Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145580.roa
File: AS145580.roa (raw, json)
Hash identifier: 5oT6N5G1VHZt/lpzWQ6SuIspNgUFVv7LJ60V4pCylDM=
Subject key identifier: 42:4B:81:9D:A0:DD:A9:1B:9A:C7:B7:4D:63:D8:32:F1:D2:F4:20:04
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 19C32996AAA2F50AB0EA33CB20B82DEC4823C9BA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145580.roa
Signing time: Tue 26 May 2026 01:13:29 +0000
ROA not before: Tue 26 May 2026 01:08:29 +0000
ROA not after: Tue 25 May 2027 01:13:29 +0000
asID: 145580
IP address blocks: 240a:ab72::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:c3:29:96:aa:a2:f5:0a:b0:ea:33:cb:20:b8:2d:ec:48:23:c9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:29 2026 GMT
Not After : May 25 01:13:29 2027 GMT
Subject: CN=424B819DA0DDA91B9AC7B74D63D832F1D2F42004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b2:d4:e8:b1:a9:d3:38:b4:7d:9a:cf:2d:e5:
f2:91:53:d0:4c:bd:6e:d8:7f:ee:2a:33:c6:05:bb:
cb:13:6f:d2:37:cf:45:7f:c6:bd:40:8d:4a:4f:7f:
7c:53:72:24:9d:3d:36:ee:72:e8:f7:66:6d:a4:35:
37:fb:c6:11:42:d8:92:77:a9:a3:23:53:36:03:cd:
b4:1f:a1:88:fa:4e:65:7c:5f:cd:26:78:53:c3:79:
9b:01:9c:7c:f3:3f:a8:c7:6c:15:6a:7f:a4:7c:30:
84:65:1a:3a:43:4b:38:bd:3d:9f:c3:3b:6d:cf:e8:
8a:87:52:23:c9:85:ec:33:73:8e:c2:be:97:91:d0:
59:cf:a4:c0:9e:7c:07:7f:ec:d7:35:a4:8d:af:94:
0f:c2:ca:c3:72:79:b7:19:ae:a4:27:1d:24:b3:f4:
18:db:5d:b5:d8:50:6c:b6:b4:11:c9:97:d9:9d:b8:
be:4c:6f:39:41:a2:2c:06:48:df:0e:95:95:d0:2f:
52:f1:72:42:8c:d9:79:f2:01:3b:58:18:64:7a:b1:
ae:cf:b6:4c:21:7e:8e:cf:73:5b:81:18:eb:2b:b0:
d1:e7:3e:74:e2:e8:f3:34:d1:85:bc:83:81:f7:3b:
a4:1c:3f:ce:26:ad:fd:c7:4e:f4:34:53:b2:7f:15:
9c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4B:81:9D:A0:DD:A9:1B:9A:C7:B7:4D:63:D8:32:F1:D2:F4:20:04
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145580.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab72::/32
Signature Algorithm: sha256WithRSAEncryption
2d:eb:14:79:ef:79:33:30:fd:39:c1:1b:fb:b8:98:97:4c:02:
fa:aa:02:95:ee:51:de:7f:54:cb:5b:bf:50:2e:55:7c:e7:10:
46:52:dd:69:3b:4c:e6:e0:e9:f6:d2:99:a6:cf:2c:ae:c3:8b:
5f:ff:06:9f:96:2f:24:26:5a:96:d4:31:b2:e5:eb:8a:b8:5b:
71:bd:df:ed:c3:b6:59:c4:18:a3:e6:78:05:d0:67:7d:66:a6:
70:5a:29:af:7f:05:5a:2b:fc:d6:3d:bd:7f:2e:74:a6:a3:45:
56:75:2f:d2:7c:21:08:b7:9e:fe:f7:a2:eb:37:bc:4f:16:50:
cf:65:38:1e:3f:54:21:fc:64:3a:3b:ea:e1:9c:15:77:a2:cb:
66:ef:6d:3e:29:32:1c:dc:ff:03:11:b3:26:0f:6d:c6:e3:84:
f3:07:fd:a7:0d:95:bb:14:18:4a:e7:12:8f:6b:89:2d:cf:0d:
bc:55:d5:27:40:88:c2:4a:02:8c:a1:6c:ca:12:c3:7d:61:7a:
e6:e9:84:27:ff:d8:14:cf:99:bf:36:1e:d7:db:33:dd:34:95:
36:8f:27:3b:c9:63:49:74:57:79:d5:f4:fa:cd:8e:c6:8b:e3:
66:7b:94:9d:6a:6d:23:84:e8:d8:d7:3a:e1:68:54:5a:2b:e0:
bb:b1:ca:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:54 2026 by rpki-client