Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145646.roa
File: AS145646.roa (raw, json)
Hash identifier: RnnoO057TNPGkmbyd807NYL9rFG+Cu5MOdt95YXCcp4=
Subject key identifier: 2A:2C:81:0D:2C:65:82:A7:3F:BE:4F:98:8C:4D:2D:ED:68:34:5A:A8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3AC0C24F382A84865056558FDC500CFE4AA1DEDF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145646.roa
Signing time: Tue 26 May 2026 08:53:01 +0000
ROA not before: Tue 26 May 2026 08:48:01 +0000
ROA not after: Tue 25 May 2027 08:53:01 +0000
asID: 145646
IP address blocks: 240a:abb4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:c0:c2:4f:38:2a:84:86:50:56:55:8f:dc:50:0c:fe:4a:a1:de:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:48:01 2026 GMT
Not After : May 25 08:53:01 2027 GMT
Subject: CN=2A2C810D2C6582A73FBE4F988C4D2DED68345AA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:02:07:e2:7b:39:89:40:8f:16:02:09:94:
72:f0:63:7d:77:9f:bf:77:9d:d0:6c:ea:7a:a4:64:
83:80:bd:b9:a0:b9:2a:07:59:15:cf:2f:d9:a1:22:
88:c2:f4:cc:fe:6f:c9:19:76:f5:f0:4f:f3:fd:d6:
b0:1d:ea:3c:c7:85:a8:97:4c:e7:cc:a4:9d:5e:b8:
0a:5e:22:e7:e8:38:69:90:a4:fe:28:49:5c:fd:1c:
d5:23:82:d8:49:2c:ba:da:53:63:a6:57:86:a7:30:
b9:6f:d6:01:4d:6c:f5:74:bb:ea:0b:80:e0:74:a5:
ae:e6:c3:2b:65:81:bb:5a:03:0f:7f:d0:66:33:b2:
3a:c9:3c:ad:b9:21:21:f6:74:2d:80:cc:f0:c7:5d:
94:27:51:23:e0:7c:fa:c0:69:de:7c:2f:c9:4b:60:
b7:17:b4:7e:ca:2a:5f:d3:a7:2b:45:cb:c2:de:68:
fd:c5:0c:fd:0f:d8:f8:f5:84:de:29:21:b7:38:4a:
d5:01:31:3c:5f:cd:3e:38:ff:13:f0:da:93:39:0f:
3e:28:ae:b9:d3:58:88:27:c2:47:94:d9:50:08:c2:
48:ef:14:86:0b:2e:12:6a:a5:69:13:cb:b5:ba:66:
c1:e3:e1:81:a2:20:a2:92:e2:1e:0d:52:89:da:2d:
7c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2C:81:0D:2C:65:82:A7:3F:BE:4F:98:8C:4D:2D:ED:68:34:5A:A8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145646.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abb4::/32
Signature Algorithm: sha256WithRSAEncryption
bd:0a:88:34:cb:c3:d2:8e:a4:02:1c:93:0c:f3:71:2a:c2:ff:
a8:9d:39:6d:dd:63:f8:ef:58:24:3a:d6:c1:f1:11:08:f1:42:
e4:fd:8c:0d:fb:69:8d:dd:f0:69:e5:1a:a4:06:96:43:fa:d1:
fd:87:7d:e5:9d:f0:cb:76:0a:6d:a6:09:c8:e4:cf:ff:16:d5:
1f:1f:fe:06:d3:39:5d:12:35:e6:05:3e:7b:55:ac:5e:f1:ec:
62:5a:66:9d:e8:29:66:50:b1:60:e6:ee:c6:b9:cb:02:a6:f6:
f2:13:82:f3:9c:ab:16:39:4e:f2:43:28:d6:8a:e4:9f:59:07:
8a:69:a1:79:f5:75:2d:97:b4:e4:ee:7d:1f:0c:a3:71:b7:22:
86:d6:b4:50:1e:f9:f6:00:37:eb:36:8d:c2:2f:ba:3c:27:14:
cb:74:eb:2b:1f:7d:ed:bc:f7:5e:59:a1:b4:13:10:a5:91:92:
20:5d:65:95:80:9b:5d:09:ef:a0:6f:18:25:a0:db:84:4f:c5:
70:7e:d0:e8:95:e8:9a:de:38:a5:9f:67:00:b4:95:c4:83:fa:
32:e2:58:26:f6:72:15:34:fe:5b:93:b8:c1:3b:f8:d7:85:24:
f8:bd:2c:8c:39:20:0b:d5:33:85:b7:80:e0:94:1f:a3:23:e2:
62:de:09:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:47 2026 by rpki-client