Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145632.roa
File: AS145632.roa (raw, json)
Hash identifier: A6VqWrVRBzRdlyKQ585lPtpcdRj55O7q+ftFPkC6ing=
Subject key identifier: DD:27:37:0D:39:D4:52:1A:EA:62:69:70:85:08:CE:30:AC:CB:EF:2E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 14E138B05873517E83F49E3863EDB15A86379A1B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145632.roa
Signing time: Tue 26 May 2026 08:52:44 +0000
ROA not before: Tue 26 May 2026 08:47:44 +0000
ROA not after: Tue 25 May 2027 08:52:44 +0000
asID: 145632
IP address blocks: 240a:aba6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:e1:38:b0:58:73:51:7e:83:f4:9e:38:63:ed:b1:5a:86:37:9a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:44 2026 GMT
Not After : May 25 08:52:44 2027 GMT
Subject: CN=DD27370D39D4521AEA6269708508CE30ACCBEF2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b4:35:d5:7d:81:5a:e8:73:62:02:52:1a:52:
2d:5d:c4:3d:11:bc:a3:86:e5:46:83:06:9d:2e:88:
cb:6e:2c:ed:5a:66:65:bb:08:31:c9:9b:9d:2a:55:
40:7c:d5:41:a0:f3:80:64:2f:68:de:81:4f:b1:c4:
ce:91:c4:c7:3d:33:70:93:21:1a:fb:fe:ce:11:e9:
5b:7c:4d:30:d3:96:97:d7:da:d6:fd:23:40:49:be:
66:36:0b:f6:5c:90:fa:0a:a1:9e:1b:3b:1e:cf:32:
6c:08:b4:ce:c2:a1:7e:a8:99:2c:77:4b:53:ac:7e:
1d:f3:70:b1:01:a1:8d:06:f7:f7:75:7a:51:90:be:
9a:c2:ec:f8:e9:13:35:eb:4a:52:fd:09:27:15:d7:
4b:3e:74:21:41:f5:16:43:64:b9:5c:22:ca:20:ba:
09:37:3f:68:b4:2a:51:fb:f5:ef:cc:49:3a:1c:23:
30:c0:06:b5:8b:b4:f2:56:9f:c0:5f:84:70:bb:a4:
98:26:44:60:8f:41:38:82:34:f1:d2:b0:29:92:58:
89:2b:cd:da:fb:25:dc:35:3d:ee:f3:4c:7f:cd:64:
0c:e9:c8:44:b8:be:70:93:f2:ff:8b:b5:80:77:36:
bd:77:b8:1e:63:c0:45:59:2e:0a:5a:f1:30:3a:cf:
b0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:27:37:0D:39:D4:52:1A:EA:62:69:70:85:08:CE:30:AC:CB:EF:2E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aba6::/32
Signature Algorithm: sha256WithRSAEncryption
a7:2e:63:7f:0b:07:cf:ae:12:e0:45:b6:a1:4d:e5:39:e2:a2:
90:d2:7d:33:1d:98:59:2c:47:8f:57:af:fc:68:6b:dd:9e:74:
0e:a6:0c:e3:95:82:94:7a:ae:ad:99:5b:a2:42:53:15:dc:29:
34:61:f4:bb:93:f4:32:ef:75:7d:04:c8:9e:3b:16:78:9c:ea:
dc:c5:93:98:66:b1:22:b6:b5:44:ec:56:8e:bd:25:3f:b4:60:
8c:bc:b2:bf:c7:6d:45:f8:e0:60:42:d0:cb:16:c0:03:2d:36:
58:1d:57:0a:02:2f:73:4c:0e:2e:a8:aa:2e:24:a3:9d:29:dc:
6e:6a:45:fd:dd:7f:dc:52:f9:e3:cc:7b:45:fe:b0:30:34:b6:
a8:74:ee:6b:f7:d5:3a:28:54:01:36:16:0e:cf:7a:8a:ed:37:
e6:54:b0:8f:a9:50:e1:2e:78:65:11:fd:fc:8d:9b:77:3b:fa:
58:4d:cd:8f:a9:89:e8:f5:82:a9:f6:4a:41:93:7c:0e:d0:6f:
65:6c:a2:89:ff:b6:97:bd:e6:f4:98:06:86:8a:4f:9b:77:70:
56:77:1e:93:7f:d7:af:3a:ad:da:3f:26:41:a5:39:fd:ea:8d:
4c:32:42:fa:28:27:30:d9:34:d2:88:e1:3a:a9:3e:82:b9:b3:
4f:93:fe:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:08 2026 by rpki-client