Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145719.roa
File: AS145719.roa (raw, json)
Hash identifier: LRoMHm97XTY0ycCrgdrWP+zDV+Qp6fgJmhvU9KNcyGs=
Subject key identifier: E5:9D:21:4D:23:A1:30:05:93:6B:90:64:CB:6F:4D:62:64:79:76:3E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 67B895AC637CEFF24645D889870C3EBEE8E17E97
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145719.roa
Signing time: Tue 26 May 2026 03:17:00 +0000
ROA not before: Tue 26 May 2026 03:12:00 +0000
ROA not after: Tue 25 May 2027 03:17:00 +0000
asID: 145719
IP address blocks: 240a:abfd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:b8:95:ac:63:7c:ef:f2:46:45:d8:89:87:0c:3e:be:e8:e1:7e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:00 2026 GMT
Not After : May 25 03:17:00 2027 GMT
Subject: CN=E59D214D23A13005936B9064CB6F4D626479763E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:c1:61:bb:31:2d:d4:b6:5a:4c:4d:71:63:
b4:a4:55:72:74:80:a3:45:c6:29:1f:32:97:56:c2:
41:59:3a:de:39:c4:da:53:43:71:72:ea:44:67:0d:
fb:ae:93:76:7b:83:08:3c:96:33:39:a9:0a:94:47:
77:f5:d1:38:83:de:10:c3:a8:a8:45:ef:d0:29:7d:
34:7c:5d:00:47:75:ad:54:50:88:6b:85:76:8b:df:
87:dc:86:01:76:f0:3f:9c:62:69:8e:cd:58:48:8c:
42:b7:6d:4b:35:74:a5:44:53:60:9b:2c:a5:1f:50:
90:3f:eb:90:0b:dc:00:4e:b2:b3:0e:20:85:78:24:
bd:83:ca:19:52:a1:f8:3f:f0:ad:2c:b5:98:e9:d9:
a4:b0:af:8f:2e:e0:6c:29:1f:ef:8f:04:dc:f8:bf:
d4:0f:ee:5d:7f:e4:9b:05:38:09:6b:8a:8b:f4:a0:
0b:36:c8:d5:34:dc:42:3f:59:b3:5c:6f:e6:24:6e:
d2:c2:21:d0:a4:5c:98:ee:d5:80:b0:bf:fc:70:7f:
44:8d:4a:ba:82:e0:0f:4d:66:fa:69:2a:b8:36:95:
76:9f:0b:ef:2f:3e:b2:20:8a:ca:21:25:84:71:30:
30:4b:9b:bb:ea:79:0b:0e:9a:e1:aa:65:d4:f8:37:
47:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9D:21:4D:23:A1:30:05:93:6B:90:64:CB:6F:4D:62:64:79:76:3E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145719.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abfd::/32
Signature Algorithm: sha256WithRSAEncryption
9e:67:93:34:75:7f:ae:d8:77:06:0c:7d:4c:a7:f1:e6:56:68:
7f:27:a5:d9:78:0d:a9:26:a6:b8:e1:29:b4:2d:4b:92:ff:15:
ec:cf:37:3b:f2:77:8d:10:4c:23:20:93:4c:f7:77:cc:c1:e8:
96:a0:38:d3:9b:52:42:13:7e:e2:2e:89:39:64:d6:df:78:26:
8c:a6:c7:a4:7d:dc:4f:8e:ef:1d:5c:4f:36:07:a4:a2:5b:a7:
63:07:1e:d1:e1:c4:81:0a:ea:74:a3:8b:50:dc:8b:fd:a6:d8:
41:34:87:25:c8:6d:ec:fb:2e:5d:c1:e5:30:f7:8c:0d:a9:52:
0a:c6:6b:5d:44:e8:65:78:6c:85:92:de:b4:9e:fb:41:1c:8b:
de:c7:95:13:3a:3a:0c:96:f6:10:27:11:74:3c:b2:2f:2c:65:
38:6e:e4:a1:76:de:9f:62:e8:c3:9a:8e:e1:de:c3:a3:8d:6b:
07:20:09:f0:2b:05:53:43:8b:c7:1b:57:27:08:97:b7:a7:a0:
1a:a5:53:d0:96:39:2a:77:d5:d6:e6:04:c5:d4:b9:3d:74:3b:
04:ef:1b:43:3e:13:6e:0a:e1:e2:be:97:62:02:40:99:48:5c:
94:d8:ae:26:dc:fb:51:b6:dc:e8:f1:b7:0b:28:38:b1:df:2d:
51:ae:6b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:06 2026 by rpki-client