Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145865.roa
File: AS145865.roa (raw, json)
Hash identifier: 1Y77fIX4E9pHYay/4So2biuOrfe17yPkdr8zo/c9Ns0=
Subject key identifier: FB:55:F6:D7:02:86:05:51:83:EE:4B:88:F8:2F:B1:EC:21:3B:AF:70
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7F4B61BC6758C3C81AB8435C3E8F620DD8F5F90E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145865.roa
Signing time: Fri 22 May 2026 07:40:49 +0000
ROA not before: Fri 22 May 2026 07:35:49 +0000
ROA not after: Fri 21 May 2027 07:40:49 +0000
asID: 145865
IP address blocks: 240a:ac8f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:4b:61:bc:67:58:c3:c8:1a:b8:43:5c:3e:8f:62:0d:d8:f5:f9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:49 2026 GMT
Not After : May 21 07:40:49 2027 GMT
Subject: CN=FB55F6D70286055183EE4B88F82FB1EC213BAF70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0f:c3:f4:0c:7f:26:dc:35:b1:02:ad:b9:6e:
89:b6:5b:0e:e2:c3:51:4b:be:14:d6:e7:aa:fe:79:
7c:c1:bc:64:0e:ff:e1:b0:20:51:da:e6:0c:55:f1:
99:51:0f:1a:e7:92:2e:a3:85:5b:53:ad:46:f7:eb:
48:93:97:13:72:56:51:65:e9:db:ad:4c:c9:a0:0d:
b2:47:da:e5:0a:10:9a:f0:51:69:90:23:80:7c:42:
a0:cf:9b:40:e8:9d:0d:46:df:f1:81:8b:e3:0b:1c:
eb:7b:01:b4:71:fb:4a:19:f6:a2:c9:2d:2f:83:bf:
53:7b:11:ed:33:01:78:f2:c0:36:43:1f:d5:2e:3b:
be:f0:72:a1:e8:25:fc:b9:9f:a4:3f:af:db:e1:78:
fb:a5:39:9d:5d:2a:2f:e6:b0:e1:41:a4:9d:a8:82:
c5:99:2a:09:6f:54:39:65:33:fc:cf:eb:56:6d:5b:
e9:d9:e8:bd:41:97:01:d9:e8:bb:4c:08:49:4c:47:
20:9a:4f:af:b6:bc:92:f4:46:66:3e:b7:1c:2d:a5:
f7:66:e0:f0:d5:22:ff:86:0a:60:93:1f:57:a7:88:
de:47:aa:f8:dc:71:31:17:8e:84:a6:5b:5f:93:20:
3d:64:26:8a:fe:6c:19:ab:3d:58:73:fb:32:20:c8:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:55:F6:D7:02:86:05:51:83:EE:4B:88:F8:2F:B1:EC:21:3B:AF:70
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145865.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac8f::/32
Signature Algorithm: sha256WithRSAEncryption
b3:19:1c:c5:17:7d:0b:b8:72:1d:47:41:4b:99:73:c8:23:cf:
94:31:13:81:ff:c0:51:35:1b:ef:24:6e:7a:06:0f:9b:50:b4:
38:45:c7:f3:23:a7:97:64:4c:97:68:a4:dc:c8:7d:97:41:3c:
ab:66:af:99:93:6d:b6:67:07:98:3d:c9:c4:bf:c5:0c:20:13:
b0:66:67:7a:0a:0d:62:86:59:93:e9:4a:e0:da:a6:7e:15:29:
12:7d:cf:c8:5f:bd:0f:98:f1:58:c1:80:79:37:16:ed:25:69:
88:7b:0b:ae:f8:92:2f:5d:2e:2a:30:13:1a:aa:a4:c8:2a:2d:
65:eb:6f:16:2a:6d:e6:5e:66:f1:ef:db:64:c5:36:8a:fe:04:
40:66:4f:a6:e3:20:53:8f:68:1e:e7:c0:65:d4:39:f5:1d:e6:
b4:1e:85:3e:62:53:2f:e9:55:ee:2e:c2:98:5e:ee:ef:56:55:
26:1b:1e:42:9b:e7:c6:6c:e9:71:1f:10:7a:e9:31:f4:86:16:
01:ff:bc:6a:b2:dd:67:87:64:3e:b0:7a:19:d9:cf:b8:3b:39:
db:4b:f6:1d:65:ca:ed:f2:6b:98:0e:a9:d8:d3:51:7c:a6:a5:
aa:e7:8e:af:e0:0a:bd:37:75:eb:b2:5c:ec:b5:72:9d:4e:d3:
7e:95:99:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:38 2026 by rpki-client