Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145613.roa
File: AS145613.roa (raw, json)
Hash identifier: Pq3ZJrbHFJo0VLp76uWBubyB1x4T69sMiOrjsHmJ7A0=
Subject key identifier: BA:58:23:81:48:91:74:3C:D8:CE:84:B4:8B:DF:6E:16:43:2B:2A:17
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7E2C59A99E8A74A4F357FD5996080D7067444C1A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145613.roa
Signing time: Mon 25 May 2026 02:22:38 +0000
ROA not before: Mon 25 May 2026 02:17:38 +0000
ROA not after: Mon 24 May 2027 02:22:38 +0000
asID: 145613
IP address blocks: 240a:ab93::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:2c:59:a9:9e:8a:74:a4:f3:57:fd:59:96:08:0d:70:67:44:4c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:38 2026 GMT
Not After : May 24 02:22:38 2027 GMT
Subject: CN=BA5823814891743CD8CE84B48BDF6E16432B2A17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3e:ea:98:4d:29:ff:95:da:4e:ba:11:19:91:
46:06:49:8f:3e:ad:84:84:d7:2e:4e:23:36:59:19:
77:27:00:e9:b3:59:92:81:75:a5:16:c5:18:ae:cb:
7a:55:7e:b6:e5:e4:68:3e:b0:ef:76:d1:3b:18:07:
0d:b3:79:79:b6:17:52:87:eb:63:60:bb:5c:c4:e4:
99:7d:24:0d:16:55:c6:cb:88:39:47:45:8e:ba:c8:
c1:cc:05:a4:4e:9c:ef:45:dc:49:ba:44:0b:5e:3a:
ea:5d:5e:ab:f7:ea:06:f9:33:17:b6:8b:e9:ba:42:
31:58:05:ca:67:5f:14:f4:c5:53:49:7e:a8:5e:07:
ed:8e:81:52:a0:f4:a7:99:e4:0c:96:c1:49:d7:d8:
72:0b:82:80:86:e5:d6:fd:7c:25:ba:f1:88:e3:f0:
27:9a:52:7f:50:75:f5:dd:13:06:19:c8:11:55:e4:
c1:d9:9a:59:a0:cb:8e:fc:98:a6:d1:fd:e6:a4:39:
d8:96:65:6c:6c:9c:be:f6:f0:26:37:c9:71:2a:d1:
e0:4f:88:17:aa:5b:5c:e2:4a:47:ab:34:0e:d9:31:
78:da:04:58:5c:ba:60:be:74:18:80:c5:d4:e5:16:
6a:04:39:98:b4:44:02:d0:14:9a:ba:b5:11:ac:fd:
96:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:58:23:81:48:91:74:3C:D8:CE:84:B4:8B:DF:6E:16:43:2B:2A:17
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145613.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab93::/32
Signature Algorithm: sha256WithRSAEncryption
36:cc:41:3a:e6:18:b5:f6:d5:c1:91:cf:c0:47:76:1e:b8:a1:
1c:31:21:9f:99:61:98:fd:c1:d8:5e:cb:2b:ce:8d:7f:ce:a6:
86:0b:5e:52:cc:1b:fc:b6:b9:a3:dc:06:c4:d6:a7:85:3f:32:
c3:55:23:34:2a:94:cb:b1:1e:e0:ff:df:7b:d6:51:77:da:59:
17:eb:67:d1:d9:69:6d:ea:b5:f8:9a:9e:c4:63:00:d1:29:fd:
5d:06:db:5b:c4:53:94:18:6b:f5:09:7a:3c:1a:f1:b1:40:b1:
15:9b:82:a0:4e:43:e2:8d:99:df:dd:22:e0:96:e4:ac:7b:68:
22:38:b3:bc:46:d8:e7:2a:ce:e6:d0:c5:f5:dc:e9:17:3a:89:
48:5f:b6:20:f4:22:43:6c:21:4b:70:2c:9e:99:b6:53:17:f2:
3e:f7:ed:47:a1:db:3f:a1:58:c0:0f:7e:de:fe:93:22:ec:d1:
33:d6:97:22:ce:98:25:4f:84:9f:4d:a0:4a:a9:27:eb:85:08:
b2:a2:f7:79:77:24:2d:07:13:7f:26:87:54:36:d5:62:78:e8:
49:fd:80:b1:d9:4c:f8:1c:ad:c6:f8:52:b2:f0:25:6a:99:08:
dc:e8:48:6d:40:bb:86:34:40:f4:ca:d3:05:24:c6:7c:63:bb:
d0:cd:c7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:12 2026 by rpki-client