Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145488.roa
File: AS145488.roa (raw, json)
Hash identifier: Hofvdxd7O2vkcCKYXAz6CvJiL09sMu0e7OoWXEm2wSs=
Subject key identifier: C0:85:33:04:5D:3C:3B:1D:4F:76:BA:4C:34:AB:70:59:EF:06:E1:FE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7BBE0E6A7DFBC65CB9F076CD4E819829BFAC2A3D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145488.roa
Signing time: Tue 26 May 2026 08:53:05 +0000
ROA not before: Tue 26 May 2026 08:48:05 +0000
ROA not after: Tue 25 May 2027 08:53:05 +0000
asID: 145488
IP address blocks: 240a:ab16::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:be:0e:6a:7d:fb:c6:5c:b9:f0:76:cd:4e:81:98:29:bf:ac:2a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:48:05 2026 GMT
Not After : May 25 08:53:05 2027 GMT
Subject: CN=C08533045D3C3B1D4F76BA4C34AB7059EF06E1FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:98:dd:27:fb:eb:7a:5e:4b:12:b2:74:22:
e4:c1:fd:1f:1c:da:b3:2e:3c:12:24:26:da:7c:35:
64:a8:70:8a:c5:b7:87:6f:7c:2a:b9:cd:b1:20:d5:
68:b5:18:4a:7a:f0:b0:3f:cf:2f:33:de:7f:5e:9f:
e0:cf:c1:b4:1a:51:c6:7c:1d:e7:fc:b2:43:cc:7c:
dc:60:c5:ff:94:42:2e:42:2d:a7:00:06:f8:3e:5b:
a6:15:bf:42:b3:ea:c8:64:3d:0b:81:c0:c0:5e:0a:
3b:88:69:33:d5:00:a8:c5:6c:bc:b2:45:70:c2:6f:
d6:ca:a1:51:21:af:6e:1a:21:26:a6:28:67:6a:71:
90:f6:63:a6:89:a5:6b:0c:d1:f7:42:c9:97:37:a7:
4f:ff:b5:b0:38:48:64:11:8b:98:dc:c0:29:2a:92:
c7:3d:03:a8:a7:52:b0:36:4c:6a:1f:65:cb:99:8d:
07:36:a5:51:ab:2a:57:53:46:1a:1d:6c:5a:67:e6:
7d:f3:f2:70:77:f7:a0:2e:82:44:38:40:22:ec:4d:
c5:fc:0a:ac:62:95:6b:3a:59:16:8d:47:76:9a:64:
70:d4:58:90:2f:7b:b6:fc:30:5b:5f:c6:47:10:03:
9d:0d:ff:15:89:70:9e:dd:f4:06:f3:8b:84:2b:78:
7f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:85:33:04:5D:3C:3B:1D:4F:76:BA:4C:34:AB:70:59:EF:06:E1:FE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145488.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab16::/32
Signature Algorithm: sha256WithRSAEncryption
31:2e:cd:9b:fe:94:c7:d1:64:ef:5f:23:7f:32:5e:24:dc:7d:
ae:16:ab:93:60:e4:fd:82:be:f6:15:82:04:1d:fe:4b:9b:0e:
4c:d0:a3:4b:d8:94:5b:74:e5:08:1d:af:af:b1:1a:0b:5c:33:
69:17:f4:5f:cf:29:ca:e6:e6:63:55:4c:b2:3d:7f:a9:62:41:
38:18:86:05:01:a1:3d:f1:ea:31:04:e3:d4:58:18:ec:26:64:
ec:4f:04:bd:83:d2:75:a3:7b:bd:ff:30:e9:55:3f:4d:5d:69:
1e:dc:32:af:a1:95:6e:e4:f4:1a:28:22:2d:df:76:34:1b:e1:
76:3a:f2:8a:c2:ee:56:83:af:3c:f6:a3:03:95:c5:bb:28:73:
aa:6e:cc:ae:94:94:45:78:bb:e9:44:d7:7b:8f:b1:3c:7c:1e:
05:0f:4c:d6:e9:93:cc:f6:ff:ad:91:08:1d:ec:cf:78:69:47:
02:66:ac:7c:29:cd:e5:52:af:30:29:90:c8:5e:db:88:b6:36:
cd:da:d8:5f:f4:49:87:9d:d3:86:89:4b:cc:c6:9a:4a:f4:40:
2d:14:89:ba:31:98:55:b7:df:ee:31:93:43:c2:28:e3:1f:b6:
99:55:55:73:7b:67:a2:a9:7d:a3:02:14:1c:5e:6c:88:b0:25:
f9:87:d0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:53 2026 by rpki-client