Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145626.roa
File: AS145626.roa (raw, json)
Hash identifier: GhDzHjBxOFMQ9FGbBxxwRfKik+CL3vHP5FrpzS3OLfg=
Subject key identifier: 85:9C:6C:96:CB:1B:A0:B8:57:FE:70:91:C7:9A:FB:15:40:D9:AF:F0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 71D0ED954D7CD685FD7F48D426DB3A100573A8BB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145626.roa
Signing time: Tue 26 May 2026 01:13:20 +0000
ROA not before: Tue 26 May 2026 01:08:20 +0000
ROA not after: Tue 25 May 2027 01:13:20 +0000
asID: 145626
IP address blocks: 240a:aba0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:d0:ed:95:4d:7c:d6:85:fd:7f:48:d4:26:db:3a:10:05:73:a8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:20 2026 GMT
Not After : May 25 01:13:20 2027 GMT
Subject: CN=859C6C96CB1BA0B857FE7091C79AFB1540D9AFF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a2:4d:13:ae:3f:e5:4b:30:00:14:0d:3f:9e:
05:1f:5a:b5:82:11:08:55:e7:d7:29:81:99:34:70:
14:ea:db:df:53:27:fc:19:51:d9:e6:7d:c1:a8:f9:
ef:5a:83:17:e8:9b:3d:ec:c1:5b:c9:17:6a:61:73:
b6:27:45:4c:f7:48:90:f6:3d:24:30:f8:22:91:6b:
47:bf:d0:76:9d:ea:91:f8:c0:0b:ce:b3:5b:33:3c:
eb:b6:cb:3a:50:cf:6f:c4:c2:de:12:0d:0f:28:49:
2d:fe:67:9c:31:ee:d0:19:af:f5:bd:49:73:27:22:
58:7e:1f:ed:59:6d:46:c6:04:c8:3e:8b:a0:83:d9:
e7:8f:bf:dd:52:16:36:df:85:e8:41:df:ba:2d:98:
fe:57:08:f5:88:4a:84:d7:65:c7:e4:b2:b0:ad:cf:
ad:b6:16:1d:4a:6f:6a:b2:db:1a:ea:bc:36:1e:d0:
37:47:81:74:a1:92:de:d6:f3:11:d2:e5:8d:3a:86:
82:42:af:33:6f:f3:53:e1:da:98:e8:63:16:68:5e:
60:04:b8:00:d8:ce:53:5e:da:1f:13:f8:d2:ff:df:
79:66:e8:de:cf:66:be:d9:bb:2f:72:9b:3e:24:f4:
1d:b1:ff:7c:5b:93:af:8f:b9:35:e0:49:ce:5b:e1:
d1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9C:6C:96:CB:1B:A0:B8:57:FE:70:91:C7:9A:FB:15:40:D9:AF:F0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145626.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aba0::/32
Signature Algorithm: sha256WithRSAEncryption
3d:78:df:88:6f:36:0b:7e:5f:52:51:cb:5e:f0:54:03:5c:91:
af:82:15:60:3d:76:14:ca:0a:b0:4b:e4:fa:b7:05:01:7e:65:
ab:2e:36:ce:2c:6d:2c:bf:93:2b:03:b7:32:fa:d1:6a:de:47:
15:1c:ca:24:66:a7:2e:7e:e3:7d:cb:a4:3c:04:60:55:5d:66:
62:cc:da:f6:34:d0:fc:17:71:47:80:07:d0:2b:de:0a:23:71:
24:a1:c1:03:55:72:ff:a8:42:f8:c5:c0:86:30:39:1f:36:a2:
0e:1f:6b:ce:68:a2:b4:b5:c2:25:3a:ab:62:b7:e2:ad:be:3f:
d4:91:ed:47:7b:b5:d0:a9:6c:4d:68:50:63:7b:5b:1e:20:24:
8b:a5:34:50:c5:74:a3:13:29:14:30:ab:4f:52:92:da:62:61:
e0:23:75:8e:1c:7d:bb:ba:a4:29:01:8a:ce:f7:6f:33:60:69:
fd:b6:38:e4:c2:35:e1:65:f9:08:72:0f:d1:03:80:da:6d:3d:
3a:11:f4:f1:ed:7e:ee:e2:2d:6d:72:3b:c3:25:10:e5:2a:25:
05:c2:b1:fb:1a:3e:26:7a:10:e4:69:2f:64:4a:ff:c1:13:a3:
49:9e:cf:1c:39:38:df:bc:43:f8:3a:6a:a2:0e:a0:83:13:06:
15:c9:54:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:20 2026 by rpki-client