Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145652.roa
File: AS145652.roa (raw, json)
Hash identifier: KjzKO5iRGsyCdL2TGvuIDvhlx8axP5JZn3l1z/mOHcY=
Subject key identifier: F7:23:FB:91:A6:72:E9:B3:60:7B:41:15:2B:46:FD:3B:38:32:8D:2B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4E8091E8CBD5713EF9370D8C8ACA379483DA6A72
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145652.roa
Signing time: Fri 22 May 2026 06:58:10 +0000
ROA not before: Fri 22 May 2026 06:53:10 +0000
ROA not after: Fri 21 May 2027 06:58:10 +0000
asID: 145652
IP address blocks: 240a:abba::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:80:91:e8:cb:d5:71:3e:f9:37:0d:8c:8a:ca:37:94:83:da:6a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:10 2026 GMT
Not After : May 21 06:58:10 2027 GMT
Subject: CN=F723FB91A672E9B3607B41152B46FD3B38328D2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:c4:6e:18:d6:95:19:99:50:59:e6:a1:43:
f5:3f:64:02:59:8c:47:28:b4:93:e6:1b:33:7f:e4:
a6:b0:71:d5:39:f0:08:73:25:cf:74:32:b4:ee:58:
c8:47:7f:b7:b9:f7:df:ff:63:94:a4:b2:6e:0b:58:
0f:cf:1f:c2:d4:89:fa:62:ac:be:1e:52:26:92:95:
c7:eb:5e:b4:6d:7d:ab:dc:ca:58:4a:bb:67:e1:f3:
a0:ac:b4:b9:54:4d:66:c2:1a:c6:af:2d:eb:d8:02:
fb:6c:c2:66:24:86:80:8a:f3:15:82:1e:da:75:4c:
97:20:1b:af:f2:af:7a:15:d4:7c:b8:10:ca:cf:0a:
a8:a5:55:eb:d4:62:be:44:5c:81:3a:0b:46:bf:89:
0b:ff:1f:9d:e7:c0:f6:b9:19:37:e4:b7:a3:a2:f8:
21:01:85:e2:b1:a2:5f:46:63:06:8b:99:67:f9:da:
bd:ce:49:69:6e:12:ce:2f:10:fe:54:3d:d9:f1:98:
b6:68:8a:44:24:fb:a4:67:59:56:e1:ed:dd:8d:7f:
37:a4:e2:0c:e6:78:03:5f:25:87:cb:cc:1b:1b:85:
37:1f:ee:cd:ae:c4:2b:d1:5b:5b:b1:fc:d6:f7:2c:
5b:26:ce:c9:71:d0:ca:38:73:4a:1b:a8:c2:a0:91:
4c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:23:FB:91:A6:72:E9:B3:60:7B:41:15:2B:46:FD:3B:38:32:8D:2B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145652.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abba::/32
Signature Algorithm: sha256WithRSAEncryption
17:14:f6:4a:20:01:86:d7:67:8f:60:90:67:62:9b:67:5f:94:
f3:b5:61:08:1b:21:de:29:0d:b0:4d:84:cf:72:e4:ba:98:cc:
5e:a2:ba:86:41:56:7f:8b:34:2e:0e:35:75:e3:6d:59:ef:a9:
cf:1e:b3:25:31:13:fc:b0:c5:7a:29:73:f2:c5:7b:73:f1:f3:
00:67:a9:4e:00:10:d8:6e:f0:6d:f7:8f:81:29:65:83:89:4a:
5c:50:b3:f5:85:ab:22:47:20:19:86:54:1e:dc:43:71:8d:aa:
07:08:b8:60:03:8f:f0:19:1b:a2:05:0f:b9:fc:9b:85:7e:9f:
60:8e:45:56:4a:3f:47:4e:a1:36:1d:38:ac:ae:e4:f4:6c:94:
48:f1:6b:83:e9:1d:e2:54:6a:c8:bb:25:7b:ea:df:d7:c1:25:
80:de:4c:6b:7e:14:88:2f:6d:b2:4e:62:8e:a7:d5:c8:7b:d4:
c2:e7:45:cf:ea:e6:2c:96:e0:21:72:72:77:87:6f:a7:4c:e3:
5c:46:0f:94:e5:10:f4:a7:f5:35:93:30:45:66:fa:72:4c:cf:
1a:09:0b:80:68:96:62:40:d8:62:a2:7c:04:cf:97:57:cd:86:
b2:7a:cc:f1:69:30:a7:42:6b:ca:ec:cd:68:40:9f:cc:e4:ce:
66:e8:87:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:59 2026 by rpki-client