Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145658.roa
File: AS145658.roa (raw, json)
Hash identifier: UVbaFaFpV0Br1PaovhOWKiaB+R72Pj/+TCnd8j/6BkY=
Subject key identifier: 35:0D:EF:1B:9E:78:86:BE:CE:18:AD:D8:09:9E:66:75:83:E0:DE:9E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 19997EAEFF224542AC90AC0FF5193E0C93592A55
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145658.roa
Signing time: Mon 25 May 2026 01:38:03 +0000
ROA not before: Mon 25 May 2026 01:33:03 +0000
ROA not after: Mon 24 May 2027 01:38:03 +0000
asID: 145658
IP address blocks: 240a:abc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:99:7e:ae:ff:22:45:42:ac:90:ac:0f:f5:19:3e:0c:93:59:2a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:03 2026 GMT
Not After : May 24 01:38:03 2027 GMT
Subject: CN=350DEF1B9E7886BECE18ADD8099E667583E0DE9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:36:33:d8:f6:62:fd:3b:48:59:40:2f:bf:6d:
da:11:8c:2d:51:c2:05:2c:50:99:5b:21:2d:9a:84:
14:ca:67:3e:cd:21:6c:b2:9a:b1:24:f6:6d:c0:51:
75:7a:ff:e4:ef:e8:d1:ae:89:b1:cd:6f:7e:0d:d5:
49:37:19:ff:de:d7:38:0a:12:6e:f2:34:73:9a:65:
22:2f:1b:ce:c3:55:29:e1:6b:e9:15:b4:fa:95:53:
f4:f1:22:c3:5c:cc:b8:7d:9b:98:a4:a5:2d:0f:de:
48:57:4d:14:49:6f:c6:ed:10:5e:a6:e2:d7:44:9b:
39:81:72:9e:65:be:07:08:bf:a8:cd:19:63:07:df:
46:bd:d5:fc:6a:6d:8e:ac:66:b9:e2:e9:31:e5:08:
49:0f:d3:03:f1:93:d8:87:ab:39:a7:8f:52:cd:4b:
92:5e:41:82:3f:21:30:c7:8f:07:e2:d3:ec:2b:04:
cb:58:3c:18:55:49:63:43:a1:fa:5d:9d:f5:3e:df:
76:37:b5:16:e3:9e:c5:84:6b:7f:76:81:1b:a8:70:
02:bd:67:2b:88:a9:22:d3:d2:39:3c:8d:5f:7f:13:
c9:65:26:85:22:a1:6f:09:fb:09:1f:d7:17:0b:cd:
a1:49:ad:85:6e:ba:3f:26:a8:85:8f:22:3f:b8:8f:
eb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0D:EF:1B:9E:78:86:BE:CE:18:AD:D8:09:9E:66:75:83:E0:DE:9E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145658.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abc0::/32
Signature Algorithm: sha256WithRSAEncryption
83:8d:c4:b4:30:e6:7e:99:5d:b5:7b:55:2c:3f:16:60:a0:a0:
e8:97:bb:8f:1d:0d:8c:f4:83:e6:dd:20:d0:7b:4e:fb:0f:b6:
7b:37:aa:8d:88:1e:96:14:e2:51:42:e0:e4:cb:a2:79:06:3a:
ab:10:bf:2c:05:66:01:4b:d6:41:c0:3c:62:d2:39:2a:c7:4b:
60:2f:b6:c9:59:2c:1e:fa:47:1b:bc:2a:06:2d:0c:21:f8:ca:
4c:68:05:e8:de:c4:45:71:c8:71:4d:a8:fd:60:d1:3b:dd:99:
09:fa:3d:da:bc:a0:60:77:bb:c5:52:8f:07:8b:ff:1d:0e:aa:
47:25:a6:f6:ff:54:0b:45:68:94:75:cc:9e:d3:a6:be:d4:7d:
ff:f6:ff:ee:83:38:d8:d0:86:0c:64:cc:05:9d:44:56:0f:4b:
88:d6:aa:3b:fe:c9:51:95:ef:2d:7c:ae:97:7b:cb:54:53:5b:
6b:57:c5:4c:db:49:94:3a:a6:88:11:78:ba:f6:81:1c:41:9d:
a3:b1:08:23:60:e9:8e:4f:52:f8:6d:29:83:f5:66:38:63:5b:
fe:9d:b3:47:7c:f4:a5:a9:a2:85:75:63:a0:8f:f7:41:dd:41:
53:4e:dd:a3:99:04:e9:ad:93:98:5d:fc:cc:7f:95:3a:18:8c:
ff:ed:6a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:44 2026 by rpki-client