Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145896.roa
File: AS145896.roa (raw, json)
Hash identifier: 7pYmQDnTZ/6UyumUdy2AeP6dTTnlvC2PfLaOe3zHehU=
Subject key identifier: 91:59:42:71:46:3A:C8:97:42:0A:59:AA:14:A9:A6:B8:BB:22:83:E5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 144C89D8A0CD193E8284A0D1B4034BE956A213F3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145896.roa
Signing time: Fri 22 May 2026 07:40:54 +0000
ROA not before: Fri 22 May 2026 07:35:54 +0000
ROA not after: Fri 21 May 2027 07:40:54 +0000
asID: 145896
IP address blocks: 240a:acae::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:4c:89:d8:a0:cd:19:3e:82:84:a0:d1:b4:03:4b:e9:56:a2:13:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:54 2026 GMT
Not After : May 21 07:40:54 2027 GMT
Subject: CN=91594271463AC897420A59AA14A9A6B8BB2283E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:20:63:94:77:9c:cb:e4:24:eb:c4:51:be:e3:
66:45:65:b2:ec:f6:d7:34:07:be:94:40:3f:5c:d4:
85:8f:2a:d5:3e:a4:60:73:73:39:c4:7c:8c:c6:d1:
d3:37:fb:fe:29:9e:2a:2c:33:69:31:c7:35:f1:6a:
f3:90:45:23:88:06:a0:32:a4:33:e1:1c:2f:b9:6c:
99:89:ba:c5:5c:48:57:eb:d8:6a:dd:08:d3:ce:a9:
49:91:1e:4b:63:56:9c:87:de:e8:45:23:d2:2f:bd:
3e:af:e8:35:34:70:02:f4:0a:22:6b:fa:87:af:f6:
36:f4:17:3b:cf:0e:92:62:12:6b:c1:73:8c:aa:b2:
0a:19:5d:9e:dd:5f:1b:e1:a7:c9:0e:c4:53:12:e2:
47:4c:a8:a2:6c:9b:68:f6:7d:da:34:56:2f:00:4e:
57:1d:a4:3b:86:dc:4f:2e:32:53:25:dd:f6:48:b1:
ab:98:17:ae:16:30:96:80:e0:63:0e:d8:50:60:fc:
af:fc:d9:80:97:ec:33:a5:56:b2:65:1d:33:fc:31:
f0:bc:62:81:14:40:a2:b5:4b:9f:ad:a5:45:a9:89:
53:7d:56:e8:4a:40:5d:c7:6b:ff:2c:0f:e1:c4:5f:
15:8a:ca:96:c0:37:3d:2c:a1:cf:bc:62:3c:4f:3a:
20:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:59:42:71:46:3A:C8:97:42:0A:59:AA:14:A9:A6:B8:BB:22:83:E5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145896.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acae::/32
Signature Algorithm: sha256WithRSAEncryption
67:d1:d3:66:52:ea:fd:c7:ff:52:05:71:22:35:06:c3:7f:35:
15:17:c2:5d:40:c4:f7:28:b3:ed:3a:ed:65:62:0a:41:9b:df:
da:da:67:60:a2:99:2d:3d:7e:7f:ef:df:97:b8:ee:73:38:f8:
29:8b:56:12:ae:c4:6c:b2:9d:4f:97:3a:dc:5c:af:92:d9:96:
8e:66:6c:09:9b:7e:7d:47:2e:25:11:3c:c0:0a:a1:ac:bb:12:
87:de:ac:fa:fb:31:a5:73:2e:16:58:8d:ce:56:17:ee:88:30:
11:1e:37:85:b9:94:ae:d3:75:1a:bb:fa:7f:c4:52:fd:37:2d:
07:55:cb:bc:5c:ce:59:c7:53:59:84:2d:aa:28:84:d2:2e:74:
aa:4c:05:d6:7d:3a:5c:98:ca:21:b5:9f:92:41:c3:63:56:41:
44:23:0b:3b:b2:c1:fa:43:78:f5:19:11:e2:e1:f3:6d:50:02:
42:4e:38:0a:b0:ba:7e:a4:e4:ed:eb:4f:62:50:da:ed:ea:42:
35:6b:5c:28:79:38:c9:52:67:03:e2:0b:cd:4a:b0:64:91:02:
aa:61:27:ff:7e:79:1f:bf:50:00:ab:be:18:57:7a:40:ad:fe:
a6:39:d3:87:96:ad:73:a2:d3:48:74:30:b3:46:36:17:b5:f1:
16:fa:bb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:59 2026 by rpki-client