Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145707.roa
File: AS145707.roa (raw, json)
Hash identifier: hk4+koQwUrmUCvxsGa7KJIy3e/Q9kv9yRxVxF8/btLo=
Subject key identifier: 72:53:14:4D:C8:CD:54:25:E6:DF:E8:EE:D3:42:18:37:35:02:8E:C9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1FF7AECD22DAD85EFEECF1E652F23280E687EDE2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145707.roa
Signing time: Mon 25 May 2026 02:22:24 +0000
ROA not before: Mon 25 May 2026 02:17:24 +0000
ROA not after: Mon 24 May 2027 02:22:24 +0000
asID: 145707
IP address blocks: 240a:abf1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:f7:ae:cd:22:da:d8:5e:fe:ec:f1:e6:52:f2:32:80:e6:87:ed:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:24 2026 GMT
Not After : May 24 02:22:24 2027 GMT
Subject: CN=7253144DC8CD5425E6DFE8EED342183735028EC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:76:31:3f:71:68:f1:d2:e4:96:d3:9c:d1:44:
62:78:aa:8c:ea:95:25:23:9b:52:7f:43:d0:7d:d9:
a3:8a:81:31:ae:c5:bf:38:4c:60:14:28:60:2e:48:
69:dd:a6:72:03:f9:71:3c:72:e8:0b:2e:8b:19:0b:
c6:7c:46:1f:d0:f7:7e:af:12:a3:08:d3:35:6a:e8:
83:b2:f4:27:4a:fb:28:41:dd:77:74:cd:5a:d6:87:
03:59:4a:05:85:c1:9f:2b:d1:8c:13:63:ab:56:52:
cd:d9:ec:e5:4b:64:9c:76:9a:b9:8f:d7:ec:19:88:
a7:ff:8d:0b:a0:3f:b5:19:49:07:f0:19:9a:c9:56:
2f:8a:bb:f7:1b:c7:3f:b9:0e:ac:16:23:fc:56:f6:
55:ed:e5:52:a3:52:4b:7a:70:c6:7b:88:0f:0f:db:
7c:5a:c5:23:56:74:49:74:3c:a8:30:d5:71:22:3a:
cf:28:55:a5:75:ec:01:30:d3:de:43:13:e0:71:8e:
28:85:91:86:b5:f1:bd:3f:0c:04:c3:74:8b:dd:3e:
05:cf:ed:7e:35:0e:ed:65:ce:94:62:0d:0a:b5:59:
6f:f4:a3:b1:24:70:26:69:39:3a:f8:2f:2e:6e:e5:
f1:b4:e7:de:be:7e:a6:b8:6b:54:be:e1:cc:30:cc:
a3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:53:14:4D:C8:CD:54:25:E6:DF:E8:EE:D3:42:18:37:35:02:8E:C9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145707.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abf1::/32
Signature Algorithm: sha256WithRSAEncryption
bb:dc:3b:ce:c8:c2:32:19:bd:df:1b:77:b6:a2:20:f8:5c:e8:
af:59:8a:eb:76:48:4c:c0:13:ee:23:6b:56:c4:70:91:5c:74:
d2:af:74:23:2e:e4:53:bc:0b:2b:ca:81:e8:6e:73:51:b0:6a:
0b:71:82:0a:ba:98:14:d0:e1:8d:a4:30:3a:e1:6e:ca:26:da:
4d:1f:bf:3a:dd:2f:27:18:90:a0:7d:fc:7c:88:41:36:57:14:
4d:c8:63:b1:1e:99:a3:ab:e9:35:8b:c8:f0:e1:7c:70:f3:83:
32:66:95:1a:df:b7:94:dd:cd:77:6d:ad:54:bf:bc:b3:69:f3:
31:0d:eb:ae:d1:f2:59:7d:33:fb:79:c5:f7:76:d2:c7:74:2b:
16:2b:f6:66:5d:07:ac:3e:bb:ba:65:72:d8:6e:54:93:be:e5:
e1:32:3b:28:1f:c7:2c:2f:0a:80:b0:1b:59:73:70:a5:19:e4:
42:17:4e:c7:27:2e:04:bc:2e:45:e7:40:01:3b:a2:fb:e8:5c:
38:33:64:f9:3c:bc:4a:70:5f:77:b2:01:d2:e3:cf:e9:f1:a8:
f2:32:6b:14:4b:2e:94:e8:5a:a0:76:33:5b:65:df:11:30:c6:
99:0b:27:64:92:9b:06:20:66:88:77:df:f6:24:ed:61:61:c1:
5a:e3:b5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:27 2026 by rpki-client