Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145517.roa
File: AS145517.roa (raw, json)
Hash identifier: dRFEIIZKy/qB8zVFDwzUzSOB8IYam+KJy9QishhZnww=
Subject key identifier: 7B:1A:D3:5C:11:56:F3:6B:C3:AE:74:26:64:BA:3B:E9:D9:2C:68:DC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 613737A2CFA96E03FFB6C566B1DC6D50C7316EB8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145517.roa
Signing time: Mon 25 May 2026 03:19:19 +0000
ROA not before: Mon 25 May 2026 03:14:19 +0000
ROA not after: Mon 24 May 2027 03:19:19 +0000
asID: 145517
IP address blocks: 240a:ab33::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:37:37:a2:cf:a9:6e:03:ff:b6:c5:66:b1:dc:6d:50:c7:31:6e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:19 2026 GMT
Not After : May 24 03:19:19 2027 GMT
Subject: CN=7B1AD35C1156F36BC3AE742664BA3BE9D92C68DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:cd:45:98:54:e4:43:9b:8a:a4:bc:56:cd:
97:fc:d1:8b:a1:d8:c2:61:11:31:98:3f:9b:72:b8:
22:02:5c:0f:fd:13:76:9b:1f:3a:cb:0a:64:44:29:
3d:82:cc:9b:68:90:f2:1a:21:f7:9a:26:59:56:77:
a7:26:ea:79:f2:5d:21:4f:60:9f:1f:30:1b:9d:f3:
ca:cc:ce:eb:5a:4a:d5:5b:28:e1:ed:55:66:86:d7:
05:fe:32:a8:4b:bf:59:69:26:8e:26:4c:82:6f:09:
4e:2d:ca:d2:2d:fe:af:02:93:e2:00:df:1f:b3:dd:
0b:b8:96:2c:d2:d6:d7:ff:28:c6:73:ea:98:01:50:
71:a8:78:d7:01:67:bd:c6:e8:7d:7c:d0:d1:d4:56:
34:76:82:12:16:62:48:75:15:67:15:e5:68:21:83:
c3:99:ce:12:b4:f2:f5:0f:48:cc:7f:47:31:5d:0e:
a3:a0:dc:35:ab:0b:7b:42:ff:c2:21:bf:f5:9f:a5:
69:9b:a2:de:43:98:d6:28:0f:f5:05:f4:6c:2c:45:
30:e8:93:6e:1e:f9:0e:6f:41:37:50:ec:24:7e:4f:
2e:c4:e3:c8:60:da:40:fa:9f:0d:db:e7:57:ab:70:
c7:fd:a7:9a:62:b4:ca:97:da:85:a8:47:73:97:29:
a9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1A:D3:5C:11:56:F3:6B:C3:AE:74:26:64:BA:3B:E9:D9:2C:68:DC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145517.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab33::/32
Signature Algorithm: sha256WithRSAEncryption
31:fd:b8:14:0c:36:7f:2f:58:e0:2a:22:e0:63:49:24:79:08:
65:21:9d:bf:e9:c1:11:68:15:5a:4e:ae:43:65:11:69:77:cc:
6b:d1:96:2f:bf:3c:46:e5:7a:a0:5d:72:1a:b8:e7:3b:1d:ad:
31:6c:ef:54:09:61:d4:71:73:4b:d7:b8:f9:e6:eb:7b:29:81:
be:a6:fa:e2:42:74:b0:56:9a:c1:0e:9c:94:7f:cd:aa:37:74:
f1:99:95:1a:a7:c0:db:86:8a:4b:93:bd:8f:15:00:86:d1:4b:
78:57:46:31:ee:8f:4e:59:ca:c0:96:41:7b:fd:50:90:e6:f9:
56:73:64:2c:48:9b:f7:93:2f:43:e6:9f:e9:fe:3e:d4:8b:bb:
bf:4e:89:23:5c:d3:77:f6:ad:7a:47:dd:ca:1d:cb:4f:dc:19:
bd:03:5d:21:e4:7d:89:d6:c8:ab:ac:22:5e:2a:66:7b:ad:7a:
b1:23:c5:e7:5e:c8:73:02:bf:d2:a8:40:89:b0:fa:95:29:15:
e9:03:85:fe:2f:92:8e:5a:24:9b:5f:f5:43:36:fb:d7:5d:98:
69:4a:42:e4:58:78:5a:10:a8:b4:bb:76:f3:5a:aa:7e:f8:1d:
1b:43:36:48:78:66:08:fc:f3:6d:6f:22:78:d2:60:62:56:85:
f1:f3:99:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:36 2026 by rpki-client