Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145592.roa
File: AS145592.roa (raw, json)
Hash identifier: KO5i2ORBkgjgCoak0IupjaNvh8k9O0br3ZdxN/6mwx4=
Subject key identifier: 64:D0:72:73:03:79:D2:0E:16:83:7F:A7:80:F2:BA:33:C9:75:91:02
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 290888C6318F23BD28AFE6EC4C29CED2B2704D75
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145592.roa
Signing time: Fri 22 May 2026 04:08:09 +0000
ROA not before: Fri 22 May 2026 04:03:09 +0000
ROA not after: Fri 21 May 2027 04:08:09 +0000
asID: 145592
IP address blocks: 240a:ab7e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:08:88:c6:31:8f:23:bd:28:af:e6:ec:4c:29:ce:d2:b2:70:4d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:09 2026 GMT
Not After : May 21 04:08:09 2027 GMT
Subject: CN=64D072730379D20E16837FA780F2BA33C9759102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:af:ec:f8:c7:1e:7a:f8:23:0b:04:1a:93:16:
b7:e4:78:c8:cc:ee:08:76:44:0f:d9:02:40:79:af:
f2:34:40:e2:e9:7c:c2:62:8d:c6:04:bb:2e:36:1a:
3a:d0:9f:8e:d9:a5:59:c7:35:10:78:c3:b6:6d:21:
fc:ff:5b:0c:48:2f:74:5c:ec:56:c3:73:c6:db:fe:
14:0c:ea:c1:24:5f:88:f2:4a:03:ff:58:b5:f1:11:
9c:88:ff:1d:86:58:57:f0:25:c2:a6:0a:00:24:18:
66:6c:a3:06:6d:9b:3e:cc:d3:5e:29:e0:66:9c:d7:
cb:e9:52:78:e2:a0:15:39:af:22:da:7b:82:5f:ea:
91:3e:ee:5d:bf:05:ba:f4:c9:89:a4:6d:60:49:de:
4e:06:71:46:c3:7a:c3:73:c0:43:42:55:ec:46:6d:
24:16:13:9e:29:af:fc:01:d3:86:69:38:f1:54:6c:
3e:69:40:81:ce:08:43:c5:5d:17:90:9a:25:2b:d1:
79:41:21:25:f1:59:65:df:79:ae:b0:0a:83:44:a5:
4c:a4:01:c0:a0:82:da:7c:33:62:0c:88:04:48:74:
eb:a9:e5:18:d4:a0:97:20:c4:39:3f:e4:0a:71:2a:
41:13:af:a5:0d:3c:0b:82:38:3e:aa:0d:c1:ab:b8:
4b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D0:72:73:03:79:D2:0E:16:83:7F:A7:80:F2:BA:33:C9:75:91:02
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145592.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab7e::/32
Signature Algorithm: sha256WithRSAEncryption
31:40:3b:95:a4:04:db:27:8a:61:ad:3b:80:dd:05:44:40:7c:
dd:8a:9d:6a:63:ae:e3:3f:84:09:9a:0f:ae:ab:9b:23:14:2e:
04:06:1c:19:d0:19:a1:54:bf:39:31:b0:7f:c5:cc:2c:f5:6f:
6a:ba:f2:c5:90:3c:c0:32:ef:27:57:04:f6:0b:21:94:e8:d9:
b4:ef:1c:60:b9:a8:a8:f5:00:2f:60:ba:cc:48:e5:13:45:94:
ae:e3:30:68:43:0e:c2:69:04:05:79:73:c5:ce:4a:ae:fe:90:
5c:5e:a9:59:d5:3c:ac:e6:0f:1e:c2:be:e6:92:8f:99:66:81:
2a:a5:e1:fa:c7:47:ef:16:a9:d1:90:43:84:ef:93:10:f5:f6:
df:0f:d1:c3:05:f7:5d:a0:f6:09:c4:3d:83:6f:b4:64:d4:4d:
a7:7b:6a:ef:b9:76:fe:7c:ea:32:62:cc:2c:3b:6f:3b:74:d5:
80:b2:04:ba:fe:ee:15:43:72:01:53:55:e8:88:cb:15:26:69:
52:7e:1a:43:72:67:14:6e:10:5d:e2:1b:b9:dc:6d:22:40:30:
08:3a:24:76:60:1a:66:0f:9c:ac:39:67:ce:e3:b9:9a:8f:e3:
1d:4d:b8:85:3b:13:01:ee:0c:e4:21:86:7a:53:3c:d9:66:94:
36:59:cf:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:49 2026 by rpki-client