Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145746.roa
File: AS145746.roa (raw, json)
Hash identifier: 99yZECW7bs/nemhVB1h7uXQhEjBXcrZquskGzdEz4l8=
Subject key identifier: 72:1F:32:DB:C0:12:79:75:C1:87:9F:F4:66:2C:B4:E5:FA:F9:54:EC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 66ECE67E658715968675BD72AE6C52E47C01C154
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145746.roa
Signing time: Mon 25 May 2026 02:22:40 +0000
ROA not before: Mon 25 May 2026 02:17:40 +0000
ROA not after: Mon 24 May 2027 02:22:40 +0000
asID: 145746
IP address blocks: 240a:ac18::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:ec:e6:7e:65:87:15:96:86:75:bd:72:ae:6c:52:e4:7c:01:c1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:40 2026 GMT
Not After : May 24 02:22:40 2027 GMT
Subject: CN=721F32DBC0127975C1879FF4662CB4E5FAF954EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d3:a7:4b:61:bb:c4:98:64:ba:b0:b6:2a:52:
93:6d:45:01:e6:b9:e9:eb:7a:b4:1b:80:2f:17:0c:
1e:aa:f7:d8:25:12:5a:32:fb:fc:4d:7f:17:bd:3c:
df:ca:1d:4a:12:8b:51:47:5d:5c:d5:ea:6f:69:33:
c4:6f:57:38:06:c4:8f:13:eb:5e:92:a8:bb:47:ee:
cc:78:cc:d1:f5:5d:44:13:16:dc:bc:87:29:92:25:
c1:63:e2:3b:ea:83:b0:3b:56:48:80:d9:23:27:21:
9c:64:c1:25:c0:b0:94:59:2c:39:6e:e5:df:1b:f5:
71:88:ad:33:57:2e:bd:06:f8:ab:26:50:b4:58:38:
f6:0d:9f:be:21:3a:40:24:7c:9c:68:e8:d2:b1:a2:
72:48:c4:1c:d9:bd:e6:5b:a6:27:c1:7e:f7:82:7a:
43:ca:7b:d3:60:4d:6d:17:19:cb:c5:20:ae:d7:cf:
ed:77:9e:7c:15:df:04:29:b1:11:be:54:bd:e6:43:
8c:34:bf:88:47:f2:40:86:a1:09:da:6b:51:58:7f:
e6:29:04:20:3c:73:de:32:a4:e5:64:9e:cf:a3:3e:
32:78:28:c0:4b:87:14:a7:82:ed:2b:5c:bb:e8:d7:
5d:16:9b:e0:99:1d:07:82:84:8d:47:68:13:5a:a3:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1F:32:DB:C0:12:79:75:C1:87:9F:F4:66:2C:B4:E5:FA:F9:54:EC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145746.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac18::/32
Signature Algorithm: sha256WithRSAEncryption
99:3d:0b:19:06:d8:15:87:03:f7:02:cf:cd:da:71:90:f8:af:
34:20:22:a5:45:1c:f1:7e:f0:5e:8b:f4:44:98:86:ec:c1:ca:
c0:53:75:24:6a:f5:fa:ee:76:61:c1:29:c1:9f:37:31:8f:42:
60:8f:ac:f2:fd:5c:79:9b:3a:09:8e:e2:b5:59:b1:ea:da:a1:
d0:36:a8:ea:fe:ca:24:01:0e:9c:c4:d5:90:d3:96:84:6b:12:
7b:91:f1:87:8f:53:35:4b:b8:7d:8b:48:57:29:36:6c:66:76:
9b:55:86:35:0e:10:e0:5e:c8:ba:82:46:b4:1f:06:89:54:2d:
32:04:28:30:14:3f:40:74:74:7b:4f:b7:73:9c:fe:08:fc:f0:
cf:1e:76:f1:02:11:79:2e:06:2b:77:9f:ec:a1:23:ea:92:94:
4c:a6:fe:dc:ab:99:f4:cc:f7:8e:ee:b4:39:e3:9d:71:f1:68:
d0:68:6f:82:b2:6a:a8:cd:51:ce:6f:17:b3:0f:01:9c:44:b0:
e0:99:e5:c3:f3:ce:e5:e8:f2:ea:45:67:0e:bf:f0:04:0f:57:
2c:ce:da:cf:88:c8:98:c0:5d:94:81:ad:49:2d:bb:15:19:2c:
91:64:ba:ca:8a:f1:15:ec:b3:fd:fc:aa:13:04:89:13:a5:7f:
e3:cf:6b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:53 2026 by rpki-client