Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145634.roa
File: AS145634.roa (raw, json)
Hash identifier: X1k6fbf+x7iluP0KKUY+3dcZksDOVxDygwXaIPMMfro=
Subject key identifier: BD:BD:26:77:0A:B5:A3:EE:CD:93:45:2F:B5:1F:9C:CB:B6:7C:6E:44
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1611FE959BAABDA9B97F0812B00D3238618134DA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145634.roa
Signing time: Fri 22 May 2026 06:05:20 +0000
ROA not before: Fri 22 May 2026 06:00:20 +0000
ROA not after: Fri 21 May 2027 06:05:20 +0000
asID: 145634
IP address blocks: 240a:aba8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:11:fe:95:9b:aa:bd:a9:b9:7f:08:12:b0:0d:32:38:61:81:34:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:20 2026 GMT
Not After : May 21 06:05:20 2027 GMT
Subject: CN=BDBD26770AB5A3EECD93452FB51F9CCBB67C6E44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b4:dd:1d:7b:28:32:21:a2:f1:7a:6d:76:79:
bb:17:56:0b:8c:d6:3e:7a:26:99:0d:23:5a:6e:ce:
d3:2b:78:c0:ed:57:d8:5f:c8:0e:9f:11:65:b5:1c:
31:52:21:61:e1:74:86:aa:23:40:71:9f:b2:04:b0:
7a:a3:0b:8e:e5:96:f1:f9:17:01:29:03:0c:bb:f4:
46:36:ce:4b:35:ea:1f:78:46:b5:af:a2:1a:a8:22:
ac:c8:a5:7f:14:ad:23:53:cf:a8:fa:3a:b5:9f:c4:
a1:c7:d0:42:f7:bf:6b:e2:9f:f3:dc:7e:fd:81:a7:
33:64:04:c1:68:f4:58:06:c3:4a:fe:4a:43:b7:9f:
97:2b:9a:17:53:f0:39:00:f6:e9:a7:20:58:09:ce:
18:3a:9d:5c:71:bb:ca:05:66:d7:c9:0f:a7:fb:3f:
2d:7b:22:d9:1d:83:2c:36:1a:dd:c5:1a:1a:cd:cd:
5b:72:cc:71:9f:f9:87:7b:d4:28:dc:ba:c3:f8:69:
0c:92:9b:6d:90:cd:d3:79:77:99:cf:58:b3:18:e1:
17:5b:7d:47:dc:98:65:42:63:5a:43:9f:7c:1e:55:
c9:ae:b7:19:62:f1:0c:c6:e2:70:3d:fc:b4:5b:f3:
ce:53:2b:91:fa:4b:d5:1c:7c:2f:19:08:6c:68:b8:
a8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BD:26:77:0A:B5:A3:EE:CD:93:45:2F:B5:1F:9C:CB:B6:7C:6E:44
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aba8::/32
Signature Algorithm: sha256WithRSAEncryption
3c:42:6f:1b:93:7a:64:72:57:0b:40:13:2a:1d:97:64:20:c1:
8f:fe:2d:56:98:fb:f3:8c:bd:9d:7a:8f:a4:cc:6e:b6:26:d1:
7d:40:8e:5c:ba:0b:6c:c4:07:4e:0d:4b:36:48:e0:2b:a5:e0:
83:de:87:1a:d8:9d:15:c2:89:7d:88:54:2e:fb:38:f9:71:19:
95:77:16:26:e6:4c:fd:78:45:31:9b:35:be:93:a7:61:5c:ec:
3b:b0:73:0d:d9:27:00:fe:c8:48:ce:06:ff:8a:6f:ab:c8:da:
8b:3a:c8:1e:d9:0b:5c:c2:b8:43:05:ef:ad:9f:e3:1b:30:75:
ea:b5:ed:99:08:4f:3c:f3:5f:0f:a9:41:ce:28:89:71:18:06:
60:cc:8d:f4:7d:31:25:10:85:56:a0:65:cd:b8:a6:2b:07:d1:
73:0f:4f:fd:b2:d8:2f:33:ef:bd:7b:73:b8:4f:f4:fd:81:76:
fe:31:83:01:11:a2:62:29:ae:b3:41:a6:0a:ee:15:10:16:80:
dc:00:2b:2a:18:11:76:84:77:d2:85:3e:b0:bc:a3:f7:ef:d2:
d8:1e:01:de:d8:4f:dd:ba:cc:2b:8d:99:c6:a2:0d:1c:8a:af:
fb:ae:cd:48:99:e7:a2:58:5d:cd:7b:b5:21:61:2d:a4:dc:ec:
a9:bb:da:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:30 2026 by rpki-client