Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145788.roa
File: AS145788.roa (raw, json)
Hash identifier: /JvAbjpagGMoiUCUYtDvCAjN9Cg+5wzuKkaFfmzduNU=
Subject key identifier: 6B:38:43:36:AE:D3:D1:69:FE:D3:88:1B:B1:6B:E0:60:B0:AC:9B:0E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2024B933F498D29EF9124685BCDABB2F1DB729A2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145788.roa
Signing time: Tue 26 May 2026 06:12:34 +0000
ROA not before: Tue 26 May 2026 06:07:34 +0000
ROA not after: Tue 25 May 2027 06:12:34 +0000
asID: 145788
IP address blocks: 240a:ac42::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:24:b9:33:f4:98:d2:9e:f9:12:46:85:bc:da:bb:2f:1d:b7:29:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:34 2026 GMT
Not After : May 25 06:12:34 2027 GMT
Subject: CN=6B384336AED3D169FED3881BB16BE060B0AC9B0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f9:22:38:f8:46:44:cd:c6:ab:60:4e:df:2a:
db:f1:4d:fb:4a:af:8c:2f:30:84:05:0f:17:1c:8b:
13:c8:4b:3b:34:af:a9:ee:c5:43:19:99:f6:13:ce:
36:ec:9c:3c:46:e9:88:b5:d1:9f:9b:51:7b:25:43:
c7:53:b7:aa:18:af:50:a5:17:e5:38:e7:06:52:61:
b5:d4:44:da:61:76:d9:6e:43:21:5b:32:f0:89:87:
f9:81:a9:b4:45:d2:90:65:8a:6d:53:1a:5e:25:c8:
2a:1f:2b:37:a3:fd:b9:3a:75:06:36:dd:2f:33:70:
36:ea:4c:9b:dd:bc:06:7c:41:64:a4:92:9a:2f:62:
ec:4c:0d:1b:62:db:b5:48:f0:a3:6c:f3:7d:37:c0:
af:3c:62:44:02:0b:62:a7:9a:dc:d3:c7:b4:a1:17:
04:7e:7d:eb:99:96:f9:fd:b3:fc:29:32:a5:78:8d:
81:75:0a:18:c3:b1:05:63:5e:ae:63:27:b0:e7:1c:
f5:3c:87:98:fa:3b:dc:b0:8d:a5:22:86:1d:cd:87:
27:0c:74:1a:d2:fd:0c:6f:a8:2b:80:50:a0:34:10:
54:e4:6d:d6:0a:b8:b8:64:4d:de:65:e0:34:06:0d:
4a:fe:3f:d5:4e:75:10:ba:a9:de:b6:d5:91:7d:a6:
9c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:38:43:36:AE:D3:D1:69:FE:D3:88:1B:B1:6B:E0:60:B0:AC:9B:0E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145788.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac42::/32
Signature Algorithm: sha256WithRSAEncryption
71:20:a7:a7:8f:c9:1a:de:cf:91:b7:bf:1a:14:1a:5e:19:78:
fe:43:c2:59:15:80:49:2f:f2:a8:0b:8e:2c:f8:14:89:6c:cb:
40:85:67:88:ac:8f:2f:08:2e:97:d8:69:69:f2:ad:e8:56:56:
07:68:f7:ab:8c:8a:fb:10:37:b1:b1:37:18:c1:d3:22:20:d7:
8b:cf:a6:09:c9:3e:fe:0f:0f:20:24:76:29:b1:f5:e3:38:ee:
97:41:2c:c4:01:e9:86:52:ed:fe:60:9a:e4:58:e5:b4:ca:8a:
13:ac:41:5d:c2:cf:7d:79:8e:3b:cb:ad:1e:c4:48:65:27:be:
f9:7b:d2:05:1e:71:d9:31:ad:8c:2c:4e:74:61:05:a1:90:3c:
af:64:61:e9:39:4b:54:f4:01:fd:43:68:76:19:11:ff:24:8c:
47:d2:d4:44:fd:43:36:fd:9e:e5:1c:97:4c:32:3f:8f:33:8c:
17:37:23:65:f0:85:40:ef:5a:89:6c:e7:ed:cb:56:6a:92:ff:
bf:04:1b:83:ce:b5:dd:f5:60:80:25:c7:6e:f8:10:51:ee:ab:
90:69:10:60:de:f6:ac:17:3a:f9:0d:00:fb:49:7a:65:f1:20:
0e:23:76:d2:55:18:80:fe:bc:1f:6e:f7:f6:fa:19:a4:28:58:
6c:63:d0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:50 2026 by rpki-client