Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145586.roa
File: AS145586.roa (raw, json)
Hash identifier: MNMtbBDv9z4lT06XlOwoQN6hOo0ypVvGKfwcUUmfBvU=
Subject key identifier: 68:8E:F7:3C:83:83:E3:88:B3:1B:9B:CB:2E:7F:C4:74:CE:E3:05:CB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 10BB2CCB55DCA2F4D88D323999D7241DFF532EC9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145586.roa
Signing time: Fri 22 May 2026 04:08:19 +0000
ROA not before: Fri 22 May 2026 04:03:19 +0000
ROA not after: Fri 21 May 2027 04:08:19 +0000
asID: 145586
IP address blocks: 240a:ab78::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:bb:2c:cb:55:dc:a2:f4:d8:8d:32:39:99:d7:24:1d:ff:53:2e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:19 2026 GMT
Not After : May 21 04:08:19 2027 GMT
Subject: CN=688EF73C8383E388B31B9BCB2E7FC474CEE305CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7d:1f:6c:47:fe:1d:7c:c7:d4:ae:4d:ff:02:
02:58:13:73:74:ce:45:67:20:0b:c3:14:e1:76:57:
01:40:67:1d:fe:d8:2e:b6:0f:61:ff:28:16:df:51:
3e:63:fb:8a:8b:b0:ab:dc:49:a1:4c:ca:d7:33:81:
52:47:9e:43:af:7b:28:08:b6:e2:32:ef:13:b6:42:
2c:9f:c0:db:31:ca:21:f8:7a:05:a3:7b:58:13:45:
d3:a8:e8:9b:ed:f2:f2:15:ce:df:cd:2f:59:43:e1:
a8:dd:b8:6e:a3:65:6d:9c:6b:be:80:52:9d:64:bf:
ca:f1:7b:3d:6f:10:80:b8:e3:3a:57:70:9a:0a:f3:
f7:54:8b:76:ee:19:76:ed:1f:04:bf:de:e1:1c:c8:
f1:3d:22:f9:a6:eb:1d:01:93:6a:59:4f:52:a5:91:
75:8a:ef:c8:c9:d4:d1:42:e4:2d:94:07:33:6b:3b:
75:85:06:ef:98:18:4a:93:7d:cb:61:1d:3b:be:9a:
98:e8:a4:5d:08:cd:a8:64:55:e5:f9:43:ae:94:e1:
45:66:9d:be:9b:6b:31:1c:8d:25:a5:d3:9d:f5:ca:
20:69:28:43:4f:20:d0:f7:d9:88:ec:a8:4c:4f:02:
05:a8:02:18:9e:c2:f0:ff:d8:bd:94:16:89:cb:cf:
61:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8E:F7:3C:83:83:E3:88:B3:1B:9B:CB:2E:7F:C4:74:CE:E3:05:CB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145586.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab78::/32
Signature Algorithm: sha256WithRSAEncryption
39:6d:00:d7:00:d3:92:31:7d:b5:31:0c:ef:fc:b2:ae:f2:1f:
e9:1f:d7:d1:c9:48:1d:c4:1e:8b:5c:ae:bb:43:c3:d1:8a:e4:
df:39:c1:8f:c7:e4:49:62:5c:81:69:3d:b0:c6:b3:c7:31:fc:
33:d7:2c:7d:65:82:c8:a6:29:a4:00:ce:8e:e4:48:ec:38:c0:
89:c2:b4:da:7d:06:a3:5e:f6:56:60:7c:2c:14:b2:3d:28:1a:
e3:23:c7:9e:42:5c:57:ca:b3:c3:cc:8c:5d:00:51:cd:7c:d7:
58:b6:d2:d2:dd:1e:96:18:e7:45:d0:f8:1c:90:53:04:e9:44:
c5:7b:10:dc:5b:53:92:9c:df:3a:9a:c1:6f:e7:84:8c:6c:8c:
92:b8:50:58:2d:54:13:81:10:76:7e:31:25:27:80:ba:5e:ac:
1d:b8:f2:6f:00:03:2b:8a:ec:45:44:61:ac:d8:b2:15:e4:f0:
82:5c:be:49:ba:7f:61:6b:20:54:bc:4e:0b:f0:05:b4:96:e2:
83:e1:c7:54:d6:17:51:18:e3:4c:c6:0d:39:14:90:63:85:0c:
48:cc:14:1d:ab:2b:db:6c:b2:69:61:dd:ae:1f:00:8e:1f:84:
b0:72:48:94:d7:73:a4:6a:68:42:23:f6:2d:42:e6:c6:61:dc:
33:ca:ed:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:38 2026 by rpki-client