Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145604.roa
File: AS145604.roa (raw, json)
Hash identifier: jkNULMyKPuQemZdCRVEeirr9beOIpRSnGtI/0z8JVw4=
Subject key identifier: 35:95:AD:C5:ED:93:48:8F:6A:38:EE:B4:BC:99:2E:81:A7:06:0C:EB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 554759753F6331F934E96DF3B8A3B93A57A09C71
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145604.roa
Signing time: Fri 22 May 2026 06:27:39 +0000
ROA not before: Fri 22 May 2026 06:22:39 +0000
ROA not after: Fri 21 May 2027 06:27:39 +0000
asID: 145604
IP address blocks: 240a:ab8a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:47:59:75:3f:63:31:f9:34:e9:6d:f3:b8:a3:b9:3a:57:a0:9c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:39 2026 GMT
Not After : May 21 06:27:39 2027 GMT
Subject: CN=3595ADC5ED93488F6A38EEB4BC992E81A7060CEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:76:d7:db:fb:97:d4:10:58:6a:c7:de:1c:aa:
6f:4e:db:6c:32:99:82:e1:bf:f7:2f:55:07:3a:22:
ba:22:0b:b6:d0:e7:50:8c:cc:38:42:f6:7e:e5:a0:
9c:92:11:55:c0:e7:19:2f:24:f6:61:6d:74:6f:45:
3f:4f:e7:49:00:a4:e2:88:e3:f5:07:81:77:5b:f8:
a2:d0:c1:f5:7c:58:95:13:db:0c:d2:07:2a:d0:27:
c5:f8:0b:9b:51:dd:26:6f:72:dc:f6:92:03:9f:9e:
6c:32:9d:ba:9a:5f:fe:05:fa:94:0f:2d:b0:bd:a9:
6c:32:89:f3:99:71:fd:e2:dd:3c:4f:7e:2d:dc:fe:
d9:b3:af:6d:b2:4a:fc:55:72:74:e5:cd:68:72:fc:
2a:91:27:a2:4b:a1:88:c9:d2:32:5a:cd:25:c8:70:
a4:70:7b:06:c3:34:28:8c:64:a5:57:ba:09:55:e0:
78:41:6d:d8:9e:fd:6b:81:9f:1e:4c:ca:96:d2:e9:
e2:61:1a:d8:b9:5a:47:69:fe:d9:b9:db:34:47:7f:
69:5c:35:f8:98:da:1f:3c:9a:99:49:d8:52:da:2f:
50:b1:d4:34:9d:f1:cd:c9:cd:87:24:ab:75:11:22:
13:a1:64:db:93:06:5f:e7:37:ca:43:e5:9b:cd:38:
32:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:95:AD:C5:ED:93:48:8F:6A:38:EE:B4:BC:99:2E:81:A7:06:0C:EB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145604.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab8a::/32
Signature Algorithm: sha256WithRSAEncryption
90:b2:9b:9e:d0:2e:e7:fe:b9:ed:e4:c8:4f:86:43:df:c4:a1:
32:ee:d5:bd:a6:b1:d3:9b:67:66:2e:a3:bd:90:4a:5f:32:b1:
36:22:e0:55:8d:bf:e7:ae:92:4a:a9:11:eb:c2:c8:19:38:71:
0b:5c:4b:68:3f:4e:42:65:54:0c:a5:f6:45:06:ac:f1:ba:15:
bf:bc:41:bc:36:ca:a3:aa:06:ee:dc:be:d0:05:14:ae:2a:9b:
f8:21:4d:d2:38:ac:31:3b:b2:49:71:0d:6e:4b:b1:d3:38:d0:
30:10:0a:73:7c:97:c9:a3:c9:7b:9f:40:e0:88:86:54:c7:e9:
7e:16:9f:99:24:d8:c5:14:49:cf:60:38:6b:cf:29:96:fc:c2:
14:a1:d1:91:47:da:c2:ba:ce:77:4c:42:7e:0f:0d:9e:af:53:
54:47:8f:c6:e2:94:db:47:24:23:27:9b:d4:fe:d4:c1:af:e3:
4f:59:56:57:a8:12:6d:65:a2:3f:c4:bb:a5:ae:72:5e:b1:6d:
46:9e:99:af:15:98:39:44:5a:41:4c:df:25:4f:a2:a7:21:93:
1c:bb:82:aa:9c:70:20:46:38:4d:c7:29:81:f1:2e:0d:75:a6:
31:85:d7:b9:d1:18:b3:1a:47:94:9b:4b:42:c0:ba:3d:92:0d:
e8:f8:0e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:01 2026 by rpki-client