Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145615.roa
File: AS145615.roa (raw, json)
Hash identifier: wGSqqGHaaTkZRZrVJiBK8gNhGq9C5jpach98m9AyLYc=
Subject key identifier: 54:C5:9F:6F:1B:6C:8E:D5:BB:45:D5:15:C6:70:5B:23:85:1E:BD:E1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 285F13186A29FBAD4B9EEEBB54F05B2E5E5BDCEA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145615.roa
Signing time: Mon 25 May 2026 06:48:49 +0000
ROA not before: Mon 25 May 2026 06:43:49 +0000
ROA not after: Mon 24 May 2027 06:48:49 +0000
asID: 145615
IP address blocks: 240a:ab95::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:5f:13:18:6a:29:fb:ad:4b:9e:ee:bb:54:f0:5b:2e:5e:5b:dc:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:49 2026 GMT
Not After : May 24 06:48:49 2027 GMT
Subject: CN=54C59F6F1B6C8ED5BB45D515C6705B23851EBDE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6f:43:bf:d5:56:2f:af:1a:cd:6f:bc:4c:45:
be:1a:f6:87:f8:d7:35:23:97:04:95:67:5a:29:d0:
9a:8a:63:62:65:db:c9:7e:aa:80:90:41:fb:82:6e:
66:64:cd:4b:5e:1e:a5:13:2c:74:8d:fe:af:9c:7d:
1c:b4:ce:94:a7:b7:76:5b:ef:07:9d:93:8f:0c:80:
3a:8d:10:96:30:41:9b:1c:20:09:5c:a0:e7:dd:10:
dd:af:9a:3a:80:1e:49:e9:0b:8c:43:18:92:d2:00:
64:ae:92:b0:4c:7e:12:b8:2e:51:6f:31:e3:8e:6e:
db:a0:20:cf:b1:d1:20:b7:8a:a3:04:48:bf:33:ec:
f8:08:7e:a7:31:a2:57:c8:ae:ae:ec:72:93:59:44:
93:a5:83:24:bb:7e:87:39:cf:f8:e4:ee:fd:fd:26:
61:58:19:47:05:64:fb:d7:61:84:ec:8b:29:49:45:
b2:df:a4:df:de:7a:4a:09:37:c9:94:98:cb:e0:ae:
ea:0f:c2:ed:04:dd:63:44:10:fb:25:13:9d:da:df:
2d:3a:c0:e6:10:16:34:bc:6a:89:c2:df:55:dd:d7:
fe:38:d3:c0:f5:5b:ec:72:6a:14:1f:e5:0c:fe:39:
fa:d6:d5:27:c4:a6:38:2c:86:44:43:fa:b5:4a:77:
57:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C5:9F:6F:1B:6C:8E:D5:BB:45:D5:15:C6:70:5B:23:85:1E:BD:E1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145615.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab95::/32
Signature Algorithm: sha256WithRSAEncryption
64:81:f4:88:5a:a3:70:92:c8:07:ef:a1:79:fe:00:b8:45:26:
25:bd:f2:41:8a:b7:db:59:bf:88:47:97:9b:8b:27:c6:71:86:
62:02:c2:c9:62:56:29:3a:17:dd:13:0b:7e:0f:1c:00:10:9f:
34:64:5c:ad:a9:16:82:5c:be:d4:cb:a4:6d:fc:2e:b0:24:68:
1d:d2:21:3d:bc:f5:27:6e:fa:6f:d7:58:ac:03:52:58:3f:a6:
7b:46:3c:19:0d:84:df:2d:bc:22:ba:bf:ff:3e:72:10:c3:60:
9c:d6:0d:4d:6f:af:a6:8f:46:c4:8f:91:79:15:45:9e:d4:7e:
36:a7:8d:4e:4d:1c:b6:0d:8b:5f:ed:39:9a:0a:77:8f:31:b9:
cd:46:af:10:59:bc:d6:33:f0:63:59:3f:93:30:f7:83:22:8e:
c7:79:64:6a:36:a3:c2:d7:53:ce:63:62:ef:9f:d9:d3:53:38:
12:22:41:ca:ff:01:de:dc:02:b9:8c:40:33:18:44:39:89:77:
3f:5d:06:ca:1d:b0:52:46:bb:27:b3:36:89:5e:89:7c:90:96:
ef:7e:dd:26:6e:d6:97:e8:34:da:6d:06:f6:a2:6f:10:93:f5:
c9:0f:1d:f6:55:34:76:51:7b:b9:71:57:9b:f2:47:27:6f:d9:
90:f7:37:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:50:02 2026 by rpki-client