Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145994.roa
File: AS145994.roa (raw, json)
Hash identifier: 2I0grVJ7nsP8ZDaocno7Lwx3MjxPVNwGh3YYb0qR3Hw=
Subject key identifier: 71:74:CA:3C:6C:C5:F4:56:25:C2:B6:5F:23:A9:E1:CA:88:EE:FF:45
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6E79915852769798B0E911C0E71A9E2B7F6ACDD4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145994.roa
Signing time: Mon 25 May 2026 02:22:15 +0000
ROA not before: Mon 25 May 2026 02:17:15 +0000
ROA not after: Mon 24 May 2027 02:22:15 +0000
asID: 145994
IP address blocks: 240a:ad10::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:79:91:58:52:76:97:98:b0:e9:11:c0:e7:1a:9e:2b:7f:6a:cd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:15 2026 GMT
Not After : May 24 02:22:15 2027 GMT
Subject: CN=7174CA3C6CC5F45625C2B65F23A9E1CA88EEFF45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:fa:05:00:1b:d3:c9:ea:1c:b8:ab:41:f5:
9b:c5:31:33:4c:0d:5b:ad:66:4d:09:64:ec:57:dc:
01:07:60:d4:0d:5d:fd:a9:3a:72:2e:72:44:c1:79:
46:d6:83:12:c3:a7:6c:cc:cc:dd:4d:4a:d2:a9:ea:
5b:9f:4e:39:8a:a6:e1:99:c1:37:13:40:cf:49:d5:
26:ba:f1:0e:81:de:c9:c7:d7:68:96:32:2d:82:67:
52:61:8a:5a:20:0f:36:35:94:dc:80:a2:c2:36:4a:
b9:7e:00:35:40:d4:08:ef:3c:e2:0e:fe:92:2f:e5:
6c:e3:f6:be:15:b9:cd:25:9d:21:b4:50:2a:92:dd:
cd:1c:a6:5d:0b:43:71:ac:8b:13:50:ce:ce:c0:02:
b5:df:63:db:71:4e:80:dc:7b:4e:13:2e:c0:cd:30:
0e:5c:54:73:b0:89:a4:e6:44:77:35:7e:49:28:6c:
eb:20:c0:ad:6b:2c:9d:0b:e6:90:7d:6c:83:44:c6:
a3:89:40:97:53:e0:5b:92:19:10:18:b1:a4:01:fe:
c0:6e:1f:35:6a:8e:bc:04:ef:83:51:4c:1b:87:fc:
e7:70:75:25:40:ed:22:dc:55:be:83:2d:de:34:d2:
85:24:42:51:74:39:6d:8c:f8:f3:da:67:7b:83:a1:
35:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:74:CA:3C:6C:C5:F4:56:25:C2:B6:5F:23:A9:E1:CA:88:EE:FF:45
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145994.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad10::/32
Signature Algorithm: sha256WithRSAEncryption
85:ae:e6:71:77:18:c9:2d:ad:f9:30:6f:30:c7:75:c0:82:55:
34:a4:8b:c8:df:c0:8d:2b:5e:5d:90:e2:ef:72:c3:d0:ba:59:
58:95:2c:35:c4:db:a0:b8:74:ba:7a:b3:cc:be:d0:17:00:a2:
72:54:13:e3:a5:91:c9:0b:86:56:ae:72:a6:06:01:b1:f8:e8:
df:d0:07:56:70:a7:84:ee:a8:9c:20:29:c6:ca:3e:c2:41:bd:
cb:f1:a5:72:32:b6:bc:03:cb:2f:51:86:01:b3:9d:36:11:50:
51:d0:ea:be:6a:27:8a:7f:ee:69:3d:b9:1b:de:c2:76:44:87:
c7:56:d6:76:80:3b:fc:2e:86:bf:73:02:c6:94:9e:6c:1c:fc:
a5:f9:09:a0:f8:13:87:2e:80:0a:42:3f:71:95:c5:da:e6:23:
c1:1a:8a:1c:27:c4:65:65:23:04:f4:e0:5d:bb:9d:82:1c:e3:
a4:a7:4e:2f:8c:bd:60:02:e2:61:dd:e7:7d:c3:a2:57:74:23:
40:03:5b:39:9d:df:9e:d7:fa:fa:8c:9a:94:f4:f8:4c:27:d7:
e5:31:e1:88:c9:b8:53:6f:14:df:44:89:a1:7c:a0:38:fc:f5:
b4:15:82:b5:7f:d9:ad:32:3a:52:ae:c3:0e:d7:e1:6b:ea:c4:
f1:e3:b1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:18 2026 by rpki-client