Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145529.roa
File: AS145529.roa (raw, json)
Hash identifier: Pe/nmYyDrEnqb2hHmdqBcXF9aLxf7kizSB/5vebuvWg=
Subject key identifier: 4B:BB:0B:F7:87:76:F9:7F:9A:82:53:97:9E:8D:47:42:31:FA:E0:67
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 397D421D6DCFC75BCD150B5BF94B84C3D39DCA49
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145529.roa
Signing time: Tue 26 May 2026 06:12:52 +0000
ROA not before: Tue 26 May 2026 06:07:52 +0000
ROA not after: Tue 25 May 2027 06:12:52 +0000
asID: 145529
IP address blocks: 240a:ab3f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:7d:42:1d:6d:cf:c7:5b:cd:15:0b:5b:f9:4b:84:c3:d3:9d:ca:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:52 2026 GMT
Not After : May 25 06:12:52 2027 GMT
Subject: CN=4BBB0BF78776F97F9A8253979E8D474231FAE067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:75:90:bb:56:41:9c:8e:f3:10:8e:1d:df:
17:e0:ed:6f:c3:d0:d6:05:2b:32:61:38:43:62:a1:
eb:c6:1a:30:9c:81:7e:14:5d:87:0b:a4:3e:61:bf:
4f:fa:99:6a:6f:d0:98:25:9c:84:e2:ec:29:70:97:
47:cd:0a:e7:e4:39:53:40:a5:ea:0d:b8:e0:44:ff:
96:51:44:db:81:a2:79:06:a4:df:7c:d0:54:fe:56:
0a:ef:11:57:bd:b6:cd:8e:d1:d5:6e:86:84:b8:12:
56:fc:63:49:8b:9c:9d:a7:0d:0c:40:94:74:e2:c4:
0d:3a:81:1d:0e:7a:c1:54:d2:d7:8f:9a:be:f7:c7:
a4:59:fc:86:df:cb:14:9a:52:5c:b0:f1:b2:f2:7d:
54:41:94:42:77:77:f9:a2:b9:6d:68:e2:ff:07:d5:
25:b4:68:a1:f2:aa:2c:8d:48:92:b5:a8:78:52:f6:
ab:99:d3:b5:9e:96:87:25:f2:e4:03:93:37:8c:9a:
cb:32:fc:95:59:26:41:c8:ec:4e:06:c4:99:25:5d:
c8:f2:4f:bf:98:34:d1:5c:18:1d:8c:f0:d2:30:0f:
7e:59:e5:1a:0e:97:7e:9f:a0:aa:fe:24:fb:c8:f1:
56:c0:67:1e:6e:4f:54:d4:11:11:b1:50:19:b5:d5:
c4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BB:0B:F7:87:76:F9:7F:9A:82:53:97:9E:8D:47:42:31:FA:E0:67
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145529.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab3f::/32
Signature Algorithm: sha256WithRSAEncryption
10:5d:8a:8b:50:ab:54:48:b7:d2:f2:6d:93:0e:36:ca:4b:eb:
7c:e9:c5:cc:3a:bb:fd:a7:30:e2:1c:55:76:4b:74:95:40:93:
3e:4a:5a:ea:7d:13:59:48:f1:88:ef:9f:48:59:30:35:7e:5f:
76:c7:a4:05:c9:86:37:e6:67:b9:77:60:8b:d3:ae:ba:53:bd:
2f:ad:4c:d3:1e:93:7b:40:ef:f1:33:2e:c4:57:e4:d5:58:e9:
88:e6:40:36:d4:c7:c6:8c:81:90:36:2d:b8:34:6d:05:4b:c7:
97:2e:c6:90:e7:c6:7f:b4:44:64:23:9b:7f:e5:ea:6f:12:db:
7a:70:55:17:cb:1c:42:56:48:86:71:22:a0:5c:36:55:1f:99:
3a:63:5b:b5:96:a9:1d:3e:72:59:0f:5f:fd:8a:70:14:b9:c5:
fb:b9:65:6d:57:2c:d1:00:b3:0e:76:0f:90:af:22:f5:ae:ba:
ac:be:e0:af:e4:b2:5a:77:ac:f4:44:49:77:e9:27:bf:c8:ef:
9b:6e:58:dd:bd:bb:38:25:7f:49:0b:19:89:30:5b:55:f1:e4:
66:94:90:ab:c5:12:b6:26:e5:f3:ba:0e:2d:1a:58:c1:b8:13:
2c:83:ba:4c:df:ce:75:09:65:b8:f0:a7:1d:59:c4:ac:d6:b8:
38:f5:40:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:47 2026 by rpki-client