Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145993.roa
File: AS145993.roa (raw, json)
Hash identifier: t9PX8VqVQZBFrzI7xGkC3fFX3yhzTWggoK0QQdE79cs=
Subject key identifier: F4:91:D4:AC:36:6C:44:54:48:A5:85:FB:33:27:D9:9B:8E:8B:AA:71
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0C61710835F769108EC785D59009A9ECFC9E67A9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145993.roa
Signing time: Tue 26 May 2026 02:35:08 +0000
ROA not before: Tue 26 May 2026 02:30:08 +0000
ROA not after: Tue 25 May 2027 02:35:08 +0000
asID: 145993
IP address blocks: 240a:ad0f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:61:71:08:35:f7:69:10:8e:c7:85:d5:90:09:a9:ec:fc:9e:67:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:08 2026 GMT
Not After : May 25 02:35:08 2027 GMT
Subject: CN=F491D4AC366C445448A585FB3327D99B8E8BAA71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:aa:a7:46:18:42:7b:2b:a2:8f:c4:e6:20:
77:1b:d4:a1:92:a9:ab:a7:2e:13:bc:4c:1c:24:1e:
06:b2:4f:29:71:71:d3:a2:d4:3d:68:4a:06:e6:96:
fe:b7:76:71:b2:b9:99:15:fb:94:13:8d:30:36:ce:
1e:fb:19:66:5e:99:b4:66:9d:76:b1:a3:02:cb:d7:
e2:6b:54:e3:c2:18:32:75:93:90:00:29:ec:90:48:
9b:80:9f:75:5b:eb:bf:2f:81:3f:4f:c4:d8:b1:f0:
50:6f:b5:fa:07:2b:63:c5:98:85:a3:6a:33:8d:e1:
92:c8:6c:42:54:d6:a7:f7:9e:62:60:60:75:59:10:
72:67:18:fa:5b:fa:a5:cc:cf:7f:74:85:0b:4f:4b:
1a:59:06:1b:17:a8:73:91:a3:2b:68:f9:39:7b:32:
0c:41:a0:11:8b:13:ed:11:ad:13:f9:0b:a6:f0:1a:
4c:f5:c7:a6:c2:02:69:fe:cb:30:ad:39:ab:e0:cb:
40:24:13:23:d5:66:59:e1:d3:60:13:6c:52:08:f6:
ff:d8:da:83:34:18:9f:be:5e:31:22:fe:36:00:c4:
cf:8f:6c:f3:10:79:51:ff:74:1d:65:9e:6f:08:2d:
91:39:df:bd:7c:e5:d7:e8:fa:c8:73:b2:7e:dc:a6:
3b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:91:D4:AC:36:6C:44:54:48:A5:85:FB:33:27:D9:9B:8E:8B:AA:71
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145993.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad0f::/32
Signature Algorithm: sha256WithRSAEncryption
40:7c:e0:6e:8e:d9:4b:09:4a:d9:1e:18:5c:7e:02:a2:9b:2e:
4e:2f:6c:e9:22:ea:8a:cb:6e:95:4f:62:09:d8:27:ca:1b:3a:
ae:be:ec:49:35:2f:aa:c5:1e:83:ea:a7:07:1b:5b:41:b9:a1:
a7:90:65:5a:3d:11:0d:86:72:6a:75:0c:3b:53:77:0c:21:04:
d8:36:f2:29:f0:d1:d3:ee:63:64:10:e8:c1:17:ca:0c:fe:c4:
01:e4:eb:27:99:52:21:5d:04:b7:30:b0:23:52:12:be:10:ce:
12:ab:ba:4f:4e:7b:d3:f6:86:a0:8d:43:57:9d:4f:df:8f:47:
94:80:db:49:c7:13:17:7c:21:1f:0b:1f:1b:05:de:31:03:14:
ee:0e:a2:cd:b0:84:d5:0b:92:3f:01:95:96:fc:1c:5a:ae:bc:
dc:d7:2c:82:46:ea:9b:54:a8:8d:d6:29:af:f4:82:4c:1f:b3:
ae:df:ea:a0:95:3d:84:dc:9c:c0:f8:5f:15:a4:ab:5d:50:f2:
07:fb:db:df:ec:98:e0:d8:c3:40:cf:96:e8:a6:8d:43:4b:d0:
ab:3e:fb:1d:e9:8b:e1:63:dd:f5:41:3f:73:34:c7:2b:e9:29:
c6:37:9b:59:68:40:3e:e3:f0:f4:a8:e3:9b:70:ef:d4:06:4f:
52:80:e9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:23 2026 by rpki-client