Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145638.roa
File: AS145638.roa (raw, json)
Hash identifier: mglKoJCTvPOIs/g535b5Z791/rYQp7K+PcahWIxRtkU=
Subject key identifier: D4:8C:FB:F7:5D:DB:1F:8D:1A:7B:52:B3:F2:CF:88:F4:ED:D5:AA:73
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 429CBE5485B5A6577F3DA7832D80C166C9A70D23
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145638.roa
Signing time: Mon 25 May 2026 01:38:10 +0000
ROA not before: Mon 25 May 2026 01:33:10 +0000
ROA not after: Mon 24 May 2027 01:38:10 +0000
asID: 145638
IP address blocks: 240a:abac::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:9c:be:54:85:b5:a6:57:7f:3d:a7:83:2d:80:c1:66:c9:a7:0d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:10 2026 GMT
Not After : May 24 01:38:10 2027 GMT
Subject: CN=D48CFBF75DDB1F8D1A7B52B3F2CF88F4EDD5AA73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:0e:f3:7c:f0:18:7a:d6:b3:01:58:65:76:
13:16:e9:40:e9:20:9c:1d:e2:37:da:95:c0:17:83:
3e:4d:d5:21:5e:29:47:a0:13:81:14:ec:8c:d9:7b:
c7:34:13:ae:63:92:5a:1e:96:b8:28:84:8a:c7:f7:
a7:0b:5c:6d:fb:09:6a:0d:94:d2:19:b6:76:95:06:
0c:52:84:89:ab:57:e0:1f:27:be:f3:d3:3c:0a:a6:
39:b9:c2:61:10:64:f3:cd:e3:8b:cc:0f:48:ed:dc:
4e:29:dc:87:a3:6d:d6:27:ff:38:fd:15:5f:0f:b3:
82:56:94:e5:9e:8d:ff:79:4b:58:95:e3:1e:cc:5c:
d3:39:d9:6e:7d:e9:34:b2:38:81:29:55:5a:ba:3a:
4d:53:eb:11:3d:5c:95:01:d5:68:4a:50:91:c2:b4:
f5:9c:0b:89:dc:27:31:96:57:da:b1:b1:77:21:82:
72:7a:41:43:37:3f:03:12:bf:22:73:bb:b4:14:a4:
aa:0e:03:da:87:5e:a8:36:35:a5:48:b4:c9:f4:6f:
d8:40:ad:7f:6b:81:60:90:28:fb:d0:f6:99:9e:51:
72:01:b5:49:96:22:6e:1d:5a:30:06:51:33:1a:79:
51:42:7a:12:b4:f5:9e:1c:a9:e7:e0:d9:ea:dd:0a:
d2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8C:FB:F7:5D:DB:1F:8D:1A:7B:52:B3:F2:CF:88:F4:ED:D5:AA:73
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abac::/32
Signature Algorithm: sha256WithRSAEncryption
6c:13:5d:96:a6:02:02:d6:a8:a7:c1:ef:b3:27:68:1b:c4:91:
99:71:fb:7c:2a:e6:56:46:5d:f2:60:d9:60:5d:84:78:93:e9:
e4:ca:89:b8:43:c9:1d:a0:03:9c:80:09:3d:84:ec:52:7f:78:
18:b5:12:7b:8f:41:fd:41:1d:51:6c:e6:19:50:2d:d1:40:57:
88:c5:d7:52:33:9e:8d:d4:63:21:d6:e0:0d:5a:c6:93:6a:8d:
55:9b:4a:ea:f5:09:1a:b5:37:3f:a1:95:e6:14:0b:c3:4a:e1:
ac:d9:c9:66:95:bd:29:9e:3f:ea:50:62:3e:46:31:a2:28:3b:
04:16:9b:e7:8e:61:18:59:a8:7d:ee:5f:77:49:33:42:0d:78:
ac:f2:2d:90:b7:4f:03:e0:c1:e9:ca:e4:f1:c4:56:35:50:e6:
15:ed:99:b2:8e:bb:b8:b6:67:b9:4e:37:a4:01:d9:a2:b5:f2:
ce:81:7a:8c:95:a9:eb:27:29:da:57:bb:5b:38:a0:b0:3e:38:
d1:74:c3:69:3a:86:48:de:87:e9:e9:21:52:ca:4d:3c:c9:e4:
8f:dc:35:76:ab:c4:40:17:bb:bb:b2:e4:68:0d:41:7f:ff:59:
d1:f5:0c:9a:f9:3a:ce:bd:bc:11:e4:66:a2:41:d6:a1:41:0f:
f2:2e:a6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:56 2026 by rpki-client