Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145616.roa
File: AS145616.roa (raw, json)
Hash identifier: Q7KSoRlWxClqpmh5D9j/fE/9WZbxwzhUehm7F0Lt1iU=
Subject key identifier: 8A:D7:D2:36:B7:92:A5:75:D0:82:5C:3A:0A:3B:10:26:AE:31:86:88
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 604A82AFD04F0FED5F5F855C088814898A1954D4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145616.roa
Signing time: Fri 22 May 2026 07:32:27 +0000
ROA not before: Fri 22 May 2026 07:27:27 +0000
ROA not after: Fri 21 May 2027 07:32:27 +0000
asID: 145616
IP address blocks: 240a:ab96::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:4a:82:af:d0:4f:0f:ed:5f:5f:85:5c:08:88:14:89:8a:19:54:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:27 2026 GMT
Not After : May 21 07:32:27 2027 GMT
Subject: CN=8AD7D236B792A575D0825C3A0A3B1026AE318688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:25:7e:96:9b:dc:90:ac:7e:2a:3a:7b:68:24:
81:32:c9:5a:27:b0:b9:48:7d:a5:3c:e4:cd:70:b4:
d6:44:e2:a6:33:2b:ed:54:74:8b:97:8b:59:56:83:
4b:0e:e2:7d:3c:a9:56:cb:aa:d6:14:9d:00:d7:d6:
02:ec:84:e6:36:88:a4:5d:3e:be:ad:eb:4a:38:a4:
ef:bb:74:67:9e:6a:cb:81:d3:6b:3d:f7:42:78:4e:
4d:df:ca:a6:0c:69:3a:1c:29:05:2d:a8:7f:d5:3b:
84:48:b1:ec:59:67:a6:1f:87:19:f1:12:75:49:6d:
ac:23:0a:23:1a:3e:d6:bc:d6:97:5a:7c:6e:70:b1:
71:17:d1:a8:e0:ea:60:d6:ff:a1:4f:64:87:96:29:
66:7a:66:f4:03:74:76:d4:e1:7b:44:33:be:7b:53:
60:b6:c9:99:3a:c0:93:0b:d7:35:09:5d:10:bd:93:
bc:4d:5e:51:70:fc:bb:9e:49:45:61:8e:89:79:6d:
0e:49:01:dd:38:5d:ba:f4:8d:95:ce:64:fe:df:da:
29:b2:32:f1:93:b5:5f:09:91:07:6a:63:5e:04:6c:
6d:86:3d:60:74:6d:15:8d:6e:dd:47:45:e8:d8:11:
d9:6a:f8:61:c9:86:09:65:ca:84:2a:70:a3:67:14:
a7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D7:D2:36:B7:92:A5:75:D0:82:5C:3A:0A:3B:10:26:AE:31:86:88
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145616.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab96::/32
Signature Algorithm: sha256WithRSAEncryption
1d:24:bb:85:d4:aa:1a:d3:3d:33:d1:c1:6a:46:bc:9b:ef:54:
ad:be:40:ee:a9:76:d9:c0:df:78:6a:4a:35:2d:a4:4b:c8:cc:
14:4c:16:d2:65:bb:db:56:f7:85:8e:50:99:cc:e4:a6:bf:1c:
c0:c9:fb:51:86:9b:50:62:70:bc:16:80:b7:25:58:a9:27:b6:
96:18:c2:42:88:43:a7:61:bf:5c:61:6c:43:70:c9:a3:7a:12:
6e:06:14:30:34:e7:ca:da:aa:67:a0:b2:0a:d4:f0:f3:dd:70:
a6:ca:95:80:fc:bf:0c:a5:e9:d0:e7:36:31:c1:f3:40:11:ac:
3e:cf:43:ea:31:99:3c:7f:1c:2b:1a:6b:b4:c2:98:c6:a9:12:
58:32:2b:b3:48:a8:9c:e2:91:c8:65:fe:db:2f:a1:92:92:56:
5b:51:6b:74:30:b4:73:d6:aa:96:a4:22:dd:f5:3e:d8:c2:82:
40:b3:88:ed:8b:0a:25:73:f3:bf:16:ba:be:7a:8d:57:e7:bc:
e2:98:36:10:51:2a:3a:9a:01:0a:6e:a4:67:d0:4d:67:ac:0b:
4c:07:07:f5:ac:30:54:07:48:14:a3:94:73:29:de:f6:5e:50:
19:d8:c1:2b:96:f4:6e:60:4c:93:1e:90:10:be:3f:2a:5f:0d:
8c:56:ab:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:56 2026 by rpki-client