Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145630.roa
File: AS145630.roa (raw, json)
Hash identifier: 8J2cILTVU47wlAGhrorWEaWFDLPcgxmP0q+JwD2FrPU=
Subject key identifier: 0B:9A:36:CD:7F:5C:6F:5B:E9:B8:9B:9D:EB:83:B8:2C:D8:96:6D:70
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7ED54124D66ACC8C554166F2A0DA7138E03E1F1F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145630.roa
Signing time: Mon 25 May 2026 01:38:32 +0000
ROA not before: Mon 25 May 2026 01:33:32 +0000
ROA not after: Mon 24 May 2027 01:38:32 +0000
asID: 145630
IP address blocks: 240a:aba4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:d5:41:24:d6:6a:cc:8c:55:41:66:f2:a0:da:71:38:e0:3e:1f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:32 2026 GMT
Not After : May 24 01:38:32 2027 GMT
Subject: CN=0B9A36CD7F5C6F5BE9B89B9DEB83B82CD8966D70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cf:16:12:eb:ed:ae:58:6d:f7:f7:20:18:a7:
32:d3:fb:02:ce:25:75:6e:19:e3:6b:12:d9:bd:24:
a5:28:d4:24:06:5c:57:25:fe:b8:13:96:3f:fd:ff:
bb:16:9e:a2:d1:2c:d6:4c:67:f9:04:c4:f6:fc:73:
ba:62:0a:7f:d8:69:13:25:05:d6:ad:fc:1e:6c:8a:
ae:48:2d:0b:48:36:dc:fc:34:73:f7:02:68:e1:ca:
64:61:2b:e3:1f:00:d8:dc:f6:8a:20:1f:6b:4f:b2:
51:3e:04:99:24:07:1b:a6:bf:1b:1b:ba:57:6d:d8:
30:dd:97:9c:da:6a:0a:63:ed:35:59:44:45:a1:e5:
7d:36:a8:47:99:ca:c8:0f:88:51:bb:3e:fd:9c:62:
ce:29:cc:3b:ac:8c:34:2d:9a:e0:5f:d8:8e:00:06:
b6:4e:a6:5a:02:71:38:4b:bd:9f:7a:ef:40:14:cc:
c3:57:e0:22:92:de:46:40:8a:28:01:6e:fe:78:d7:
c3:81:49:d1:09:c9:65:c1:6e:39:2e:14:b4:1d:30:
bf:ba:48:17:42:1a:58:66:ab:20:d6:24:78:66:82:
0d:9c:33:97:a7:05:38:7b:ca:04:2a:a5:fb:23:66:
ad:a2:1c:36:9e:be:29:ee:a1:05:77:35:fa:51:36:
8f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9A:36:CD:7F:5C:6F:5B:E9:B8:9B:9D:EB:83:B8:2C:D8:96:6D:70
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aba4::/32
Signature Algorithm: sha256WithRSAEncryption
34:0a:c8:f6:43:53:54:0f:de:35:f9:f8:a3:cf:8f:f8:f4:74:
57:19:c1:94:8a:a5:3d:2a:97:c3:91:d2:97:fe:52:63:51:a1:
a7:eb:f7:31:58:5f:f4:05:50:47:f7:4b:03:26:32:a9:7b:35:
52:34:2b:6a:79:0e:c9:77:ed:bd:96:75:7c:5f:9a:e9:e7:8f:
46:10:58:02:f9:a2:47:2e:65:a8:fb:0b:ba:91:cc:df:09:aa:
8d:6e:48:0a:9e:33:a3:41:3d:9b:dc:1c:25:b3:0d:c5:6d:35:
55:39:5f:f8:50:03:62:bb:f9:cd:3e:e8:d6:7a:97:e7:46:27:
a6:88:48:cf:22:03:fe:a9:27:24:9d:2f:d7:9d:8f:5f:d9:b0:
96:4b:ea:19:64:22:72:d9:7e:54:ad:b1:37:f4:6a:43:19:2b:
45:ad:3a:f4:23:2c:6c:37:be:98:fc:eb:f7:f0:3b:e0:90:af:
02:7d:f5:e7:1e:66:68:e5:c9:23:46:91:1e:94:61:10:fd:11:
9c:01:2f:66:f6:0d:d4:89:29:a3:60:9d:38:29:c7:f4:2d:f4:
13:f8:b2:28:93:f2:cb:11:27:cb:10:a1:e7:b5:1c:42:92:75:
06:ca:f2:ef:6c:b5:c0:5f:b2:9b:9c:7f:68:3a:11:31:a1:70:
2e:5f:ff:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:48 2026 by rpki-client