Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145968.roa
File: AS145968.roa (raw, json)
Hash identifier: LqHXxkQcA0urJhfUKIC5uJteDoml4ad1CubREkK8YPo=
Subject key identifier: C4:25:B9:14:E8:FB:63:D2:C7:E8:35:21:ED:F4:33:1B:4E:6E:74:AB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2B58E8C0328B4B6C2103FD0F0E456F8EA3317FD7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145968.roa
Signing time: Mon 25 May 2026 01:20:07 +0000
ROA not before: Mon 25 May 2026 01:15:07 +0000
ROA not after: Mon 24 May 2027 01:20:07 +0000
asID: 145968
IP address blocks: 240a:acf6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:58:e8:c0:32:8b:4b:6c:21:03:fd:0f:0e:45:6f:8e:a3:31:7f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:07 2026 GMT
Not After : May 24 01:20:07 2027 GMT
Subject: CN=C425B914E8FB63D2C7E83521EDF4331B4E6E74AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b9:6c:46:1e:22:37:fb:0f:30:a7:7f:54:24:
40:05:3b:df:8b:05:07:a0:22:54:f8:84:1d:c4:54:
40:74:5d:f8:65:61:c2:63:54:0c:57:3f:1a:1c:68:
eb:21:66:06:85:4c:8c:f9:26:54:30:1a:20:e6:be:
5d:42:f2:08:87:95:c0:2f:4d:7a:19:39:4c:b3:69:
68:36:a8:a0:f2:52:6b:b8:c6:51:18:90:32:cd:91:
b1:bf:fe:bd:bc:cd:35:59:2e:c0:53:0c:93:6c:ce:
e1:ed:05:f7:f0:7b:2e:7a:2a:b9:f2:6f:6a:a4:49:
f4:73:a2:a6:70:f9:0a:30:d8:01:44:c1:db:19:27:
fe:d5:a7:5a:86:2d:78:a9:bc:a9:80:07:85:cf:9d:
21:8a:a7:c3:6e:8b:34:24:02:ce:d8:90:9d:e7:9c:
4a:98:3a:58:9e:90:25:2c:2d:ae:bb:c2:2a:55:ed:
67:19:da:8a:40:84:f4:45:37:16:ea:6c:30:74:79:
28:4b:fc:0a:d1:d1:60:fe:8a:ab:a1:ff:2e:e7:99:
b4:00:48:ec:ca:4a:63:7e:fc:9b:42:e6:b8:fa:63:
ac:8a:6f:a9:b3:d3:80:75:92:14:b8:81:11:91:03:
dd:f3:f5:14:e9:a3:32:d1:96:03:e2:d3:10:4f:39:
a4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:25:B9:14:E8:FB:63:D2:C7:E8:35:21:ED:F4:33:1B:4E:6E:74:AB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145968.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acf6::/32
Signature Algorithm: sha256WithRSAEncryption
64:3f:40:1a:1f:57:0f:c7:87:67:ff:b0:a0:8d:0f:ae:38:29:
90:a9:22:b3:d9:45:c6:b9:ba:08:ce:3b:c6:0a:31:51:86:a0:
98:21:6a:66:d3:49:00:dc:0a:47:96:6a:5b:83:dc:98:86:a7:
c5:dd:64:b0:92:43:de:4a:b8:16:4c:e9:1c:21:56:f5:77:94:
43:99:e1:82:0d:40:e7:29:18:a1:64:f9:1d:e2:35:6d:35:99:
4c:18:a8:97:ad:51:1b:37:82:d1:43:fb:41:43:63:fe:2f:40:
4e:17:9e:88:14:91:d8:89:82:4f:1a:35:f3:d2:9a:d5:28:8e:
1f:cc:f7:1d:f2:02:80:1d:0a:57:42:c4:a5:7d:76:04:16:29:
64:d3:3d:dd:f4:45:2d:85:28:01:bd:ae:02:f9:70:20:22:ff:
38:21:ca:7a:53:cd:6c:f9:24:cd:92:7b:1b:ae:1c:fd:eb:be:
38:57:f8:ca:62:bc:f2:53:55:f4:bc:31:ad:ae:05:5a:da:d6:
71:fc:f6:c9:a9:f9:0f:33:4c:dc:84:cd:f5:17:0c:0f:c8:12:
7e:b0:df:91:a9:ae:db:88:3d:bb:92:12:43:36:1d:d1:be:25:
64:52:fa:1b:4d:01:72:a4:2f:b2:da:18:c3:ba:89:f0:77:f4:
15:46:29:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:55 2026 by rpki-client