Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145639.roa
File: AS145639.roa (raw, json)
Hash identifier: 26sffBcN0MzJhhqZi4v2w1ZbuvJsCVwONpL+5iuIaR4=
Subject key identifier: C7:87:4E:CE:3C:9E:43:38:89:17:77:C1:79:FF:2C:28:E5:98:1D:F2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 54632247E82B836902CBBE77E4D0307824B813B6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145639.roa
Signing time: Fri 22 May 2026 07:24:28 +0000
ROA not before: Fri 22 May 2026 07:19:28 +0000
ROA not after: Fri 21 May 2027 07:24:28 +0000
asID: 145639
IP address blocks: 240a:abad::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:63:22:47:e8:2b:83:69:02:cb:be:77:e4:d0:30:78:24:b8:13:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:28 2026 GMT
Not After : May 21 07:24:28 2027 GMT
Subject: CN=C7874ECE3C9E4338891777C179FF2C28E5981DF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:72:01:10:d7:e8:1c:2d:8d:6e:47:5b:72:77:
c0:e6:7e:4c:cc:af:29:ac:10:09:85:98:12:86:71:
f5:42:87:9c:08:9b:38:18:10:16:af:e7:fd:bc:0b:
ad:ac:3d:a7:e0:55:cc:30:eb:4b:b9:65:16:06:d7:
44:76:66:6d:7e:55:11:5d:a3:21:fb:3a:ff:3f:e0:
c2:3f:7d:3f:dc:61:b1:ba:05:0f:18:fa:49:2d:9c:
e9:0f:86:e7:12:d5:7c:d3:19:b6:ef:f8:32:99:6f:
da:84:0e:60:a6:b0:5f:fd:20:46:f9:dd:4c:b5:cf:
49:a4:15:b9:f8:00:27:8d:fc:99:3e:4e:24:46:79:
4c:05:86:5b:cc:85:91:41:70:b0:de:c7:7f:57:f6:
2b:70:9d:4b:58:7b:26:91:9a:ac:5f:c4:0c:51:93:
be:02:9d:25:73:e9:7f:bd:59:1d:ff:f2:80:a1:f9:
66:1e:ef:e4:ea:76:4a:df:0e:81:18:cd:de:9a:26:
bf:80:5b:9e:9d:8f:fd:e6:26:08:fe:eb:61:3c:cd:
6f:7d:b7:e5:28:9c:e4:ae:5c:34:4f:b1:76:22:9e:
74:57:4c:f6:d5:38:8f:7a:24:c5:56:d7:75:76:8b:
6e:6c:66:d7:76:34:62:ee:2b:08:99:1a:b0:1b:bf:
1a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:87:4E:CE:3C:9E:43:38:89:17:77:C1:79:FF:2C:28:E5:98:1D:F2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abad::/32
Signature Algorithm: sha256WithRSAEncryption
8b:c8:e3:8a:72:7d:d9:71:ae:a1:ef:12:09:40:1e:7f:25:dd:
90:c6:b8:5b:9c:24:2a:12:5c:2f:a6:82:4a:7d:c9:14:a8:21:
d0:2c:bb:70:1d:85:39:65:23:cf:88:50:a9:54:63:77:1b:ea:
c9:e8:c7:22:c5:b4:f5:7d:59:fb:89:8a:4c:bf:e7:74:22:f1:
27:62:69:6f:e2:a9:dd:66:00:cf:18:17:f8:82:c0:f5:d3:23:
21:5a:db:1d:e9:26:37:53:bf:90:ed:9d:dd:31:1b:03:e8:d0:
08:a1:e8:96:0b:af:a5:cd:56:71:51:6d:2a:de:bf:26:c9:1c:
83:67:54:bf:f2:5e:51:d8:71:7a:fc:10:5f:54:e6:9c:75:2a:
11:fb:f1:30:bd:41:04:90:a0:a0:96:88:c0:3a:41:5e:d1:7a:
d9:4c:b0:a8:b9:59:1b:ba:d4:cb:11:8b:b1:77:be:4c:88:b1:
bd:02:76:9e:ba:03:0d:e8:3b:75:26:b9:47:ce:b1:a1:ea:81:
96:a0:59:46:41:6c:85:1d:cd:16:9f:31:ab:a5:da:7d:45:99:
c4:0a:28:67:18:0a:1a:a1:87:58:55:8f:0a:a3:9d:a0:91:cb:
89:c0:32:ca:32:65:e8:6f:95:6c:e1:28:f6:b8:ba:22:b2:e7:
ac:c4:c8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:30:12 2026 by rpki-client