Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145917.roa
File: AS145917.roa (raw, json)
Hash identifier: H3vCrFBdJhL+1FSs8WEYdnd3d8HW3NWb4ORCpT6BhCs=
Subject key identifier: 6A:A1:6F:C8:A9:88:FE:7C:6C:8A:C8:2A:CE:01:B3:78:8C:64:63:6D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5636FBE8CF924B6AB44A8E450B4D58B51ECC6D77
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145917.roa
Signing time: Fri 22 May 2026 02:47:39 +0000
ROA not before: Fri 22 May 2026 02:42:39 +0000
ROA not after: Fri 21 May 2027 02:47:39 +0000
asID: 145917
IP address blocks: 240a:acc3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:36:fb:e8:cf:92:4b:6a:b4:4a:8e:45:0b:4d:58:b5:1e:cc:6d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:39 2026 GMT
Not After : May 21 02:47:39 2027 GMT
Subject: CN=6AA16FC8A988FE7C6C8AC82ACE01B3788C64636D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:39:2b:2c:9a:2b:55:93:8e:10:5b:63:62:
e6:13:27:fe:0c:48:e1:c6:fa:52:25:0b:1d:e7:c8:
4b:5d:fb:46:28:a5:77:5f:10:94:7d:8b:13:b4:50:
b0:cf:6c:0c:c2:14:5c:c2:29:ec:f3:b9:1b:38:96:
ac:36:2c:06:86:d2:e5:15:00:5e:28:92:d1:5a:e4:
5a:69:87:ab:ac:bf:25:f3:02:31:51:d8:4e:c0:b3:
08:69:dc:10:39:49:3a:dc:f4:d8:02:f5:f1:0d:42:
bc:74:00:f4:10:dc:e5:e8:1d:91:7a:39:83:b9:91:
8c:4f:e2:ab:96:ac:4d:30:1d:13:6f:77:6d:4e:dc:
bb:fd:da:f1:83:40:3f:de:6c:69:03:50:3a:24:61:
d9:b0:20:ba:2e:e3:69:59:05:cc:6c:3d:cf:f5:fe:
60:da:ca:20:a4:ee:2d:07:5e:d8:6d:12:9e:51:e4:
82:3a:be:7b:ff:d8:71:0b:df:9f:c1:6b:6a:e0:ba:
49:4c:72:e3:de:7f:f3:3c:78:55:07:d8:d6:55:b5:
9b:52:ff:9c:1d:36:1f:24:90:ba:b2:6f:8f:fb:73:
10:48:98:36:6b:21:81:46:6a:d5:cf:1a:6c:f0:66:
ba:c7:99:7e:2c:68:8e:66:e5:ed:27:ce:5b:1b:8a:
65:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A1:6F:C8:A9:88:FE:7C:6C:8A:C8:2A:CE:01:B3:78:8C:64:63:6D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145917.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acc3::/32
Signature Algorithm: sha256WithRSAEncryption
09:84:cb:07:f9:b5:4d:2d:ec:d3:f4:6b:12:0f:e7:f5:bb:54:
c0:05:92:cc:98:e1:b8:f8:43:5e:09:83:6b:50:f6:5a:74:34:
30:7c:b2:ff:d0:fa:05:4f:e2:4a:8d:89:93:28:9d:20:f9:6e:
97:61:18:dc:c6:51:68:0b:b4:47:31:13:2a:39:1b:06:24:3f:
47:e3:f2:75:c1:7c:54:63:f5:18:04:77:ce:81:e2:ff:75:23:
87:87:04:87:de:7b:88:9f:61:be:51:3b:41:ca:1e:40:bb:11:
7d:e5:5f:bf:5c:5e:a1:bc:0c:ed:98:b1:a5:32:b9:ed:24:21:
d1:63:f4:e0:3b:89:2a:d5:09:74:5f:d3:df:08:a1:c6:57:5c:
e0:3a:90:16:11:3b:2e:55:da:b9:b0:77:94:77:a8:f5:ed:d9:
f9:8b:54:ed:15:0e:36:35:39:c9:0c:e9:3c:ec:68:d0:4f:24:
ae:bf:f0:fc:35:41:95:a3:8c:44:63:c8:a2:60:99:15:b2:39:
83:45:c2:02:73:dd:09:c9:65:cf:77:f7:72:83:2a:46:4e:bd:
46:c8:18:9d:23:83:4c:eb:17:9c:a6:ac:ec:cc:ec:63:0a:58:
c7:4f:4e:ce:64:38:a1:79:e6:d3:84:e4:e8:d5:60:3f:c5:e5:
0a:ab:21:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:31 2026 by rpki-client