Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145617.roa
File: AS145617.roa (raw, json)
Hash identifier: 7tIr/0qShINLkhEXk/ACxe0qe7lEVCtlE6Tcld2fYpc=
Subject key identifier: CE:85:1C:1D:1D:37:2F:B4:87:4E:7F:D9:CE:D4:EC:FC:8F:34:CA:E0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7344C65E752766263A518304D2607FE1D987B645
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145617.roa
Signing time: Fri 22 May 2026 06:05:22 +0000
ROA not before: Fri 22 May 2026 06:00:22 +0000
ROA not after: Fri 21 May 2027 06:05:22 +0000
asID: 145617
IP address blocks: 240a:ab97::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:44:c6:5e:75:27:66:26:3a:51:83:04:d2:60:7f:e1:d9:87:b6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:22 2026 GMT
Not After : May 21 06:05:22 2027 GMT
Subject: CN=CE851C1D1D372FB4874E7FD9CED4ECFC8F34CAE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e0:8b:98:ce:a7:37:1c:a0:e1:d6:e4:72:88:
9c:67:91:8e:e7:89:11:e9:8c:d2:e7:56:f4:87:e2:
97:79:be:13:3a:5a:31:d4:9e:15:a4:55:00:fc:e4:
a6:ee:24:42:9a:9b:1d:82:76:be:d3:c8:2d:86:33:
6b:8c:51:e7:7b:9d:16:a6:8f:8c:85:77:e8:67:06:
9f:52:f2:11:c3:3a:fe:30:4b:e7:67:82:1a:ae:a6:
6e:01:8a:9d:47:09:5c:a7:6c:48:86:24:f9:31:f0:
45:3d:34:89:e1:cb:5d:5e:fc:6c:1a:fd:46:40:7b:
4f:c7:d8:b3:33:22:cf:fb:81:34:55:92:a7:dd:5c:
f3:c8:ba:70:04:3f:3f:ac:82:94:c5:a9:f2:7c:bb:
55:2b:2b:8a:66:ef:de:50:50:87:25:35:00:6d:e6:
82:96:71:d1:47:89:31:05:d4:1c:53:17:83:fb:cb:
8d:7b:83:80:48:e4:e3:90:b2:80:f9:99:62:f8:82:
55:69:58:d3:5b:eb:f4:c7:2e:61:a0:2d:11:d0:44:
11:d0:19:8c:58:d0:5c:0a:b5:e3:18:4a:85:fd:ee:
54:ac:c3:7d:65:a6:6b:eb:29:72:3c:27:9e:14:73:
ff:80:17:76:7a:03:77:ec:a2:7f:10:0a:51:3e:24:
3e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:85:1C:1D:1D:37:2F:B4:87:4E:7F:D9:CE:D4:EC:FC:8F:34:CA:E0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145617.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab97::/32
Signature Algorithm: sha256WithRSAEncryption
83:54:16:1d:13:3d:4d:ec:8e:12:a4:48:7f:80:5a:86:65:9d:
8f:df:b6:02:e3:f9:25:40:ea:9f:1a:2a:47:c3:b4:ac:99:92:
89:d6:6a:cc:0f:03:d2:f4:41:37:47:3f:57:98:f0:33:8f:ab:
96:6d:57:e8:a4:6c:3d:d5:b5:c1:64:f0:0d:79:26:e2:41:af:
62:10:6c:1b:0b:77:53:0e:cb:5f:29:4d:76:97:8b:5c:eb:fa:
9c:c6:4b:e8:3d:78:e5:fb:17:9e:7a:d2:19:89:86:eb:02:b6:
2f:da:eb:d9:81:34:2d:bc:b8:43:f0:f7:e4:c7:93:f5:41:ab:
b2:bf:a6:13:c8:9b:14:a0:4e:74:24:9b:da:fd:b5:98:b4:8f:
9c:e9:e5:f6:39:de:70:ed:ad:aa:82:17:51:bf:13:90:58:d6:
d7:7f:ac:2c:9f:56:b9:b9:de:4b:2a:58:b2:90:52:9a:03:18:
39:3e:f4:83:00:b7:15:a2:03:07:c8:5c:eb:fe:d8:87:04:2d:
eb:3e:d6:02:87:a7:56:2a:a6:28:49:fe:e0:2e:4d:9e:66:cf:
40:36:75:a1:bf:6d:cb:9c:de:b0:1b:a6:bf:fe:b5:11:7d:fb:
26:53:a8:00:8e:fb:8d:55:3d:cc:a0:b2:a3:d2:b1:ab:cb:8e:
bd:4e:51:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:48:59 2026 by rpki-client