Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145656.roa
File: AS145656.roa (raw, json)
Hash identifier: BeK21EqjCBu5TI7+xZHm0NcM0ZenCgDfKeGowgDlw9s=
Subject key identifier: F7:04:C4:32:BE:68:3B:6D:43:3E:24:69:1A:98:99:51:FF:46:1C:F0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0A0D42159B70D1F2AB71C2A3EDD04FACD2323640
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145656.roa
Signing time: Fri 22 May 2026 06:45:57 +0000
ROA not before: Fri 22 May 2026 06:40:57 +0000
ROA not after: Fri 21 May 2027 06:45:57 +0000
asID: 145656
IP address blocks: 240a:abbe::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:0d:42:15:9b:70:d1:f2:ab:71:c2:a3:ed:d0:4f:ac:d2:32:36:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:40:57 2026 GMT
Not After : May 21 06:45:57 2027 GMT
Subject: CN=F704C432BE683B6D433E24691A989951FF461CF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:66:90:16:f1:26:08:5e:8b:1e:2f:32:16:
dc:83:c0:6d:e8:de:21:02:ba:75:62:9b:2d:b0:fb:
7c:48:39:58:f7:7b:bc:89:9a:f7:89:fe:8a:64:eb:
81:f9:d5:b3:b5:0c:29:6e:be:78:0d:04:84:74:82:
6f:a2:8e:5d:36:ce:0e:6d:a1:a1:4f:56:91:9a:25:
4c:50:11:42:88:d1:26:ed:f6:1e:bb:c9:c4:ee:81:
ed:5b:c5:02:36:9c:e0:a9:37:7c:30:d8:78:27:38:
56:80:68:d4:3b:fc:ec:ba:76:5d:62:70:3c:95:28:
e0:84:9f:0f:3e:dc:e9:cc:4a:08:ff:68:b4:0a:e0:
98:c2:8e:30:36:97:cd:8f:8b:19:94:98:2e:3f:11:
74:57:0c:11:2c:83:5b:bd:5e:f0:5d:42:8a:65:ab:
1e:f4:37:7f:ce:6b:ee:0e:11:6d:53:44:40:90:c3:
f8:b1:c9:27:a0:b6:8d:7b:b7:dc:d6:25:ce:f6:ec:
e6:4d:fe:99:e0:ca:01:bc:31:ee:30:89:28:b3:74:
ba:2c:c2:36:83:ff:10:d1:31:7c:46:70:b3:8f:ca:
58:29:4e:28:56:59:c5:49:3a:2a:26:69:d2:a5:c0:
62:e7:2f:e6:94:51:67:b5:a5:a9:66:c7:d6:0f:8e:
b0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:04:C4:32:BE:68:3B:6D:43:3E:24:69:1A:98:99:51:FF:46:1C:F0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145656.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abbe::/32
Signature Algorithm: sha256WithRSAEncryption
11:db:32:e1:39:ed:12:f7:43:4e:b2:69:26:fc:73:f9:05:80:
ce:6c:77:1f:d8:19:c8:9c:be:f8:54:ad:76:51:d2:13:33:9b:
c2:13:f8:4f:4f:be:c6:bb:9d:59:99:84:11:65:38:1f:30:ba:
0a:58:39:2c:81:23:bf:a0:c3:32:a4:2f:84:4d:36:fb:07:d5:
9e:bb:2f:32:ef:92:0d:b7:17:46:1a:12:51:ee:90:c4:43:5c:
d9:9d:60:7f:ba:47:a0:fe:ec:30:a3:76:7e:49:24:71:bb:7b:
44:f2:bb:d7:d0:2c:c9:3f:15:06:3e:59:76:b8:c5:ea:28:7d:
97:84:27:18:5c:c9:b8:31:b3:e9:1d:da:a6:b3:c8:31:1d:86:
82:53:ec:94:d1:b9:ce:52:28:e1:b6:bb:5c:d0:a5:b1:ca:8b:
e5:86:92:29:80:1a:68:5a:fa:89:78:7f:ba:59:2e:b8:b3:d7:
83:16:b7:c1:b5:9c:73:71:07:e1:00:cd:3e:a3:ff:b7:b6:32:
50:89:a4:01:c5:04:54:e0:52:ac:36:4f:dc:dc:e8:07:15:73:
9c:c7:d3:ae:fc:89:e5:9c:8c:2a:25:e4:57:20:1d:01:23:e9:
55:d8:40:f2:7e:23:39:54:99:6f:b0:11:39:da:86:97:d3:f0:
35:2f:51:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:58 2026 by rpki-client