Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145609.roa
File: AS145609.roa (raw, json)
Hash identifier: 0EW5Svmw2N/Pxt059l1wngHO8dN5PXEmfdCURQugNik=
Subject key identifier: 85:07:93:C3:48:82:2A:3E:C1:C3:DB:8C:D0:C7:A6:16:5C:97:5A:71
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 07B5CAD54D5A8BE2B15E814B104584402704B54B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145609.roa
Signing time: Fri 22 May 2026 06:28:02 +0000
ROA not before: Fri 22 May 2026 06:23:02 +0000
ROA not after: Fri 21 May 2027 06:28:02 +0000
asID: 145609
IP address blocks: 240a:ab8f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:b5:ca:d5:4d:5a:8b:e2:b1:5e:81:4b:10:45:84:40:27:04:b5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:23:02 2026 GMT
Not After : May 21 06:28:02 2027 GMT
Subject: CN=850793C348822A3EC1C3DB8CD0C7A6165C975A71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:eb:ca:67:55:40:1d:d4:a9:96:86:33:9b:ee:
0e:8e:d0:97:a0:39:f3:23:93:30:5b:d3:38:8b:a3:
68:fc:68:1a:05:84:49:2f:60:ee:0f:d9:e2:02:da:
6c:9c:03:95:1a:9d:ec:6a:b3:eb:01:91:91:26:a5:
13:17:49:1e:aa:b1:bf:c5:e8:2b:d7:d3:1f:12:6b:
72:23:ad:0f:80:9f:84:56:4e:2b:94:19:35:73:ab:
33:0a:47:41:04:a4:60:03:02:0f:b9:ed:8f:0e:cb:
1c:db:9c:79:c8:78:ea:34:5a:16:4c:28:05:01:53:
00:ee:f6:eb:26:54:12:8b:d4:b9:b4:bd:77:b2:47:
1a:f5:74:95:ff:3c:1c:8e:c3:29:36:94:34:6b:55:
f1:7f:6a:bf:3b:33:d0:ce:0f:d5:00:a7:8d:25:04:
9d:a2:fe:4d:73:a0:fc:f4:ae:09:d4:ca:9d:e4:59:
ca:60:fc:a1:ec:58:b5:2a:16:8d:14:3a:96:25:ca:
47:e6:8f:aa:74:55:e0:fb:2e:1f:9e:10:4d:32:80:
ee:c0:1f:85:e7:ac:0e:92:ea:16:b7:ba:d7:bf:b3:
29:a8:2f:5e:80:2c:e8:5b:a3:fa:ff:e6:d7:33:59:
59:41:28:4e:f5:ff:9d:98:f3:26:bf:8b:a2:a3:53:
3b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:07:93:C3:48:82:2A:3E:C1:C3:DB:8C:D0:C7:A6:16:5C:97:5A:71
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145609.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab8f::/32
Signature Algorithm: sha256WithRSAEncryption
5a:c0:34:11:74:72:b6:dd:04:90:07:20:a0:77:de:c3:3b:56:
59:7a:97:73:31:ec:b4:34:80:82:28:87:ab:75:c1:38:30:16:
27:2e:8e:f8:70:d2:13:67:00:79:27:7f:60:b1:2f:0b:47:9e:
de:74:67:04:69:67:6d:79:17:cd:57:83:5c:96:ac:62:43:ae:
17:97:f1:0d:9d:84:41:fe:44:3c:75:8b:7a:b9:3a:f9:92:b5:
77:c5:e3:ff:32:d9:6e:a6:9b:19:b8:2c:e0:e5:25:63:07:48:
f5:d9:25:47:4f:7d:26:fe:c5:62:63:12:b6:52:ea:77:23:91:
aa:ef:f7:5a:97:60:33:48:18:93:33:e1:10:91:f1:f5:05:97:
8c:7b:a7:a8:77:6c:c2:b7:c5:28:46:49:e2:a5:7d:5b:9a:00:
89:4a:f6:3a:bd:01:03:ec:da:02:4f:b7:71:d4:e3:3b:7e:2f:
46:20:50:a8:7f:76:e4:00:36:ea:60:6a:d0:2b:1e:d5:2c:67:
43:f6:7a:ee:62:64:11:41:e1:2c:9c:ea:b2:fc:70:3e:74:3e:
20:e1:e4:a1:f5:c2:32:85:7f:89:34:6f:04:72:d0:ad:6b:ec:
ea:23:0c:0c:07:4d:bf:cd:e4:02:33:97:38:21:64:0d:7d:c7:
30:5a:2a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:14 2026 by rpki-client