Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145585.roa
File: AS145585.roa (raw, json)
Hash identifier: EY9h2w68OxbQT5YpIiAQaCStOUsLiQM42+yAUXz0Jpw=
Subject key identifier: 96:AC:80:88:EC:BA:8E:7C:BC:80:34:90:DE:0B:62:5D:9A:A2:B4:92
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4F862547EB595D16FC8245F50269DCDA0A8DC5F4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145585.roa
Signing time: Mon 25 May 2026 01:38:28 +0000
ROA not before: Mon 25 May 2026 01:33:28 +0000
ROA not after: Mon 24 May 2027 01:38:28 +0000
asID: 145585
IP address blocks: 240a:ab77::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:86:25:47:eb:59:5d:16:fc:82:45:f5:02:69:dc:da:0a:8d:c5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:28 2026 GMT
Not After : May 24 01:38:28 2027 GMT
Subject: CN=96AC8088ECBA8E7CBC803490DE0B625D9AA2B492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:50:3a:e8:d9:d4:34:06:3a:3a:a2:10:ef:
e2:80:13:3b:cf:c2:6f:07:5c:ac:6d:cd:5d:69:4d:
31:7e:85:28:39:0e:ab:27:c0:12:ee:f7:77:bc:64:
b5:7c:bb:0c:01:8f:54:fa:15:18:2b:e4:7e:c0:52:
64:bc:d7:c5:db:30:17:57:f9:c1:32:2b:dd:f9:3f:
5b:26:ce:b5:3f:68:8a:a5:e0:58:bf:0b:8a:8e:80:
c0:fc:bd:6e:cd:74:41:d3:a7:b5:6c:f0:00:8f:74:
a7:a3:31:7c:84:41:d3:da:32:f8:4e:ce:49:b0:47:
97:5f:75:25:ed:63:ba:bf:20:84:27:1b:09:29:c1:
ea:02:69:12:b6:c0:aa:ac:46:32:d0:80:19:fc:a0:
a7:78:8c:74:26:5a:b5:4f:59:c2:c0:2e:1b:10:44:
57:ec:b6:71:99:24:db:a9:fe:6c:da:23:15:46:ff:
73:af:cd:ac:8e:3e:32:c9:18:83:e1:11:43:68:e0:
92:e6:2b:9f:7c:b2:41:29:7c:a3:22:24:d5:0c:75:
f2:93:d9:7f:98:ae:4e:a8:e3:26:ef:da:42:bf:36:
5f:90:43:8d:25:74:0d:e6:a5:f6:9d:4b:ae:3c:9f:
45:57:87:a6:6f:ff:5c:f7:b6:d9:63:80:00:f0:de:
fa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AC:80:88:EC:BA:8E:7C:BC:80:34:90:DE:0B:62:5D:9A:A2:B4:92
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145585.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab77::/32
Signature Algorithm: sha256WithRSAEncryption
46:38:71:02:80:56:b6:f2:73:f5:af:f3:7b:66:8c:7a:09:5a:
29:b0:c6:f6:ad:81:ab:13:26:e3:66:f6:b8:cd:a9:ef:64:19:
9e:69:5d:f0:a9:2b:eb:24:a1:79:8d:25:7d:fa:24:85:47:d5:
de:66:b0:ed:ef:21:d1:28:7f:45:24:60:e2:93:13:26:94:11:
b7:7b:1b:15:fe:e4:7b:11:28:3d:c8:79:7d:0f:5f:89:26:4d:
35:2f:4d:a4:27:cf:2d:76:3f:c0:4f:7d:0d:47:cf:d5:0a:ca:
12:60:81:09:44:98:ef:a2:ab:f7:6c:19:83:3f:76:a1:13:12:
a4:14:c5:e6:b1:6d:3d:8b:e8:78:18:ca:c0:9b:95:2a:64:81:
d0:26:a4:3b:d6:45:df:25:14:d3:36:2b:86:1c:58:0a:5f:6b:
31:d1:63:5b:1f:a5:fd:09:2e:52:a4:f5:c9:75:17:ff:0a:a4:
33:3a:0c:46:c8:fb:36:80:b7:72:85:37:62:4d:41:59:5c:b0:
08:08:38:35:d9:c4:8d:ae:d2:4e:f4:41:11:2f:c5:03:fb:b2:
c8:c6:cc:fa:82:e0:58:2f:d1:ec:09:60:be:db:ff:d3:07:74:
d9:51:06:35:86:fc:76:5c:85:53:30:b2:5d:0a:eb:d5:2d:d7:
31:dc:11:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:10 2026 by rpki-client