Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145587.roa
File: AS145587.roa (raw, json)
Hash identifier: vpRrsJS0I3ZpkrpyeXesYykm039c1iLoyNFzhrSbcJQ=
Subject key identifier: BB:55:CF:19:DD:AA:D1:E7:6B:AF:75:C2:64:02:B7:20:C2:DD:2E:17
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6B17A486EFDB0FC59913A859F60FD54BFD08339A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145587.roa
Signing time: Tue 26 May 2026 03:16:57 +0000
ROA not before: Tue 26 May 2026 03:11:57 +0000
ROA not after: Tue 25 May 2027 03:16:57 +0000
asID: 145587
IP address blocks: 240a:ab79::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:17:a4:86:ef:db:0f:c5:99:13:a8:59:f6:0f:d5:4b:fd:08:33:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:57 2026 GMT
Not After : May 25 03:16:57 2027 GMT
Subject: CN=BB55CF19DDAAD1E76BAF75C26402B720C2DD2E17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:10:39:1c:aa:b4:44:59:98:5f:62:93:5b:29:
ea:18:b6:21:a3:3e:cb:0b:14:83:18:1f:6b:d4:d8:
11:d3:64:c7:b9:11:43:6e:95:51:05:80:f3:2f:f5:
04:ae:3d:a5:16:01:01:ed:52:48:9a:42:93:bc:b6:
c0:c6:1d:cb:3c:d2:93:bb:98:59:64:92:e7:dc:c7:
4c:9c:9f:3c:e5:ff:5f:7e:49:06:8c:d5:7b:2a:54:
6c:75:e7:57:70:cc:62:20:0c:40:3e:47:38:9c:98:
49:c6:f5:c3:fb:42:e9:e4:9e:65:5e:b1:b6:6f:51:
14:2a:42:b7:8c:76:f8:5c:5d:46:3e:bc:49:da:5a:
f1:51:34:0a:9b:c7:e5:47:07:a9:ff:27:18:ed:6f:
59:2d:80:31:53:5f:a0:8f:c8:cf:d2:08:6e:4e:8a:
dd:09:1f:d1:ce:9d:c3:a7:76:51:4a:2f:5a:b7:e1:
13:bd:9d:56:31:e2:48:7c:fb:c7:78:01:d4:9b:62:
a6:01:01:71:85:32:1a:46:d3:d7:0c:fd:e4:15:4a:
f8:ed:0b:17:77:9e:07:9c:21:83:7e:53:67:65:8c:
82:78:af:e7:3d:5a:f8:98:41:ec:31:40:d7:61:c6:
2a:32:1a:d6:e4:c3:1c:60:12:5c:dc:2a:f3:02:53:
4d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:55:CF:19:DD:AA:D1:E7:6B:AF:75:C2:64:02:B7:20:C2:DD:2E:17
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145587.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab79::/32
Signature Algorithm: sha256WithRSAEncryption
6c:cf:6d:61:0d:e0:c9:4c:0b:3f:ac:05:ea:da:72:a3:a1:8f:
6d:4b:4e:bd:d9:98:b6:34:03:ed:e6:66:37:b2:41:99:8e:c1:
28:0f:08:56:04:a6:05:71:52:c7:a8:97:ec:e6:59:90:cf:4b:
86:3c:ab:38:4d:77:cd:26:26:86:e3:30:13:a2:f4:4e:a2:88:
28:98:04:a7:95:90:d5:c0:1d:6d:05:e8:2a:73:dc:89:e0:2b:
07:87:a2:a5:16:24:d0:27:9d:98:2b:0c:ee:8f:2b:c1:74:95:
77:31:05:7b:29:b6:7a:6f:86:4f:25:de:ba:3f:65:1a:a7:d5:
ce:58:f9:5a:30:68:0b:4a:71:83:b1:46:25:6c:27:e1:69:85:
71:4f:32:15:39:7c:6e:2b:93:13:f0:99:dc:a6:e2:c9:bb:b5:
9e:37:1d:c9:5a:cf:32:8d:53:04:7b:26:af:e9:5b:94:6d:d2:
b5:78:7d:20:2c:b0:79:af:9c:65:1f:25:23:de:9e:83:ca:3d:
15:69:29:39:b8:ab:03:bc:fe:1e:66:78:39:8c:b6:7b:af:44:
f9:c0:8b:62:f0:e5:47:04:38:f9:ec:ba:45:36:a0:2c:bb:d5:
90:19:94:8e:a5:35:4f:8a:2c:dd:78:a8:2b:d0:34:eb:0d:4f:
db:57:93:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:52 2026 by rpki-client