Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145561.roa
File: AS145561.roa (raw, json)
Hash identifier: PZ6yM5Tq1lzYqfkshdWjlq9RVTKaUW9pQtTYSk0htQ4=
Subject key identifier: 45:7B:75:E4:49:BA:BE:EE:34:11:CE:6E:75:23:C6:0E:3E:EE:82:5D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5D1DAAC8DB69E69EF1E04235FBEFC397B292D0A6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145561.roa
Signing time: Fri 22 May 2026 06:05:36 +0000
ROA not before: Fri 22 May 2026 06:00:36 +0000
ROA not after: Fri 21 May 2027 06:05:36 +0000
asID: 145561
IP address blocks: 240a:ab5f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:1d:aa:c8:db:69:e6:9e:f1:e0:42:35:fb:ef:c3:97:b2:92:d0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:36 2026 GMT
Not After : May 21 06:05:36 2027 GMT
Subject: CN=457B75E449BABEEE3411CE6E7523C60E3EEE825D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:14:cf:65:fe:35:75:b5:35:f0:e8:b0:0e:
c0:18:81:42:ca:74:4e:80:70:fc:17:d5:e4:40:08:
0f:d4:6b:26:0c:f3:6b:00:98:22:74:25:6a:c3:f3:
ff:7c:b9:01:12:be:92:b3:2d:0d:7b:9a:2a:28:61:
21:c0:0b:04:51:6f:6c:7c:95:cd:81:3f:0a:38:8f:
86:fb:6f:d3:17:73:f6:22:1e:6c:bd:72:79:63:ec:
03:00:53:2e:59:c9:66:0a:17:9b:e0:86:c1:1d:bc:
33:46:24:5c:40:63:30:ce:bd:0c:e7:fa:a9:1c:f2:
86:4d:d0:c9:9b:fb:0e:48:ba:2c:a3:91:3a:1b:cd:
ab:2e:85:a7:1e:42:df:51:a6:e5:4b:85:60:00:e7:
6d:00:73:8d:40:6f:d4:9a:bf:9a:7c:ee:7e:16:5e:
71:5b:38:60:2b:09:4e:12:58:57:ed:39:24:89:2d:
77:5c:09:33:33:81:4f:98:2a:b9:51:40:62:b5:72:
93:81:b4:5f:68:e5:d3:62:36:38:8d:4d:bc:82:96:
2d:4e:ad:fc:b0:78:11:00:bd:8d:64:bc:7f:d3:b7:
06:51:7d:9a:90:7d:0a:b2:2d:9e:39:a0:95:ff:18:
19:84:b0:b0:5c:0b:94:3a:30:f1:45:c6:f8:cb:25:
55:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7B:75:E4:49:BA:BE:EE:34:11:CE:6E:75:23:C6:0E:3E:EE:82:5D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145561.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab5f::/32
Signature Algorithm: sha256WithRSAEncryption
9e:75:ee:b1:c5:fc:bf:26:6d:fe:d7:39:d5:e4:dd:3f:ef:e1:
69:ee:ca:7e:22:e3:d6:0a:4f:96:f9:32:3a:00:92:17:cc:9f:
3b:fb:fc:0d:5b:7f:e0:fa:ef:40:cf:25:18:c0:13:ed:04:76:
c7:e7:cf:03:e1:6e:b5:7d:e4:2b:ba:dc:88:b1:c4:69:10:65:
45:c7:76:9b:22:0c:56:8a:25:1f:f7:3e:85:6b:fc:f4:6e:6d:
49:9e:6e:70:84:67:f9:3f:03:d2:a3:50:2a:55:b6:16:d9:72:
04:ac:b7:49:6d:ab:d4:39:af:d1:8e:be:6d:1b:9f:0a:e5:1a:
3b:59:2b:02:26:8f:1d:7c:d1:bf:19:27:e6:8d:66:5c:0b:e9:
22:f0:7e:ab:3d:f0:92:4e:89:76:d0:b9:2b:6e:0f:be:f8:be:
12:06:9e:b5:ee:80:34:26:16:ab:db:d4:71:ee:b6:ef:37:bd:
74:22:c1:2e:bb:ee:56:53:43:ef:8c:12:6c:b5:fc:48:1e:07:
6d:8b:d6:24:b2:a2:20:9b:d0:24:50:96:63:0e:66:fe:c9:45:
1c:1f:a4:27:ae:d7:9d:51:c3:2d:c3:30:a8:65:c5:5f:dd:f9:
24:0c:9d:04:d8:c4:29:7d:79:1b:1b:9d:0e:c3:87:28:dc:81:
64:42:44:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:25 2026 by rpki-client