Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145576.roa
File: AS145576.roa (raw, json)
Hash identifier: rNgFj/JqakU0s1P7yh6Is/QYE2wAOypA8mnRT/zVl3M=
Subject key identifier: 07:38:E1:31:EC:A2:1D:DC:C8:73:4C:97:C3:AC:C8:C2:15:BB:72:4D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2632A937AFB5758BCBCF99F6D37E425E3490ECFF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145576.roa
Signing time: Fri 22 May 2026 01:50:18 +0000
ROA not before: Fri 22 May 2026 01:45:18 +0000
ROA not after: Fri 21 May 2027 01:50:18 +0000
asID: 145576
IP address blocks: 240a:ab6e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:32:a9:37:af:b5:75:8b:cb:cf:99:f6:d3:7e:42:5e:34:90:ec:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:18 2026 GMT
Not After : May 21 01:50:18 2027 GMT
Subject: CN=0738E131ECA21DDCC8734C97C3ACC8C215BB724D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7f:20:69:32:83:73:07:9b:d0:37:03:06:39:
96:8d:ce:90:78:62:58:c1:f6:db:38:ee:a0:80:26:
94:fd:33:6a:41:93:c6:b8:aa:42:42:d6:24:25:5f:
38:48:6d:6c:f2:51:99:08:58:3a:9d:c6:29:35:fd:
29:b6:15:f3:03:20:63:32:70:35:a5:a8:6d:4b:65:
9e:83:d7:38:55:54:2d:b0:39:d3:b5:f3:37:dc:7f:
4d:3e:e7:54:93:55:59:33:c8:0f:58:5f:c2:12:79:
18:e8:0f:d7:9b:33:92:d8:fb:db:85:59:cf:d1:2f:
7d:03:79:c7:58:d5:72:a7:0a:24:e8:c4:9c:14:43:
1f:cd:e3:5e:9a:9c:0f:d3:63:bc:67:40:76:4c:89:
a0:92:24:e4:1a:cf:a8:c3:c0:92:65:c9:e1:ec:8e:
e0:e6:14:97:5c:1b:bc:2a:da:4b:78:01:0f:49:92:
93:41:f3:44:83:1c:01:f1:49:54:49:80:d6:04:2c:
25:c2:37:74:aa:b2:13:a3:56:cd:54:21:88:3e:b5:
d3:85:78:18:dd:52:da:9b:52:2c:8f:c7:bd:56:49:
68:a0:23:d5:5d:43:40:f2:5f:24:d3:72:f2:ee:90:
32:10:94:d5:5d:ff:53:35:78:5e:1b:6b:58:27:72:
7a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:38:E1:31:EC:A2:1D:DC:C8:73:4C:97:C3:AC:C8:C2:15:BB:72:4D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145576.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab6e::/32
Signature Algorithm: sha256WithRSAEncryption
34:5b:4e:2d:1d:a0:d4:34:d0:f6:b1:23:db:11:dc:b8:a3:73:
47:db:9c:d1:f7:56:f0:e3:dd:f8:be:b2:4d:55:53:56:6d:1d:
4a:b8:bc:04:5f:02:10:46:6e:43:85:71:91:15:93:46:24:30:
29:88:10:01:f5:2e:e2:c3:9a:a7:8b:11:e0:1b:24:73:ed:5f:
8c:0c:68:74:b2:f9:50:0d:2e:93:7f:b7:25:68:c4:1d:c1:92:
93:09:d2:6f:49:9a:e8:16:58:e5:44:f9:e9:4b:d9:0e:d9:24:
5b:99:60:6d:06:56:2a:26:56:fc:7c:c5:b6:ad:ff:90:ce:52:
ff:cb:32:11:4f:79:27:82:74:ac:3a:eb:c8:a0:2e:ff:03:f3:
5f:2e:b6:78:13:62:cf:e7:08:e0:2b:0e:71:79:de:7c:94:61:
c5:a3:4b:96:be:19:dc:a7:f0:f1:04:91:f6:d1:02:8a:e3:d3:
eb:8b:7f:5a:7c:27:46:3d:b5:b4:84:bc:f7:a1:d1:10:58:1e:
67:02:3a:74:97:34:c6:38:86:89:62:da:45:63:52:df:e3:39:
a8:2c:06:08:78:52:23:c5:fc:50:30:95:7e:67:af:ed:31:9f:
57:ff:5b:40:d3:49:43:93:c2:23:5f:6f:10:b4:94:86:02:e3:
20:24:03:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:42 2026 by rpki-client