Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145623.roa
File: AS145623.roa (raw, json)
Hash identifier: UWr0t5xi6lLUz8Ruppqi7gIYDipKQd5bnfwhzHS6haA=
Subject key identifier: 3C:CF:2F:5E:0C:45:94:75:E8:65:44:FD:D5:01:3B:9F:D7:0D:BA:E4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4F020DF563017D2D06F49ACD67F793281A099465
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145623.roa
Signing time: Fri 22 May 2026 07:32:25 +0000
ROA not before: Fri 22 May 2026 07:27:25 +0000
ROA not after: Fri 21 May 2027 07:32:25 +0000
asID: 145623
IP address blocks: 240a:ab9d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:02:0d:f5:63:01:7d:2d:06:f4:9a:cd:67:f7:93:28:1a:09:94:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:25 2026 GMT
Not After : May 21 07:32:25 2027 GMT
Subject: CN=3CCF2F5E0C459475E86544FDD5013B9FD70DBAE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:14:2c:97:84:1a:fd:b1:ad:23:a4:d7:b6:c6:
c6:a4:06:34:20:98:7a:ee:86:a9:d0:b5:69:37:45:
a3:01:67:04:e1:65:52:3c:4d:ac:cf:7a:e7:5b:6d:
8e:3a:aa:c9:7a:80:2b:80:61:b8:89:d5:cb:0e:ac:
4a:f6:f8:8f:2a:71:0b:8d:84:a4:ec:ab:83:c0:7f:
dd:09:f8:7d:aa:07:74:6a:59:df:86:cd:90:6d:2f:
db:15:83:bc:ee:ee:8d:3a:5e:b8:34:27:3e:e5:57:
1b:48:df:b8:97:e1:21:c6:1e:70:ab:89:d0:5e:1a:
fe:29:40:f6:20:d5:a0:a1:70:1e:a8:18:98:83:c3:
5b:40:66:98:17:7c:57:49:b8:48:26:25:b1:16:29:
95:4f:0f:b2:fb:f3:65:8c:5f:81:32:73:85:09:98:
e2:94:3c:93:42:29:e1:b6:88:f4:11:01:22:16:d7:
b5:46:65:8e:de:3e:e4:89:62:58:56:e9:f1:8c:0b:
0a:96:e5:54:1d:41:e1:ee:da:83:de:84:39:92:8d:
bd:76:a8:77:f7:4a:15:b5:56:aa:8f:41:e5:d7:e9:
55:08:d6:39:fd:a7:d7:6b:de:a3:68:02:d5:c1:52:
28:4b:c7:46:8f:8f:a6:ed:30:8a:c5:e1:60:4c:fb:
2a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CF:2F:5E:0C:45:94:75:E8:65:44:FD:D5:01:3B:9F:D7:0D:BA:E4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145623.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab9d::/32
Signature Algorithm: sha256WithRSAEncryption
05:8d:b2:d6:ca:43:45:93:2b:2d:34:7b:ee:85:0b:d4:55:0d:
65:45:5d:0c:33:ea:da:02:33:56:db:77:70:f9:1d:5b:36:67:
bf:f3:27:71:5b:e7:c0:8d:0b:17:a6:70:94:6a:ed:65:51:3d:
5d:70:ee:f9:fa:50:9e:da:a4:4d:ac:02:0b:57:ce:10:40:50:
84:24:a9:fa:fd:f1:34:c2:81:ed:26:de:69:4a:e1:19:f0:02:
bc:61:fb:25:0a:32:1d:e2:d9:0f:b6:52:88:6b:f8:a7:81:a0:
5b:d1:58:bd:7e:91:d0:77:df:a5:9e:81:d5:33:51:b0:e5:4c:
6d:eb:dc:26:a0:f0:dd:dd:bf:41:e7:48:93:0b:bd:c4:67:c9:
a6:a0:20:0e:cf:30:37:5e:59:ae:41:ac:81:8a:5a:43:50:e4:
e6:17:7b:35:4c:53:7c:1d:72:88:25:cd:43:aa:e8:38:5f:de:
5e:90:92:a2:6d:89:79:69:60:57:f9:1f:72:b7:d1:71:dd:8d:
06:6d:80:3c:6c:77:46:d3:49:8f:c3:9f:77:2e:d4:47:3a:cd:
a0:52:d1:81:c1:26:47:73:87:d6:f3:75:b4:ef:11:96:71:84:
8e:d2:d6:58:01:37:9a:e0:c0:e6:1b:9c:2e:59:4d:04:a5:bb:
9e:51:47:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:42:38 2026 by rpki-client