Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145557.roa
File: AS145557.roa (raw, json)
Hash identifier: Vv9JNoAvDi1qmoTMOLN1tBue8ODLi3r17E1KzAm+VxU=
Subject key identifier: FC:CA:DA:00:B2:BC:09:A6:5D:AB:86:71:A8:68:B6:2B:32:FB:2A:17
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0A29A9FAA30BF8EF6A94C6CE70CE51D9912338DD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145557.roa
Signing time: Tue 26 May 2026 02:35:16 +0000
ROA not before: Tue 26 May 2026 02:30:16 +0000
ROA not after: Tue 25 May 2027 02:35:16 +0000
asID: 145557
IP address blocks: 240a:ab5b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:29:a9:fa:a3:0b:f8:ef:6a:94:c6:ce:70:ce:51:d9:91:23:38:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:16 2026 GMT
Not After : May 25 02:35:16 2027 GMT
Subject: CN=FCCADA00B2BC09A65DAB8671A868B62B32FB2A17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:3c:e5:ae:a3:78:6a:09:5b:2b:b9:a7:86:
d5:0f:77:bb:40:79:f5:7f:f8:78:17:50:5c:93:39:
7e:63:e4:93:62:20:6f:1d:75:da:36:28:b0:4c:67:
80:c6:12:8e:0e:97:a2:27:54:45:92:97:68:98:ba:
c4:1e:68:95:3e:73:d0:87:f3:1b:53:54:38:11:d0:
48:2f:46:1d:4a:71:09:d4:72:c9:2a:94:13:12:29:
55:26:ee:85:62:10:f5:bf:57:65:5c:15:ef:ce:c7:
1f:50:f3:c9:1f:48:85:f6:6b:69:50:d7:6e:03:08:
48:49:67:14:32:9d:ba:42:e2:ef:7c:20:af:fd:53:
6f:3f:ff:53:6c:37:64:14:d7:5a:35:b7:7e:60:43:
b1:e9:80:d7:f0:26:42:39:62:ab:75:96:d4:b4:7e:
ba:44:5b:eb:c9:b4:72:85:6e:b8:bd:1d:df:7d:47:
b1:4a:3e:8a:b5:3d:ec:16:61:5d:44:e7:4b:5e:19:
2f:f9:f6:05:fe:a6:11:ce:be:51:68:a1:7b:55:9d:
38:ac:04:16:53:7b:bd:d4:47:82:83:9a:9d:a3:fe:
9b:96:8a:3a:6f:b0:4b:bf:bf:34:29:6b:07:04:65:
dc:8e:cb:8a:9a:a4:e6:d8:15:dd:31:f6:6d:d6:81:
45:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CA:DA:00:B2:BC:09:A6:5D:AB:86:71:A8:68:B6:2B:32:FB:2A:17
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145557.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab5b::/32
Signature Algorithm: sha256WithRSAEncryption
bd:4e:8b:e2:ca:80:cb:e3:42:2e:7e:83:d1:90:af:da:83:63:
69:db:2a:f3:ad:3b:03:ec:11:80:a4:8a:ed:12:db:08:65:93:
a2:ab:04:ab:62:80:e4:e4:e3:70:ec:a0:b0:2c:4b:97:21:84:
41:68:06:59:d9:11:b1:57:44:db:cf:df:a2:8f:07:b7:8a:f7:
ee:8b:32:e0:ca:55:c8:7b:62:79:0b:b1:1a:10:9f:a7:40:3b:
2c:e9:4c:01:14:6e:0a:e1:02:29:54:6a:11:88:4c:ef:56:b5:
7a:bc:ee:d0:fb:a0:51:6c:97:9d:02:99:e4:7a:19:6e:a9:8a:
9b:61:28:28:79:27:95:ec:5f:d2:9e:eb:8f:9f:a9:be:82:29:
4a:c9:32:cd:4c:42:c5:c0:f0:ce:e2:8c:94:e1:5c:a8:a9:93:
0d:57:91:86:20:9e:43:c0:17:8d:29:81:63:be:aa:81:5b:0e:
1b:17:8e:a8:0a:1e:0c:97:66:c5:1f:8e:d7:d3:ac:cb:31:24:
8b:5b:e9:e3:f2:d3:b0:0f:93:7b:d8:33:ca:af:f5:c5:8b:8f:
80:a4:1e:59:c3:48:5e:e0:60:2d:99:97:c4:5c:ce:1c:04:af:
53:f7:64:83:3a:10:3c:6b:31:67:18:b8:cb:ea:5a:f9:58:79:
a2:08:0c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:03 2026 by rpki-client