Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145595.roa
File: AS145595.roa (raw, json)
Hash identifier: zuIqCiywZFf7NCbpYX/uxLNqhrXBoSYq8ahcVvLQCeU=
Subject key identifier: CC:90:D4:36:CB:2D:EF:FA:F8:5D:CD:01:45:4D:6A:85:9B:20:AF:94
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3A0E8ACAFB83827036E314F14A451CBE6C9A14B4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145595.roa
Signing time: Mon 25 May 2026 06:28:17 +0000
ROA not before: Mon 25 May 2026 06:23:17 +0000
ROA not after: Mon 24 May 2027 06:28:17 +0000
asID: 145595
IP address blocks: 240a:ab81::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:0e:8a:ca:fb:83:82:70:36:e3:14:f1:4a:45:1c:be:6c:9a:14:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:17 2026 GMT
Not After : May 24 06:28:17 2027 GMT
Subject: CN=CC90D436CB2DEFFAF85DCD01454D6A859B20AF94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:1c:da:e1:36:3d:c4:4a:c4:38:f7:60:76:
41:97:b2:f4:2e:2c:8a:7b:a3:92:ae:15:89:5d:10:
dd:68:d3:16:13:96:d9:7f:e3:7c:6e:b4:c6:dd:3f:
a4:0c:cd:44:1b:19:c1:d4:2a:26:b0:ac:32:9b:31:
85:79:39:92:21:78:46:6d:6e:c8:c2:fe:56:aa:9b:
a0:c0:42:97:a2:12:f1:e1:30:ef:dc:cb:d1:a6:a1:
e7:57:66:e4:aa:79:45:c0:c4:ea:76:3a:c1:4c:0b:
45:b3:3a:0e:9e:c0:c1:01:46:81:4b:b2:52:72:92:
4f:a2:66:ca:00:d9:a9:82:a1:5a:f6:36:51:9a:c9:
29:6f:88:34:a0:bc:c5:46:bf:7b:de:1e:4f:9b:91:
6b:92:8c:d8:48:f9:b0:c8:44:68:a7:05:bc:79:06:
e2:26:3d:39:e8:e3:3d:ac:42:d1:2e:24:54:42:bf:
c8:f1:f3:cb:a1:41:71:ea:bf:55:29:ef:6d:8c:e8:
47:56:6c:cb:02:eb:1e:f2:ff:a2:9e:78:a2:91:21:
5c:d7:b2:77:61:13:dd:28:93:a2:73:18:16:80:44:
2f:e8:d3:e8:74:72:25:09:a4:62:f1:e3:99:8f:a0:
94:eb:8b:50:5a:69:04:fe:78:6c:2d:c7:ac:ed:54:
b6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:90:D4:36:CB:2D:EF:FA:F8:5D:CD:01:45:4D:6A:85:9B:20:AF:94
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145595.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab81::/32
Signature Algorithm: sha256WithRSAEncryption
73:b4:2a:4c:ae:fc:d9:fe:b0:d8:1e:de:e2:0a:57:5d:12:29:
38:0d:51:3c:23:39:d6:69:c6:5b:93:80:92:6c:b1:07:22:ff:
7d:45:bb:5b:27:4d:48:9a:ea:95:f1:01:86:87:fc:73:00:1f:
53:d9:c8:6e:65:e7:42:2b:cc:ca:df:cc:58:5a:6b:bf:b0:6c:
cb:e7:f4:fa:5e:cf:6d:2d:c2:51:bc:a3:ca:90:d2:61:7b:57:
39:d0:20:77:dc:02:f7:17:c3:76:e3:bb:c4:96:2a:58:d5:b0:
a2:b7:15:3c:ce:af:11:78:41:dc:29:81:58:1c:39:99:22:bf:
16:3c:45:ca:64:2b:55:f4:92:38:fa:a1:99:33:76:19:89:24:
e8:23:3a:3f:ba:ba:1e:5c:33:f1:15:59:f2:e0:c7:71:97:e3:
b4:be:17:ef:dd:86:ea:fb:b8:50:dd:c4:41:58:75:97:5a:a4:
0c:39:8e:a8:31:5d:b8:3c:08:f6:77:8a:4d:19:dd:60:bf:57:
f8:93:14:6f:1c:8b:6f:b9:94:8f:ed:b3:f9:04:b5:31:e6:0e:
a1:09:8f:1f:5b:b6:c5:1a:e9:e5:ab:fc:42:17:f8:7b:9d:48:
45:f2:14:34:8c:9e:4e:a8:1e:3c:88:4a:04:42:27:de:30:df:
fc:ef:8e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:52 2026 by rpki-client