Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145500.roa
File: AS145500.roa (raw, json)
Hash identifier: nXLYxhHv6abcK/HNhOudG9CZeuEap8r9MOgtKcXcKlA=
Subject key identifier: 7D:D7:30:E0:27:72:23:7F:FC:28:35:60:C8:20:0F:63:5E:74:B6:1C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6100506E88139C371B83ADD7733B88BCB529679B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145500.roa
Signing time: Fri 22 May 2026 06:46:23 +0000
ROA not before: Fri 22 May 2026 06:41:23 +0000
ROA not after: Fri 21 May 2027 06:46:23 +0000
asID: 145500
IP address blocks: 240a:ab22::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:00:50:6e:88:13:9c:37:1b:83:ad:d7:73:3b:88:bc:b5:29:67:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:23 2026 GMT
Not After : May 21 06:46:23 2027 GMT
Subject: CN=7DD730E02772237FFC283560C8200F635E74B61C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d8:08:b3:f0:8c:c4:58:17:63:67:78:45:86:
34:18:fa:ab:8a:6c:e4:8e:7e:f4:c4:e6:25:25:5c:
c9:6c:9f:3b:a7:2b:8e:d6:36:ab:c7:d4:58:c0:25:
84:f5:a9:4c:b7:c9:47:79:f2:c8:07:ab:0e:cb:71:
73:68:41:3a:62:6b:86:9a:b3:e5:9c:d5:4c:fc:57:
fc:89:b2:c6:97:e7:1f:f2:27:75:09:08:c1:58:ee:
70:3d:ba:9d:ed:fd:77:de:db:67:d9:bb:c3:b9:99:
91:a0:fe:ef:bb:d0:e3:27:de:4a:96:9b:03:a6:70:
9e:f1:14:63:11:99:5a:6b:82:6d:7c:30:a7:b4:9d:
fc:28:62:ed:f7:99:26:dd:60:fc:23:d1:b2:8d:3e:
e7:de:e2:90:ce:48:bc:c0:a5:bc:13:3d:4f:1b:b1:
27:09:c7:45:5a:53:c6:f8:fd:b5:fa:69:8e:e3:90:
38:38:16:f7:8e:3b:bd:30:e6:9f:85:fa:90:4e:7f:
57:fb:13:02:bd:47:3d:c3:38:bc:5e:be:c5:a5:fd:
01:ad:9e:f5:56:8c:56:e2:b7:bf:5d:a2:c1:e4:3f:
fd:e6:f0:60:94:0c:7a:93:87:2e:96:f1:21:b1:b8:
e3:bb:94:77:1c:96:78:64:ab:f3:e2:e9:32:b4:20:
58:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D7:30:E0:27:72:23:7F:FC:28:35:60:C8:20:0F:63:5E:74:B6:1C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145500.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab22::/32
Signature Algorithm: sha256WithRSAEncryption
83:1f:69:7e:c8:4a:0f:d1:e6:a8:7e:ae:b0:cd:15:85:6c:e6:
a2:3c:ad:db:51:c1:d1:97:54:c4:cb:74:b6:6e:86:63:71:3e:
1f:9b:4a:a1:f4:a0:18:6f:40:24:df:62:f4:9d:a2:44:25:da:
7c:7b:a3:27:63:bf:28:e3:45:08:f9:85:ac:82:d4:5a:df:88:
93:be:00:ec:53:39:e6:e5:50:65:bb:2e:56:51:7b:db:f1:af:
93:8e:18:b7:65:ad:1b:5d:0d:69:52:b6:5d:8d:e1:c8:7f:d9:
21:b9:81:c3:83:3d:37:19:10:ce:6e:d7:2e:ef:c9:26:a2:3e:
9c:5d:cb:79:aa:73:bc:97:7f:94:f0:b1:56:11:8b:9b:30:2a:
28:41:d4:a6:e1:55:ea:b5:7c:ac:86:ae:ad:45:ef:a5:67:6e:
9a:87:72:a2:d4:8e:f6:16:b6:cf:06:a7:31:3d:c3:7d:59:20:
87:63:61:4d:0a:24:11:8a:3e:77:f7:e3:58:e7:84:b2:2d:d2:
47:9f:0a:f3:78:f7:2d:b7:c6:c3:bb:10:24:47:cd:32:7a:cd:
5b:d8:b1:07:17:08:2a:89:fb:9b:fe:f5:d5:a6:a7:8f:b0:da:
80:10:62:e9:fd:42:c7:78:61:49:6e:24:3a:e4:0f:56:7b:99:
e1:29:4e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:48 2026 by rpki-client