21:c2:85:9b:fa:25:b1:eb:67:37:11:27:
e8:db:c7:61:96:bf:d3:9e:e0:12:3f:2b:ae:fe:9b:74:5c:c1:
4e:37:69:6f:21:34:90:8a:28:6a:2b:9d:b6:d1:7b:dc:5f:8d:
72:8b:88:29:b1:0b:a5:62:d0:10:4c:36:fa:c2:47:eb:33:9e:
cc:aa:4e:9b:4d:6a:36:3a:d3:8b:18:0f:82:4e:c0:95:fd:07:
2f:09:43:eb:f5:15:e2:0e:d3:93:7e:26:b9:ee:ea:37:fa:ed:
f1:3b:9a:57:4e:5e:af:54:73:33:7d:7d:87:ee:19:51:d9:f5:
3c:96:74:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:21 2026 by rpki-client