Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145600.roa
File: AS145600.roa (raw, json)
Hash identifier: 42a/2nurJzLmfNP3LWx733C1mN/AFyQKYLp/vBS88wc=
Subject key identifier: 3B:42:19:13:B9:DB:1F:7A:31:97:DA:70:04:ED:48:BC:13:CF:E3:02
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4CAF381A94CC3B6CB2511D44542C5C50864BDFC4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145600.roa
Signing time: Fri 22 May 2026 06:27:49 +0000
ROA not before: Fri 22 May 2026 06:22:49 +0000
ROA not after: Fri 21 May 2027 06:27:49 +0000
asID: 145600
IP address blocks: 240a:ab86::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:af:38:1a:94:cc:3b:6c:b2:51:1d:44:54:2c:5c:50:86:4b:df:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:49 2026 GMT
Not After : May 21 06:27:49 2027 GMT
Subject: CN=3B421913B9DB1F7A3197DA7004ED48BC13CFE302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0f:ec:56:9c:ce:f1:12:46:8e:e2:84:f0:96:
84:04:04:d7:d0:95:bf:09:01:8c:cd:fe:97:db:cc:
4b:47:ad:fe:1b:75:63:4c:5d:c5:d3:1c:7c:a3:4e:
2e:27:d2:ef:d8:83:ee:02:a9:e3:05:52:f3:e7:64:
bb:38:e9:c3:3b:ea:64:ba:8a:16:82:b5:f2:31:c0:
1b:ff:67:93:3b:6b:18:d1:b3:06:1b:ac:c9:0c:3f:
bc:c6:d6:8b:52:5e:6a:3e:d1:c5:2f:aa:6e:41:9d:
4d:ae:db:7d:47:08:4f:a8:e4:29:cb:e1:fb:a4:91:
16:79:5f:2a:41:47:09:d0:3c:fc:1c:bc:05:e5:e1:
45:b1:79:30:a6:5b:35:f5:88:f3:5f:f1:fb:6b:d7:
bb:dc:5d:2c:e6:b0:53:cc:c7:4d:b6:dd:1a:f2:6f:
8f:66:4b:84:4b:aa:7c:72:be:27:99:e1:fa:b6:e5:
37:92:45:4b:ce:b1:8b:47:a1:22:b0:b1:86:a0:be:
26:3d:dc:07:20:0b:5d:ed:8b:22:0f:c5:e1:41:0c:
73:c7:85:30:aa:8f:2b:48:12:d6:4e:f0:5a:99:59:
0b:ad:35:99:99:d3:cf:79:f2:4e:88:87:d0:9d:53:
62:70:43:ec:33:ec:b9:57:de:1e:87:71:fd:8e:73:
0b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:42:19:13:B9:DB:1F:7A:31:97:DA:70:04:ED:48:BC:13:CF:E3:02
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145600.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab86::/32
Signature Algorithm: sha256WithRSAEncryption
59:2e:70:60:1c:ea:ff:68:f5:ee:b5:81:00:e4:02:5c:fc:67:
08:f9:b6:3e:b7:60:a6:e0:7e:53:82:69:19:34:1f:d8:5a:e0:
e7:53:1f:46:2e:24:da:63:cd:8e:57:e1:37:3b:73:d3:66:58:
e5:5d:6e:6d:77:eb:d8:55:b4:34:db:1c:24:ea:a0:28:cb:e8:
ed:a5:b6:15:9c:7a:af:0e:8e:ab:05:7b:27:8b:d8:3e:a9:89:
79:b0:48:08:dc:39:ac:e5:71:82:a0:74:da:15:b2:d5:be:17:
56:a8:fa:27:4e:c3:80:6d:90:7f:84:97:d5:c3:8b:87:d7:f3:
50:35:0e:01:3d:c0:c8:e5:73:cd:4a:c9:52:10:a0:e7:02:ab:
b7:8f:a9:da:a0:6e:4d:82:31:4b:a0:d1:23:0a:a7:75:04:55:
89:78:ba:d2:a9:dd:54:1f:38:fb:f3:ea:35:ae:d9:5d:0f:2c:
83:70:91:b4:fb:44:52:a1:b2:b3:91:e3:eb:09:d3:2e:78:f1:
90:6c:60:02:f7:59:28:9b:b3:1c:30:51:9e:09:11:f0:77:3b:
6f:4e:e4:df:32:da:27:ea:73:3d:09:7e:2b:14:55:00:32:2a:
b9:a8:50:62:f4:cf:af:b9:48:5d:3a:9a:d2:10:c5:c1:09:70:
99:d1:bb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:37 2026 by rpki-client