Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145890.roa
File: AS145890.roa (raw, json)
Hash identifier: A0ceqU7X+56yoTChdzwTPEoOKt3vViykyBNFRATLnRs=
Subject key identifier: 57:CD:35:21:B4:73:A4:1F:96:B9:21:7D:81:EB:67:52:0F:A8:82:DA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5672880DBF4D396D780B0826C3584313DCBEE01E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145890.roa
Signing time: Tue 26 May 2026 06:12:34 +0000
ROA not before: Tue 26 May 2026 06:07:34 +0000
ROA not after: Tue 25 May 2027 06:12:34 +0000
asID: 145890
IP address blocks: 240a:aca8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:72:88:0d:bf:4d:39:6d:78:0b:08:26:c3:58:43:13:dc:be:e0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:34 2026 GMT
Not After : May 25 06:12:34 2027 GMT
Subject: CN=57CD3521B473A41F96B9217D81EB67520FA882DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7f:33:ab:b4:7b:53:74:50:9e:f8:fc:bc:0a:
d3:8a:cd:f0:dd:f9:db:64:83:0d:54:92:ce:61:26:
a9:a0:bc:42:fc:fa:76:d9:06:43:57:3c:91:a3:58:
ac:81:c8:85:48:53:1e:dd:0a:af:83:29:16:b2:de:
f7:84:a5:8d:c3:48:5e:8a:55:0d:cc:10:8c:04:23:
dd:70:3b:72:ac:dc:e3:cd:e7:66:04:76:2c:99:03:
14:e5:a1:82:b0:cc:27:f4:fa:03:f2:56:37:7c:3b:
40:ee:87:38:98:19:66:58:65:38:55:1b:d1:66:92:
54:0f:6e:c7:80:f1:6b:e9:d6:79:e6:de:a1:fe:05:
89:2e:73:93:26:36:f7:5e:ef:c6:92:c4:1b:61:02:
2c:44:40:0b:f0:8a:b2:84:16:7d:e5:d0:7a:37:d0:
ab:24:ab:89:65:11:48:08:93:55:d0:0c:46:25:48:
3f:e9:6b:d3:f3:31:9c:ed:13:ab:1d:80:20:e4:c3:
1c:10:82:f9:85:24:f9:29:5d:aa:be:ce:fd:cf:e2:
87:95:fe:e2:3a:2d:6e:eb:6b:28:94:8c:1e:e3:96:
82:05:bf:d0:ef:58:2f:5a:e4:37:f0:1c:44:1d:82:
10:00:57:fb:28:89:80:bf:ad:db:08:a6:2a:c5:a4:
8f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CD:35:21:B4:73:A4:1F:96:B9:21:7D:81:EB:67:52:0F:A8:82:DA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145890.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aca8::/32
Signature Algorithm: sha256WithRSAEncryption
22:d8:67:a8:27:8f:9d:9d:75:31:41:eb:ac:a3:d6:b9:64:d8:
c0:9e:a7:f1:26:d5:bb:95:f8:9f:05:17:29:13:d0:8a:d3:99:
61:d8:ea:8c:f7:39:d6:46:6c:ab:d3:67:61:a3:e7:0b:ff:33:
46:be:c7:d0:a6:01:a5:59:b8:a3:85:b1:82:8d:e1:29:ab:aa:
3f:c5:47:9c:9f:90:e6:9a:64:40:ff:fd:f7:95:80:14:8c:4e:
05:fc:56:67:28:ff:fb:20:59:fa:a9:e5:08:a0:87:d3:08:6d:
44:0c:9b:c5:cc:de:8d:30:74:7e:2c:d2:34:52:0c:4f:d4:7f:
0e:6a:ee:6b:7c:74:01:8b:ed:d4:57:3b:cc:d3:d3:65:87:e3:
0e:ee:47:8a:dd:c5:88:94:f6:19:c2:63:1a:fc:7d:61:68:38:
d4:da:4b:59:51:65:a8:c4:2c:3a:d8:a7:63:4a:15:e7:10:79:
d5:d2:10:67:9f:8b:41:11:25:bb:8c:9e:67:ee:55:44:6c:ad:
41:95:ed:5e:ba:86:4a:c6:c8:a4:c7:5f:ff:5d:69:94:fa:5c:
cd:1b:0a:51:04:b8:ff:f0:4e:1e:f6:a6:e9:37:97:88:69:40:
4b:c7:ef:e6:6d:b6:62:9b:3d:77:75:d8:86:c2:3d:e9:db:64:
74:ee:c1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:24 2026 by rpki-client