Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145598.roa
File: AS145598.roa (raw, json)
Hash identifier: XoX3JCMVRUzo+rKa85vC3R6Yod73F6Z06muIDu2ScWM=
Subject key identifier: 96:6D:A6:35:CA:00:1E:C1:07:D7:AD:7D:E1:F6:3C:FB:80:E6:82:A5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2FD31E98F83885AF9FB617AADA39F70066B71A67
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145598.roa
Signing time: Mon 25 May 2026 06:48:56 +0000
ROA not before: Mon 25 May 2026 06:43:56 +0000
ROA not after: Mon 24 May 2027 06:48:56 +0000
asID: 145598
IP address blocks: 240a:ab84::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:d3:1e:98:f8:38:85:af:9f:b6:17:aa:da:39:f7:00:66:b7:1a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:56 2026 GMT
Not After : May 24 06:48:56 2027 GMT
Subject: CN=966DA635CA001EC107D7AD7DE1F63CFB80E682A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:27:4a:cc:44:22:a4:cb:3b:20:40:60:85:77:
95:a8:f8:62:97:27:a2:de:19:b5:06:68:ae:8a:86:
78:23:33:d8:09:71:53:a5:14:c0:69:37:7a:10:81:
1e:f7:54:8b:0a:82:69:14:6f:e5:4a:39:18:f7:c4:
53:53:13:00:c5:39:64:a0:3d:56:b8:17:8c:fe:1f:
4e:a4:97:a2:1d:c9:fe:c0:4e:5a:e5:17:db:1e:8a:
d3:32:9c:3c:c5:91:a0:91:80:94:d6:8b:60:99:e9:
b9:4f:e3:45:8c:fb:2d:16:9d:9d:34:72:da:67:ad:
9e:9a:3e:9b:ca:61:14:7d:ea:be:97:74:47:bb:1c:
4d:4b:0b:73:cb:ab:e0:c2:ce:44:ef:2b:ff:f1:69:
ae:f2:01:06:30:4c:fb:61:8d:fa:ce:d0:69:90:d5:
b4:86:56:dd:ae:70:14:d8:c4:2a:c8:c1:d2:e7:96:
40:33:f2:cc:89:45:dc:42:11:b6:ea:ac:5c:04:b1:
b1:ca:21:46:2c:46:ba:fb:96:78:7a:ba:45:cd:d3:
c0:f5:f7:52:72:0b:ba:6b:7b:ac:89:76:b3:74:be:
c3:6c:73:67:55:c9:83:f6:cc:65:8c:6e:31:c7:a2:
62:68:70:40:61:08:53:bb:3b:54:e1:15:68:3d:93:
6a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6D:A6:35:CA:00:1E:C1:07:D7:AD:7D:E1:F6:3C:FB:80:E6:82:A5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145598.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab84::/32
Signature Algorithm: sha256WithRSAEncryption
5b:7e:c9:1c:d4:d6:2e:e7:fc:f3:5c:a0:04:5a:e3:94:38:14:
c7:85:ce:bf:fe:c9:4c:4d:22:82:2f:9c:5a:30:06:a5:c4:9d:
55:64:18:b2:65:bf:15:89:0c:0b:18:20:1c:84:b1:a1:b0:c4:
35:fb:7f:77:8f:05:bc:7a:12:25:0a:2c:cb:f9:8e:5b:56:29:
c7:f2:0d:b3:d9:57:ee:aa:8c:31:2b:61:79:34:76:1a:8a:cc:
ed:ba:44:78:eb:bf:2e:e5:a9:27:76:2a:f4:07:06:b2:37:b3:
d2:27:f7:5b:8b:92:77:5f:3c:ca:37:8d:f9:8a:9a:b9:9a:7e:
70:be:03:4f:c1:b5:96:1a:03:0f:c7:46:0d:6e:64:db:8d:2e:
d5:75:3e:98:7b:b9:c2:42:43:18:71:f1:35:86:df:b9:b1:f5:
b9:19:0c:1b:1b:22:8b:a8:57:eb:27:a8:f2:9a:17:36:02:b6:
3f:18:96:9f:9a:9a:6b:04:fd:c2:3c:c9:be:e5:10:c9:32:d3:
98:a6:c8:3e:7e:d0:de:d9:8e:40:31:e1:c2:78:05:c0:7d:be:
80:3a:3a:a8:9c:83:1f:eb:8d:83:0b:b3:d2:4f:38:a1:52:9c:
20:d5:e4:8b:f5:91:81:1e:27:d2:b2:56:94:bf:86:eb:84:28:
4d:6a:19:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:06 2026 by rpki-client