Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145627.roa
File: AS145627.roa (raw, json)
Hash identifier: xIVdISg+sGcBcGtupWADEKr2zl1ZOeXhpU19+oQ63I8=
Subject key identifier: 99:25:20:2C:35:B1:F1:96:3F:DC:9E:52:5B:07:ED:45:79:61:2D:02
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0310A0DC34D77BC84E18748BF1C0453A5FED98AF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145627.roa
Signing time: Fri 22 May 2026 06:05:46 +0000
ROA not before: Fri 22 May 2026 06:00:46 +0000
ROA not after: Fri 21 May 2027 06:05:46 +0000
asID: 145627
IP address blocks: 240a:aba1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:10:a0:dc:34:d7:7b:c8:4e:18:74:8b:f1:c0:45:3a:5f:ed:98:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:46 2026 GMT
Not After : May 21 06:05:46 2027 GMT
Subject: CN=9925202C35B1F1963FDC9E525B07ED4579612D02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f3:dc:4d:62:7a:f0:61:e5:db:0b:ea:ff:d4:
7f:d9:8d:c2:88:04:d3:2e:a3:61:25:63:87:be:c3:
e2:da:d8:8f:da:5a:83:4e:b2:61:48:50:ec:fa:75:
f9:13:dd:d1:55:53:f9:45:b4:b0:0f:7d:5f:36:40:
6e:aa:7b:10:59:ce:fd:07:3c:c3:a9:01:a8:f5:39:
1f:fa:3d:9a:db:fc:bf:8e:21:0e:3e:07:16:de:04:
b9:f1:9b:79:36:c4:d1:8f:3c:2e:4a:0e:96:80:4c:
a2:5e:40:47:0c:9a:38:27:d3:a9:34:03:d3:48:cf:
5d:ee:1f:ec:a0:53:df:98:bd:83:00:ca:f8:11:b7:
70:46:2b:d2:a0:f6:79:ec:62:2d:8a:a1:e0:61:f2:
0d:bd:89:69:64:fc:cb:db:ac:ff:e4:fa:94:5e:02:
6d:9a:c4:30:74:9d:e9:ea:7f:41:3d:d7:45:c6:08:
70:3a:4c:8b:cb:91:b4:ed:e2:45:cb:d3:76:b0:14:
43:ae:07:aa:62:1a:74:0a:45:29:67:ba:0c:11:0f:
1d:82:c6:ac:cf:4b:f7:97:15:86:74:b7:f9:7e:2f:
86:8a:1c:8e:88:f2:7f:a0:0a:ed:d0:10:6f:fc:cb:
c5:02:95:96:6e:65:41:4c:cf:9f:0a:9d:50:ee:ba:
28:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:25:20:2C:35:B1:F1:96:3F:DC:9E:52:5B:07:ED:45:79:61:2D:02
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145627.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aba1::/32
Signature Algorithm: sha256WithRSAEncryption
2f:e4:58:59:3b:a0:6d:0e:ca:ec:a4:9f:b5:e6:f0:90:0e:5b:
46:40:3a:cf:ed:15:ba:00:cc:27:1f:3b:df:06:20:d2:32:af:
86:8e:b2:08:61:c5:83:fc:f1:84:d8:7d:d2:61:bd:60:a2:0f:
5f:65:a4:e0:2f:82:5c:fd:60:72:85:da:53:2f:de:70:e9:e5:
b8:48:81:3c:ae:9c:f4:67:34:ac:03:ba:05:ad:94:60:e4:8f:
54:66:aa:45:f2:00:d5:c3:6a:8d:53:92:7d:8d:33:09:96:0b:
6d:b4:71:f4:24:77:5f:51:04:36:c3:d0:d2:b3:45:d8:4c:aa:
dc:b9:de:a0:ad:31:d1:28:98:ce:0d:d4:4a:50:61:3e:d6:5d:
e8:4f:bd:16:a7:9b:16:0a:c9:b2:fa:70:b0:04:36:50:9f:13:
b8:04:75:f3:ec:ec:14:f6:be:95:5d:ec:82:8a:16:b3:16:8b:
1f:5f:90:3d:51:58:4f:88:d1:3c:93:19:88:c9:a3:2a:d5:55:
54:03:ec:65:3c:92:ea:41:aa:c1:18:10:cd:0f:ee:53:a4:ca:
3e:17:eb:39:e8:a9:bc:7f:69:47:3d:46:d7:b1:75:2e:1a:65:
d7:73:bb:7a:c9:86:8b:da:6b:15:e6:4f:5e:c7:0e:cd:bd:fa:
79:95:52:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:05 2026 by rpki-client