Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145612.roa
File: AS145612.roa (raw, json)
Hash identifier: RPnHZDXNEi90dGk+QVTzuOaEu5HTtQ5gPn1y37Jask4=
Subject key identifier: 23:3C:3F:84:3C:8E:10:42:B5:54:5E:B8:02:01:6C:30:C2:03:C5:B9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 556B5015CF5EA693A7ED2981B9B1AA3C347DD1F4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145612.roa
Signing time: Mon 25 May 2026 02:22:33 +0000
ROA not before: Mon 25 May 2026 02:17:33 +0000
ROA not after: Mon 24 May 2027 02:22:33 +0000
asID: 145612
IP address blocks: 240a:ab92::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:6b:50:15:cf:5e:a6:93:a7:ed:29:81:b9:b1:aa:3c:34:7d:d1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:33 2026 GMT
Not After : May 24 02:22:33 2027 GMT
Subject: CN=233C3F843C8E1042B5545EB802016C30C203C5B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3a:65:a7:82:20:24:0b:65:46:25:7c:a7:e1:
66:ef:d0:54:be:21:b6:12:bf:ea:fc:5b:80:d9:c5:
7d:b3:a7:0f:8d:ad:f5:2e:01:42:4d:9e:09:00:cd:
bf:6e:c9:0f:f2:d9:83:0f:e6:77:ad:32:d2:6e:c3:
0f:8b:4d:d9:d5:d1:69:dc:e6:6f:65:06:a5:2c:6a:
e3:f8:58:c4:b8:2d:34:86:f4:f8:ed:a6:d4:22:2e:
a7:b3:c9:69:42:90:0d:06:e9:9c:99:f1:01:9d:5a:
c3:ab:a4:f4:19:45:28:d1:03:22:bc:1a:7e:f8:90:
fa:6a:14:eb:c6:07:6c:b0:d8:38:c3:8b:1d:7b:79:
a2:c8:3f:65:8b:72:86:ff:ab:2b:5a:17:3a:aa:f2:
73:34:a3:a1:63:39:c6:27:83:2b:49:35:a6:30:38:
22:3a:6a:84:86:e3:9b:ef:b4:25:42:91:a3:69:24:
dd:73:09:69:3b:37:7f:51:99:e6:2d:4e:99:f8:20:
f7:ca:b9:5b:53:b0:aa:42:cc:a8:0c:04:44:13:71:
5a:ee:d5:a5:52:7b:05:7d:68:9c:4f:a4:3f:7c:df:
64:ba:4f:d9:6d:5f:56:1a:87:75:59:f0:a3:ce:3b:
6e:ac:6f:21:fe:4c:0d:0d:c8:3b:68:c5:98:24:f5:
91:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3C:3F:84:3C:8E:10:42:B5:54:5E:B8:02:01:6C:30:C2:03:C5:B9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145612.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab92::/32
Signature Algorithm: sha256WithRSAEncryption
1b:b3:12:be:46:fe:da:34:c4:24:04:90:65:aa:56:b6:e5:69:
fe:9d:86:35:f1:6e:64:06:1a:4a:0a:1d:cc:3d:16:ea:22:6e:
1f:78:35:32:a9:d7:f4:fc:b7:bc:81:6c:6a:bc:9d:a1:2e:81:
47:cd:7a:cd:69:dd:a9:d6:d2:9c:8a:0d:7e:03:ea:d4:bb:b4:
a9:01:0c:3c:b3:1a:f9:e8:16:ee:00:77:a1:f9:50:12:3f:59:
7b:45:94:cb:6e:ec:ff:32:a4:8d:11:75:cd:3b:1a:0f:c1:f7:
bb:38:f1:e8:8c:79:15:01:93:88:ca:f3:65:93:25:00:e0:b6:
43:2e:3a:7e:84:d2:10:47:c4:9d:a3:44:ed:73:a3:8c:63:35:
c3:5a:b5:a4:6f:f5:85:98:64:3d:a9:4e:9d:8e:d0:15:4d:4d:
4f:63:77:a7:de:38:93:ca:2b:f5:a2:e2:07:5d:ca:41:73:cb:
e5:b7:17:bd:60:45:40:3f:30:ac:2c:7b:f5:f7:0a:d5:07:65:
25:5f:8a:db:a9:0e:f4:72:12:c0:a7:bb:3c:07:84:4c:20:f3:
be:d8:d5:81:48:8f:42:1d:95:e0:1b:eb:79:62:da:9d:13:2c:
74:c0:66:a7:47:ab:2c:cc:e9:26:2f:d4:aa:19:c4:43:c2:df:
0d:4e:e9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:07 2026 by rpki-client