Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145518.roa
File: AS145518.roa (raw, json)
Hash identifier: kEhpQIVkHECV2bEQnkVtHkOUCkojp8MtH6WwdRgkKHk=
Subject key identifier: C5:C4:4D:AE:CA:51:30:0C:04:7F:B5:A6:FE:EA:7D:A3:D6:B6:77:B7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 50DE05D3E5356FAD67168C7E1CC0C29B4B907E2D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145518.roa
Signing time: Fri 22 May 2026 06:58:22 +0000
ROA not before: Fri 22 May 2026 06:53:22 +0000
ROA not after: Fri 21 May 2027 06:58:22 +0000
asID: 145518
IP address blocks: 240a:ab34::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:de:05:d3:e5:35:6f:ad:67:16:8c:7e:1c:c0:c2:9b:4b:90:7e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:22 2026 GMT
Not After : May 21 06:58:22 2027 GMT
Subject: CN=C5C44DAECA51300C047FB5A6FEEA7DA3D6B677B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c7:9f:29:20:da:34:b4:b9:36:87:53:3c:e6:
6a:98:67:fe:bb:9a:0a:2d:76:51:c6:54:b5:8e:6b:
6f:e3:2b:f7:87:21:69:4b:17:49:1f:0e:64:37:a0:
3b:34:9e:a1:b9:70:3b:ef:a9:2f:c6:80:2d:3a:b1:
da:d4:be:b9:fe:23:ff:a9:27:b9:6e:dc:4b:6a:a7:
0c:63:05:84:dd:c7:86:08:b8:7a:76:44:d1:7a:8c:
be:81:76:41:2a:a5:0c:ba:36:48:f5:dc:71:ed:8d:
e7:2e:6f:13:f9:4b:9d:f9:c8:0d:f0:04:c5:39:68:
c1:e9:ab:79:2b:9c:38:6b:41:68:f7:3c:f0:49:a8:
fb:c9:11:5e:4a:46:5f:4c:af:5d:0b:1b:6c:d4:c0:
90:db:3a:1e:18:50:b1:56:1f:4e:de:d0:76:35:42:
59:51:cf:67:76:3a:96:be:6a:f0:e6:a7:2c:2e:56:
e3:7d:31:c6:90:93:1e:b3:78:c6:53:fc:f1:a0:9f:
39:a8:22:f7:4f:44:30:07:60:b0:bb:32:48:30:d8:
0d:53:1d:2e:96:08:52:3a:e5:90:4b:c5:5d:14:e6:
52:7e:22:a0:a0:16:27:ac:4e:b0:86:23:48:fa:4a:
ff:93:b5:98:e5:e8:0e:fb:1b:fa:ee:d1:65:e6:07:
cb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C4:4D:AE:CA:51:30:0C:04:7F:B5:A6:FE:EA:7D:A3:D6:B6:77:B7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145518.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab34::/32
Signature Algorithm: sha256WithRSAEncryption
70:9d:f7:ac:4e:30:3a:33:35:43:94:11:a6:68:be:39:22:54:
79:5c:b2:96:b8:9f:12:66:3f:b5:f6:ef:dd:5a:cd:0c:5b:0b:
30:bd:f6:5e:6d:91:f3:58:d6:53:ab:97:81:45:09:92:d8:99:
15:85:65:17:55:3c:ae:b5:94:b6:c6:9c:a6:3a:81:89:6a:3d:
cd:08:05:e3:0f:8d:ac:13:31:be:fc:f3:9d:9c:3c:bc:c3:17:
fa:55:52:ca:25:96:27:fb:64:3d:d5:b2:af:ad:e7:69:7e:3c:
af:2f:7d:33:66:3c:e3:72:c3:a6:38:f2:e4:fb:ad:02:08:80:
8e:14:b4:f5:c8:48:47:fd:0c:e7:64:5f:65:66:21:b8:ed:7d:
cf:03:fe:7e:73:b9:af:49:f2:d7:81:aa:34:6e:e0:44:6f:40:
c8:70:5d:9e:29:a4:8f:5a:be:03:fa:3a:84:87:73:a1:1d:91:
28:56:bc:dc:97:eb:e5:e9:04:21:4b:e4:58:d0:35:c2:72:92:
c2:6a:af:99:24:fc:76:23:08:9d:9a:66:13:e4:af:12:df:47:
1a:83:20:a4:9c:ec:5a:dc:1f:93:1c:b3:35:48:f6:3c:5a:06:
fa:10:ca:fe:20:70:51:49:85:8b:6f:40:ec:54:53:39:64:a8:
03:74:4f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:09 2026 by rpki-client