Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145636.roa
File: AS145636.roa (raw, json)
Hash identifier: CyR0t5/oVpWdntoI8LYHk3Rp3cVzVD12q/L9eYT6WFg=
Subject key identifier: 7C:9A:33:2B:D1:62:4C:7B:06:9C:48:39:0F:8D:C4:94:09:AB:E8:FD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6242E7AB5C78B38CB3B481EE9418A50370742BF1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145636.roa
Signing time: Mon 25 May 2026 02:22:50 +0000
ROA not before: Mon 25 May 2026 02:17:50 +0000
ROA not after: Mon 24 May 2027 02:22:50 +0000
asID: 145636
IP address blocks: 240a:abaa::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:42:e7:ab:5c:78:b3:8c:b3:b4:81:ee:94:18:a5:03:70:74:2b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:50 2026 GMT
Not After : May 24 02:22:50 2027 GMT
Subject: CN=7C9A332BD1624C7B069C48390F8DC49409ABE8FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:59:02:29:74:61:44:76:2b:65:58:52:30:bc:
59:fa:70:61:94:cb:82:9d:ef:3d:84:ca:8c:b8:53:
a2:2b:03:fc:91:12:21:fb:aa:96:68:75:67:3c:1f:
04:8c:37:49:47:c3:6c:2d:ed:3b:1e:15:17:89:07:
f3:52:d9:55:02:9f:42:1f:db:31:00:84:35:e9:e2:
28:e6:81:b4:32:04:37:f1:ff:55:c1:eb:f2:58:40:
15:1f:14:a4:98:70:25:de:36:0f:e2:3a:75:e0:a0:
35:99:7d:df:7f:57:9f:87:29:36:a9:05:17:bb:37:
f4:dd:ab:aa:aa:e1:a8:69:ed:f5:d9:dc:54:b3:bd:
cf:23:a2:7b:a0:71:b8:5e:81:15:67:bf:d5:65:9f:
93:3b:0b:6a:9b:69:54:54:9d:6c:76:c1:25:d9:a8:
84:46:01:3d:17:d9:e2:ec:98:72:b5:60:24:0d:3f:
7d:14:ef:df:bf:db:18:b9:54:e6:8e:57:30:f0:03:
be:ec:23:08:ab:55:f3:d0:2e:1e:c3:ac:9d:a5:b0:
77:da:00:2f:d4:a7:ff:1d:d7:68:9b:9a:f2:a9:d6:
ed:a0:1e:be:08:e0:20:5f:8c:88:5f:65:8c:63:c4:
7a:35:0e:ef:97:99:7d:88:e6:81:46:73:82:c7:80:
d9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9A:33:2B:D1:62:4C:7B:06:9C:48:39:0F:8D:C4:94:09:AB:E8:FD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abaa::/32
Signature Algorithm: sha256WithRSAEncryption
3b:05:22:43:ae:71:c3:07:04:8f:3f:2e:25:2b:a9:05:f9:11:
8f:37:d9:f5:95:d8:94:2d:a4:39:e2:c7:6f:d9:c4:60:f2:7b:
fd:40:0d:d7:5b:43:56:b4:fc:04:8f:30:52:c0:0d:05:8e:b4:
5b:66:37:61:68:40:e7:c9:4e:8f:61:31:e0:40:a3:61:40:34:
74:a2:18:0b:6d:c8:2f:03:d7:3e:e8:a6:59:27:b1:54:de:5c:
fb:d6:1e:51:ff:57:dd:fe:ac:09:10:c9:2a:c1:4b:53:4c:22:
15:0a:21:a2:8b:e8:f2:c8:c6:52:2a:da:69:c5:d9:91:45:05:
c6:cf:88:00:7e:82:99:c4:e2:de:f6:23:a1:68:a8:25:3b:9d:
c1:96:e7:86:ef:a8:a6:2d:b3:ae:5b:9e:42:f4:a0:a1:1a:ae:
ee:a1:da:04:dd:36:6a:3e:1c:2a:80:e5:14:04:55:fa:ea:7f:
c4:f3:26:87:a7:90:72:1e:5d:b6:c3:15:cb:44:b4:b9:5c:1f:
58:79:9d:f1:8c:e4:c5:5e:75:4b:87:d9:e4:be:18:bc:03:f6:
fd:0d:e1:9b:b1:08:18:f2:b7:2e:1a:10:dc:f9:74:db:0d:dc:
5c:7a:e5:89:88:ab:23:3e:ec:75:7f:19:47:7b:37:f1:df:fc:
af:85:83:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:40 2026 by rpki-client