Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145589.roa
File: AS145589.roa (raw, json)
Hash identifier: vNlUPdPYK6jCa5n7zTnUXNcqIDHlNv1r049ASE0k48c=
Subject key identifier: F5:3C:85:ED:EA:5B:DC:3A:58:AF:05:3A:DF:99:AF:CF:DA:AF:AE:E9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 467EF41853DC4DAF3D2D7EF055A3E3503C2554CC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145589.roa
Signing time: Tue 26 May 2026 03:16:49 +0000
ROA not before: Tue 26 May 2026 03:11:49 +0000
ROA not after: Tue 25 May 2027 03:16:49 +0000
asID: 145589
IP address blocks: 240a:ab7b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:7e:f4:18:53:dc:4d:af:3d:2d:7e:f0:55:a3:e3:50:3c:25:54:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:49 2026 GMT
Not After : May 25 03:16:49 2027 GMT
Subject: CN=F53C85EDEA5BDC3A58AF053ADF99AFCFDAAFAEE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:81:eb:92:b1:43:f8:b0:c5:31:ff:2b:05:19:
6d:d9:8b:78:9d:72:f7:80:c6:60:0c:aa:9f:c8:57:
bb:5f:bf:20:78:d4:66:5e:ba:e0:d3:ea:35:6d:3d:
c1:3f:c9:38:17:13:77:b1:2a:2c:3e:b1:dd:ea:1a:
ba:e1:9c:12:2c:64:0b:15:a7:d8:02:f4:d9:d6:b9:
9a:94:96:19:d6:c5:bb:0c:11:62:63:d9:11:8d:67:
f2:66:67:2b:a3:e2:99:da:d4:e5:90:14:42:bc:72:
01:fb:77:19:e0:b0:58:05:65:cf:cb:8c:9d:0e:ae:
b6:dc:eb:0c:c7:21:94:32:b5:bc:43:c5:c9:8a:83:
1f:42:82:68:07:74:5c:a7:6f:05:97:96:2c:d3:e0:
26:58:76:7f:f9:a7:52:20:9f:66:09:5a:7b:4f:0c:
16:0e:55:89:0a:be:26:b0:b6:67:8b:e8:f5:fc:89:
a2:19:45:50:2d:fa:b0:61:03:d3:43:1b:2a:e9:ac:
0c:f7:35:5c:eb:01:51:8e:77:eb:dd:53:0d:c5:69:
69:f1:9f:d1:09:02:d6:b0:14:b0:6d:ef:37:b0:c8:
fa:17:f2:d9:94:6f:39:0c:5d:37:7e:99:7d:ee:e6:
79:f3:f2:60:79:ca:8d:b9:a1:6c:40:d6:37:31:2d:
c5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3C:85:ED:EA:5B:DC:3A:58:AF:05:3A:DF:99:AF:CF:DA:AF:AE:E9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145589.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab7b::/32
Signature Algorithm: sha256WithRSAEncryption
85:9d:ae:a1:5d:0a:fa:00:72:d6:dd:b3:f4:cf:4d:80:56:30:
9b:f2:18:d0:37:b8:59:10:2b:ba:94:a5:fe:6a:f9:8e:05:d7:
5b:17:65:83:2b:e2:a6:3a:f6:91:c9:2d:e3:c4:71:24:58:4c:
6b:0b:22:b0:82:ff:d5:5a:f2:84:12:40:97:52:b3:86:9c:94:
e5:77:83:19:37:fd:12:b2:68:d9:f2:da:8a:b3:c6:a8:af:b8:
e0:48:fd:dc:26:d2:48:55:18:a1:7e:b6:7f:ed:e5:34:4c:bd:
19:a4:68:0c:13:4a:5a:28:46:1c:c9:7c:71:ce:1a:0c:86:17:
ac:e6:e8:f3:d6:2b:51:5c:47:f2:03:93:82:34:2a:d5:44:0f:
2f:74:e1:7d:32:bf:f3:a3:c7:f9:90:0a:03:25:2b:99:45:88:
0a:d1:04:16:b3:3e:ad:5e:7d:b8:d1:a8:ce:38:42:a6:35:ed:
1b:16:52:d3:63:62:32:4a:04:56:54:b4:f6:2d:9c:7a:7b:a2:
2a:13:1f:a5:53:c7:4d:3c:b5:4a:e0:c7:d8:10:fb:59:3e:19:
1a:aa:f3:7a:43:37:d5:53:fd:e8:a4:a0:36:27:27:61:df:14:
68:f1:02:0e:4b:89:ca:ce:30:e2:d4:04:b8:87:92:70:3c:53:
b1:ac:a3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:03 2026 by rpki-client