Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145790.roa
File: AS145790.roa (raw, json)
Hash identifier: IkbTLwtDiq1FpNK0x3DqlCC4klU14pB5QP8wxfKkmkw=
Subject key identifier: 65:34:38:06:FE:49:7C:45:07:67:64:F2:71:F1:8C:1C:21:31:1D:C7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 07D33781026D2BAD3482BE2568B51B353937033C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145790.roa
Signing time: Fri 22 May 2026 07:41:16 +0000
ROA not before: Fri 22 May 2026 07:36:16 +0000
ROA not after: Fri 21 May 2027 07:41:16 +0000
asID: 145790
IP address blocks: 240a:ac44::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:d3:37:81:02:6d:2b:ad:34:82:be:25:68:b5:1b:35:39:37:03:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:16 2026 GMT
Not After : May 21 07:41:16 2027 GMT
Subject: CN=65343806FE497C45076764F271F18C1C21311DC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:f4:83:e9:e5:ba:0b:7b:1c:e4:fb:3c:ab:
57:52:ed:84:8e:6f:51:eb:87:fa:a6:3b:42:f6:82:
ba:ed:59:26:3b:86:b4:5e:e5:c5:95:c8:64:4f:9d:
90:ac:9a:69:c3:ee:dc:23:42:1b:9f:58:23:4d:9b:
cd:04:47:a9:c7:59:ac:b6:29:b9:b6:a9:27:a8:f0:
cf:1a:d4:99:fb:5f:a8:b5:cf:96:06:0e:40:62:da:
ae:27:f4:e4:66:7d:df:fe:07:33:ef:02:da:05:5f:
44:d1:07:67:24:c9:c3:30:8d:47:10:a0:d4:ba:99:
b6:52:a2:c9:ad:bc:83:e7:d4:46:ef:bb:4c:c6:1c:
54:d7:ab:5c:b3:8a:a4:e4:99:17:42:89:f7:e9:c8:
10:ac:48:5c:8d:61:86:98:68:46:7a:c8:b3:dc:a6:
ad:21:00:22:4d:35:55:2a:0e:8d:5d:6c:74:e7:e6:
d2:75:4c:db:8a:3c:c0:cb:08:7b:0a:c6:93:47:ca:
e7:b8:64:2e:4f:1e:a4:bc:19:e8:f0:fe:b8:87:85:
6b:08:98:c4:16:55:bb:bf:53:01:c8:cd:c2:f4:3a:
95:96:b2:13:61:ce:50:f9:5b:da:46:ba:31:ac:6e:
9a:e7:06:25:0f:94:5a:23:7a:5c:40:32:e9:ef:d8:
64:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:34:38:06:FE:49:7C:45:07:67:64:F2:71:F1:8C:1C:21:31:1D:C7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145790.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac44::/32
Signature Algorithm: sha256WithRSAEncryption
a4:58:21:41:f9:7d:19:6b:ff:d0:e2:b0:d8:9a:3f:0c:ac:42:
56:6a:73:cf:97:1c:fc:ee:c2:1e:8a:26:47:b3:2f:7e:7c:5f:
b2:dc:4a:9d:9e:a1:75:fb:14:b4:e5:14:03:a8:4e:75:11:8a:
04:f2:7d:5a:be:18:47:6b:d6:32:66:2e:b9:fa:81:95:6a:de:
8a:f1:b0:e2:c1:af:60:d0:d8:c5:92:71:1d:d3:e8:aa:1f:54:
46:c7:ca:e3:48:31:2e:40:ed:bb:a9:5f:1a:c6:61:6b:50:f5:
5d:3b:53:20:99:86:72:1c:21:70:8d:50:cc:78:4f:ac:70:4a:
b4:4c:37:8b:e0:17:cd:b2:66:75:ab:4f:b7:c6:2d:fa:7f:85:
c9:70:ff:63:a3:10:54:d6:51:c7:a0:e1:05:d6:5d:a9:05:12:
0e:f2:40:3d:03:11:41:45:73:ed:9b:b8:64:87:a2:e9:fd:c1:
38:67:fa:02:69:11:3f:9a:ce:7e:02:fd:ff:14:81:ca:ed:39:
5c:7b:a4:7e:ff:e6:fd:84:8e:94:67:79:e3:d0:85:ff:19:19:
2f:e9:37:cb:4b:7d:7e:f1:68:6f:46:10:b5:1e:04:43:1d:81:
ec:87:a6:3e:9d:b6:83:2a:18:6f:ae:c4:45:b2:b2:da:e8:37:
f2:1b:ab:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:18 2026 by rpki-client